Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json)
Hash identifier: mnu28m4pTgW7kr5pR0gNdEqD3AhI2EE42Il6vhIQ+7c=
Subject key identifier: 1E:BC:F5:8A:08:58:56:95:44:C5:B5:F4:51:16:3F:9B:08:30:F2:04
Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Certificate serial: 019D27DF94E1408F3DABE17A93CEA2FF41E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
Manifest number: 0611
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: 6liHGfEmWhrmcI5YGPfddq5SjeUDjvG+KO3mgaGYLUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:94:e1:40:8f:3d:ab:e1:7a:93:ce:a2:ff:41:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=1ebcf58a0858569544c5b5f451163f9b0830f204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:57:21:29:1c:e6:8a:6b:67:d3:e2:f8:c3:a0:
c9:c6:e4:eb:c3:72:ce:17:b8:05:a4:df:55:6c:4b:
2a:97:23:48:50:47:ce:df:e3:ad:46:14:24:a1:fd:
e7:19:ca:36:2b:f0:42:97:21:65:f6:7e:70:78:b0:
c7:fc:ca:93:47:2a:e7:55:fb:0b:c3:ca:27:38:b3:
9f:19:3f:dd:2d:23:e3:fd:3f:a8:4f:0f:a2:dd:94:
dd:91:7e:c6:f9:94:00:eb:fa:1c:42:3f:f5:6e:b7:
cf:fa:d4:c4:3b:c4:44:a9:59:e6:9e:f2:bb:3a:36:
66:d9:36:e1:f9:74:ec:74:27:d6:7d:41:1e:25:f8:
bb:50:69:5e:44:45:0e:0f:d6:ff:27:98:8a:be:1b:
ab:4f:6e:c5:0d:87:a8:c3:1a:44:c4:66:b9:2d:9f:
6e:85:cd:02:bd:3c:9a:e3:4c:f4:56:df:fd:c0:34:
b5:be:62:84:00:f0:c8:44:33:03:6e:7c:a6:b2:4d:
dd:86:a5:01:b0:f8:24:b3:68:18:cb:b1:e2:28:51:
80:ac:61:5e:69:b9:25:6c:8a:e0:e4:f5:28:f2:5b:
b5:97:2d:b2:4b:89:42:a7:98:60:2e:c3:da:97:77:
3a:ec:10:60:aa:d9:30:0d:bb:7a:d8:7f:27:d9:44:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:F5:8A:08:58:56:95:44:C5:B5:F4:51:16:3F:9B:08:30:F2:04
X509v3 Authority Key Identifier:
keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:00:19:21:13:35:4e:8b:9c:eb:68:94:13:8d:8e:cb:3a:f4:
ee:30:e6:1b:28:b4:9a:c6:72:ed:18:b0:f3:21:3b:6a:e7:bb:
b8:ee:ad:e7:49:83:56:d0:e1:c0:45:72:d6:ce:5f:c1:b2:b8:
e3:21:4b:93:59:fb:d0:2a:1c:03:16:c4:60:fc:15:32:4c:92:
d7:18:e9:7d:f4:6d:e1:9f:d7:d1:12:e3:e2:bd:cb:ef:02:2a:
33:6f:80:1c:f8:15:45:70:9b:93:33:94:f0:06:c9:b3:e5:7a:
d6:4c:de:0f:41:bb:1c:72:9f:20:78:4d:a2:ec:97:e5:da:9f:
c7:35:c2:e9:5b:27:b5:4f:75:53:a6:e0:9e:cd:36:64:30:47:
26:de:d2:f5:91:6f:59:45:fa:19:84:33:c8:de:e2:3b:80:20:
bb:5a:fd:35:ad:44:f1:64:0b:be:38:66:cd:a8:b4:da:50:5b:
89:cb:78:c5:6b:8a:45:e6:6f:6f:ed:fe:b8:47:31:59:c4:37:
67:b8:c7:42:16:ba:d0:9e:67:96:19:2c:d6:3b:1b:aa:94:58:
20:b2:81:41:73:78:78:f6:df:3f:0b:ac:67:56:4c:da:63:f3:
8c:c8:07:48:b8:20:49:c1:a9:4a:fb:5a:f9:ca:09:19:74:6b:
f2:0c:13:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:14 2026 by rpki-client