Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
File: qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json)
Hash identifier: um9SJq59km9zBcAoeJbLe/SpcWfP4PH5bkJPfWAkGD8=
Subject key identifier: 38:13:CD:A7:D0:25:C5:1B:4D:CA:35:90:FE:36:CA:7E:A2:BE:57:FC
Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
Certificate issuer: /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Certificate serial: 019D2B4ECFFC8DFB4DCEA64AF53B56812C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
Manifest number: 0FA0
Signing time: Thu 26 Mar 2026 18:01:18 +0000
Manifest this update: Thu 26 Mar 2026 18:01:18 +0000
Manifest next update: Fri 27 Mar 2026 18:01:18 +0000
Files and hashes: 1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: 9weYCsgFFkf9CBi4AKRT9U/ob8j6+Hue1K83Zoquno8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:cf:fc:8d:fb:4d:ce:a6:4a:f5:3b:56:81:2c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Validity
Not Before: Mar 26 18:01:18 2026 GMT
Not After : Mar 27 18:01:18 2026 GMT
Subject: CN=3813cda7d025c51b4dca3590fe36ca7ea2be57fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:d8:c6:af:6a:64:3f:49:7a:d9:f4:55:81:
b0:41:0f:3f:88:f1:02:55:11:57:c4:37:ef:62:e0:
2a:45:72:33:43:34:a0:41:b5:a0:a7:49:24:e2:e3:
e6:45:23:ab:29:a8:33:49:83:d0:88:ad:62:20:4f:
e3:47:e1:db:e0:76:b9:91:d6:a5:e0:dc:a9:9a:77:
5f:38:76:b0:9f:4d:81:b4:06:1a:16:0b:ad:be:36:
cc:68:2b:a0:92:1f:d3:c9:dc:4a:7e:d0:0a:4f:2c:
e0:52:f4:68:cc:66:29:1e:87:4b:af:63:99:7b:90:
78:4e:5e:f1:e7:36:de:92:59:ec:7d:32:ff:17:04:
33:e7:20:9c:fe:be:a7:9d:84:e8:53:5c:27:4c:1c:
7c:cc:94:46:ac:9d:7f:d8:8c:bb:9d:9c:2d:d5:9a:
a6:36:d7:31:22:ab:86:f8:f1:72:d6:ac:7c:ff:9f:
02:32:94:b1:77:a8:f6:74:11:d9:1f:18:27:59:dd:
9e:7b:0b:ef:87:44:43:c9:d0:54:11:c6:9c:a2:13:
20:a4:2f:a0:cf:3d:8e:df:79:ae:e0:43:2a:30:55:
70:96:e6:01:39:7a:e3:b7:9f:51:a7:a3:80:ac:55:
41:35:79:a0:c7:c7:bb:50:93:b7:51:8b:bc:6f:30:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:CD:A7:D0:25:C5:1B:4D:CA:35:90:FE:36:CA:7E:A2:BE:57:FC
X509v3 Authority Key Identifier:
keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:81:47:1c:52:1a:fb:6c:75:9f:09:b4:48:56:2b:29:55:04:
f2:93:87:1f:2d:e0:98:aa:8b:62:24:c2:b2:0d:2a:f5:7d:f8:
ae:e4:6b:bd:32:f9:0c:4a:a6:bc:c1:3e:21:68:2d:10:12:7f:
55:84:82:f1:6f:8a:86:1f:6d:3a:5b:cc:cc:97:7d:ff:f5:ea:
f9:d0:ae:60:1f:4f:65:cf:e5:79:c7:37:c0:df:f8:b4:30:7a:
0e:ac:15:06:af:58:dc:af:55:35:e8:bb:3c:fd:80:ba:70:7a:
e1:8e:dc:e0:4c:4e:35:79:c3:97:cb:91:fb:d4:37:87:52:2f:
18:ba:5a:02:6c:82:b1:0b:74:7f:45:20:68:b7:23:af:b8:ec:
db:0b:0a:62:3b:42:53:f9:d8:e1:3d:07:6c:3e:77:cf:a4:9b:
94:27:5b:bf:ae:59:cc:91:4a:92:20:08:aa:e0:35:56:20:c1:
a9:52:a3:03:96:77:f7:9a:8a:15:45:09:d1:cb:3b:cf:07:78:
90:6b:25:36:a8:2e:d5:82:78:31:85:28:72:89:36:26:cb:31:
d5:c5:f1:99:7e:3f:d7:ba:e5:c0:08:c9:ab:fd:ec:61:43:a6:
b5:79:d2:e1:1e:42:a3:1f:2e:ae:3a:09:0d:92:55:eb:4a:74:
5f:26:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:22 2026 by rpki-client