Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: yrFs08fosGvRxyTNMU6sDaLLVdCh8fppHWDGiwj2ODk=
Subject key identifier: 86:07:DE:0C:78:F2:0C:7B:CA:EE:5F:CA:E0:C8:83:B7:6F:C6:68:B9
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 019D284D861628D128D3916399DBD0BFFD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 0573
Signing time: Thu 26 Mar 2026 04:01:02 +0000
Manifest this update: Thu 26 Mar 2026 04:01:02 +0000
Manifest next update: Fri 27 Mar 2026 04:01:02 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: Sccuj9tZ/22dQ9IyOMvM4P8FA7oJsVmE4X4oXI4nw4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:86:16:28:d1:28:d3:91:63:99:db:d0:bf:fd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Mar 26 04:01:02 2026 GMT
Not After : Mar 27 04:01:02 2026 GMT
Subject: CN=8607de0c78f20c7bcaee5fcae0c883b76fc668b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:4f:0a:bf:bb:0d:0a:a3:ba:c5:76:a3:5a:
7b:ba:be:c4:2c:9a:27:37:4a:a8:0c:5d:e0:35:22:
b7:01:87:77:b6:17:dc:80:ab:14:49:b9:b4:78:fe:
56:44:95:2f:b6:de:4d:c6:69:b7:1c:71:8e:95:bc:
54:a0:ac:fd:2e:85:dd:d8:0c:38:5b:c3:94:50:70:
5f:c2:56:0f:eb:24:cb:12:d8:71:d2:08:87:e9:03:
e5:55:5b:ef:c4:21:4e:f1:a4:07:c5:f8:bd:3d:86:
ce:32:ec:60:24:77:cf:32:af:ac:ec:af:82:2a:c3:
af:c0:3f:77:61:7c:ba:26:0b:32:1e:5b:32:fb:56:
5c:dc:c5:cf:9c:61:2f:04:b4:4a:cb:54:f4:f5:88:
1f:bc:75:d3:26:bb:8c:0f:57:1b:25:df:59:65:46:
76:70:e4:c3:95:e7:13:fb:43:c3:e1:0a:65:66:50:
5f:15:a3:c6:02:7d:c2:2a:e1:0e:8f:ff:64:7f:a8:
ed:38:2b:87:b9:19:c9:fc:a5:b2:94:1c:c9:ac:ae:
61:30:ad:62:68:45:2a:59:8c:1b:86:80:14:b1:ad:
42:5c:39:d5:de:9a:b0:ff:c3:98:12:4b:b0:17:5c:
9d:f9:51:a3:a9:dc:3a:ea:72:85:29:67:cb:7b:18:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:07:DE:0C:78:F2:0C:7B:CA:EE:5F:CA:E0:C8:83:B7:6F:C6:68:B9
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:94:99:f0:0f:62:ff:56:81:59:13:df:66:8f:6b:a1:10:95:
38:9c:79:69:87:58:48:71:12:e7:9d:af:d2:29:c9:c5:db:de:
d0:ef:26:39:4f:71:c5:d7:48:ce:67:d2:2e:12:28:67:e4:e9:
f3:3c:6f:95:88:75:a0:1a:28:ab:6f:d1:4f:2a:ec:44:7d:77:
68:5b:ac:84:d7:65:b8:87:5b:46:a9:70:4b:db:d4:2c:41:49:
30:96:b0:c6:26:24:d0:13:82:e7:e0:b6:f3:f7:73:1b:de:c4:
0a:00:4c:a1:ef:35:e8:f8:2a:08:0b:68:33:5e:6b:e6:42:5a:
0a:98:7f:58:70:b2:d1:fb:9d:7a:61:68:9d:18:f6:34:a4:a3:
28:7b:dd:f8:c0:34:73:a4:db:19:3a:71:2a:eb:44:7d:74:9a:
8b:e7:2f:12:91:9d:83:cd:e7:f1:1b:13:02:9c:19:0f:4a:d4:
71:e9:64:66:e1:99:ff:4c:a7:94:11:8b:3f:54:cb:58:77:fa:
9c:f0:de:48:c9:9f:ef:95:19:01:8c:58:6d:79:3e:0b:c9:98:
c6:43:e9:c0:86:dc:90:60:6e:07:79:f9:c7:6b:ba:b4:ee:10:
7b:b4:50:01:5b:32:03:da:db:45:b3:0c:29:46:8f:43:a1:ad:
90:9c:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:12 2026 by rpki-client