Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: geF9KphKL4hnIYrQGlKtpg11rkUZuU8H0OVm+9QmooQ=
Subject key identifier: EE:C5:8D:2E:D3:B1:45:2F:36:15:E9:B7:09:7D:3E:99:0C:A7:89:30
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 019D28F2D7B4A563EE6C8014EFBEF563380A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 09EC
Signing time: Thu 26 Mar 2026 07:01:36 +0000
Manifest this update: Thu 26 Mar 2026 07:01:36 +0000
Manifest next update: Fri 27 Mar 2026 07:01:36 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: KayCKlv9W4gxbsPLkL+Q63ZIYXlRCoE2tywt8NmTDwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d7:b4:a5:63:ee:6c:80:14:ef:be:f5:63:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Mar 26 07:01:36 2026 GMT
Not After : Mar 27 07:01:36 2026 GMT
Subject: CN=eec58d2ed3b1452f3615e9b7097d3e990ca78930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:06:1c:9a:07:86:b2:92:fb:ac:85:2d:f5:
3a:ac:b4:0d:a0:a4:1b:30:fe:80:24:11:5a:07:75:
58:f4:96:ba:96:94:c4:f7:5b:12:09:8c:c3:3f:b9:
fc:4e:5f:cc:a4:c3:37:0c:ba:d2:7a:36:81:52:db:
e5:9c:e7:32:9d:fd:ff:76:bc:45:4a:a3:77:e7:c3:
f6:6a:99:46:d5:5b:ed:4a:7b:02:e0:7c:3e:35:79:
0c:55:87:28:4e:f9:b3:70:61:a0:4b:b8:7f:62:a8:
1b:59:5f:09:73:bd:b1:25:07:44:ef:79:1c:9c:52:
f4:34:97:b0:f7:dc:bc:a6:e9:17:a4:ae:82:90:70:
5e:56:70:34:10:75:e1:0e:bb:e5:70:f4:36:5e:34:
ed:3b:fc:34:ae:84:94:f5:19:bb:69:fe:2a:49:f6:
a1:5b:cc:aa:ca:81:a5:2f:92:c2:7c:31:0f:16:26:
c3:c5:63:89:aa:f3:92:fd:ab:e4:4c:e0:d1:2f:d2:
14:6d:aa:c0:9c:a3:9f:12:5d:00:f6:80:67:e3:4d:
22:ad:9f:08:bd:f7:88:a7:df:4e:d8:bf:09:fc:42:
fa:c9:ef:b5:17:6e:a8:5d:f1:c6:b3:5a:e7:13:a1:
c1:34:b4:47:7f:f5:5c:70:49:3f:e6:37:5e:04:6e:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C5:8D:2E:D3:B1:45:2F:36:15:E9:B7:09:7D:3E:99:0C:A7:89:30
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a7:40:c5:5e:bd:fb:91:73:83:a2:33:19:16:bd:86:7c:7b:
fc:7e:99:3e:62:15:2e:04:7d:4a:af:ca:63:f5:c4:6c:70:d5:
ec:6c:1d:65:0f:b1:7d:77:01:c8:d9:0b:fd:f8:60:14:4f:02:
5c:0f:69:cf:88:2e:88:a0:ea:bd:60:e7:f0:2b:ae:33:51:58:
d3:be:4f:19:fd:83:7f:3e:d9:4a:91:e1:e1:10:f9:41:07:12:
06:27:c8:fe:a8:9c:2b:68:62:46:ca:2f:88:bb:df:f0:66:9f:
59:17:de:15:ec:a5:bd:25:33:3f:7a:6e:07:8d:c0:90:ff:ef:
71:f6:d9:f3:a9:c8:a3:38:32:18:db:8f:66:e8:df:79:5a:21:
61:92:d5:98:19:d2:4d:91:8b:a2:c9:1e:63:fd:b3:83:8e:a8:
41:16:fb:c5:d0:11:db:0f:f6:11:1c:8c:1f:cc:b6:19:c5:fd:
33:50:a5:7a:27:c2:69:06:0c:bb:1f:5f:cb:db:f5:7b:c6:68:
8e:08:8b:8e:44:16:25:f6:a3:18:28:35:15:ad:26:f7:4c:2e:
c1:34:04:42:c2:b8:8e:c6:39:3d:e4:c6:e0:0f:d4:ab:07:63:
b0:dd:0f:3f:48:2d:2b:b6:ea:f9:70:44:39:77:54:b4:58:cb:
fc:29:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:04 2026 by rpki-client