Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
File: QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft (raw, json)
Hash identifier: CSufKaTasPFtQ7FcOkUTo5aKJ3+62cP+ml68yyfLbzQ=
Subject key identifier: 90:59:CC:44:45:92:B3:7E:B3:3A:48:11:BB:BC:10:F9:D5:85:15:B0
Authority key identifier: 40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36
Certificate issuer: /CN=4007f1baed066bdbced1cf4355191bf8ac47db36
Certificate serial: 019D26283871FC38009117BB89C5BF75382B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
Manifest number: 0115
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: QAfxuu0Ga9vO0c9DVRkb-KxH2zY.crl (hash: qRlCf+V7zj4cbuv9EQ/mLDIecEkULuURSXvSqo/KBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:38:71:fc:38:00:91:17:bb:89:c5:bf:75:38:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4007f1baed066bdbced1cf4355191bf8ac47db36
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=9059cc444592b37eb33a4811bbbc10f9d58515b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:45:19:26:26:cc:9d:9e:97:3a:e1:3a:41:
66:dd:f7:7d:6d:d5:2a:da:30:e9:0c:f8:37:59:c0:
a8:87:60:0d:fb:d1:fa:1a:f0:4e:8a:eb:db:e5:b9:
74:5b:bc:bd:e4:0f:f3:25:26:7c:c9:7a:b0:18:65:
d6:24:f8:9d:5e:3a:47:d6:51:8c:a0:21:95:3d:37:
92:31:85:70:ed:a1:52:34:83:6b:2d:13:93:e6:82:
7a:b2:89:03:89:76:9c:f1:ea:88:c2:af:f8:8d:3f:
f4:6d:eb:64:e0:12:70:9a:af:2f:68:87:54:97:46:
1a:ae:e8:16:e6:56:7a:0c:df:f8:b0:81:d2:2e:6d:
ef:89:f2:d9:a4:24:c1:2a:82:91:02:7c:a3:b7:97:
f3:37:e6:50:c7:18:8d:8d:b6:f5:57:b9:3a:fb:ca:
f7:c7:da:3c:86:7c:52:c6:8a:df:eb:df:73:54:60:
15:07:7f:d6:ed:fe:60:b1:e4:f6:87:d4:d2:23:4e:
80:c9:11:a6:35:57:65:1b:2b:10:ce:83:69:db:17:
ef:87:2c:7e:1b:a7:a2:1b:0a:12:cb:45:87:b2:d0:
87:06:8c:c1:be:05:68:e6:87:27:f8:6a:c4:5b:ad:
04:dc:d3:9e:8e:4d:b3:20:da:fd:d0:35:f6:6d:a9:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:59:CC:44:45:92:B3:7E:B3:3A:48:11:BB:BC:10:F9:D5:85:15:B0
X509v3 Authority Key Identifier:
keyid:40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c3:32:72:57:34:de:71:4c:b3:7f:2a:9a:eb:f3:66:54:d5:
75:ea:9b:84:ee:98:37:2e:44:b6:c7:88:35:9c:12:2e:b8:45:
78:a1:f6:bc:5f:30:01:75:a4:3a:15:ef:f6:72:77:10:c1:65:
24:19:76:ab:ba:f5:4d:d7:c5:2d:18:aa:27:1b:cc:78:a0:5f:
2b:ce:0e:a2:00:52:f0:6f:8b:37:28:cf:be:7e:74:73:fb:12:
d5:f8:59:c3:73:55:b2:62:b3:50:a8:4f:71:89:8f:fc:09:b0:
de:00:d5:d3:2c:00:9e:ef:7a:e7:fd:e0:ef:47:7c:0b:3a:d1:
91:34:fe:99:88:84:59:96:1b:65:41:33:87:5f:33:98:bd:16:
0d:30:2d:94:bc:df:e8:6e:45:f8:c8:be:2b:3e:57:42:bb:1e:
58:2e:5c:b9:ae:06:fc:77:70:65:80:66:32:4b:c2:21:e8:a1:
31:86:b8:1c:e9:d1:cc:b4:d8:b7:cd:91:5e:72:a8:fe:d3:5a:
bc:d8:85:d7:a0:6c:bd:98:49:3d:f7:4d:fa:f0:16:df:6b:2a:
f4:a0:f3:d7:a4:ed:bf:aa:df:30:02:f5:60:fb:27:eb:e6:39:
ab:78:5a:cf:b3:78:65:e4:af:0b:d9:e9:f1:15:8a:08:b8:1d:
4a:5c:10:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:30 2026 by rpki-client