Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json)
Hash identifier: 5lFU6a+QiIBWnTElSGAw2iWykeIo9zcvOYYrZyX/v/Q=
Subject key identifier: A9:2B:5D:6B:C3:46:EF:3B:D2:1B:7E:01:72:8B:4C:75:B6:4A:59:08
Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Certificate serial: 019D2771D232D3E9F32BAA80FF70FDB316BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: Jnyyol7XwpBWKiNr6GhBiJmSofePPoj7sO658sBI5sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d2:32:d3:e9:f3:2b:aa:80:ff:70:fd:b3:16:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=a92b5d6bc346ef3bd21b7e01728b4c75b64a5908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:2a:ac:1f:90:2d:9d:95:7e:11:bb:04:75:
f6:55:1e:0d:a9:6c:c2:ae:5c:aa:de:1f:ed:55:30:
b4:e2:b0:a1:19:cf:a5:a1:d6:10:90:7b:9e:42:52:
6a:f8:28:8e:a1:ea:e5:60:6b:a6:61:7a:a4:e6:6f:
d7:66:f1:9c:4f:f6:ad:03:c2:ab:c1:20:60:35:4b:
ce:64:ab:75:9d:dd:25:3b:d6:2e:32:48:5e:c7:d6:
9d:ab:9e:e0:77:52:2f:79:1d:97:1e:bf:93:d2:4c:
19:32:bb:86:23:e2:ca:a4:d3:da:a2:01:a6:40:db:
60:b9:7e:b2:48:2e:17:31:5b:18:38:61:66:89:d9:
fd:c3:8e:7b:92:6a:1a:53:47:fb:cd:7b:e6:bf:60:
3f:9e:7e:3d:b8:47:30:c8:d9:2f:a6:03:53:00:a6:
b0:fc:ea:bf:d9:c1:ad:ae:5f:79:0a:73:17:46:be:
c3:1c:13:b2:cb:3d:14:3b:e6:71:42:be:d7:bd:e0:
8b:85:c5:6d:0f:76:55:a9:28:9d:6e:b6:7c:bd:b1:
4a:71:e0:5a:68:8b:30:1b:28:50:a9:e2:15:d5:3e:
a8:34:b3:39:65:b5:fc:db:a6:bf:3c:2e:2b:6c:0f:
b5:89:87:db:b1:21:2e:36:27:a4:65:45:00:c2:f2:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2B:5D:6B:C3:46:EF:3B:D2:1B:7E:01:72:8B:4C:75:B6:4A:59:08
X509v3 Authority Key Identifier:
keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:f1:68:f1:eb:d1:9c:6c:f9:8c:f5:aa:23:e1:a8:aa:1b:ad:
5f:7f:c4:cc:ff:a7:d6:cd:ef:41:8d:a9:7b:0a:93:b7:8e:fe:
58:dc:f6:da:dd:7b:6d:e6:61:f3:51:bc:df:b5:0d:c7:08:c8:
e7:13:82:95:c9:ac:47:b2:40:49:46:fa:cf:72:5c:26:5e:0e:
3f:0d:3d:33:92:81:77:ed:7a:f3:2f:42:40:9a:fd:f8:71:ba:
e0:f8:14:29:3f:4b:81:93:e7:9a:8e:c1:e5:eb:0e:21:89:90:
4e:d0:8c:d7:8b:9b:e0:a7:83:0f:af:be:7c:4e:eb:33:57:95:
d8:44:0e:9f:6d:a8:52:d9:ab:f7:3b:49:be:19:b0:26:a1:1e:
1d:9a:47:77:8e:dd:96:34:3c:c7:dc:e3:1c:28:d6:5a:df:25:
4a:44:a0:54:2a:06:15:91:20:d6:7e:ee:9d:af:a4:db:3a:a1:
fb:c2:39:6a:31:eb:02:9a:38:a7:ac:ba:7d:93:a3:35:29:ac:
4e:47:35:bd:fd:f0:33:cc:9c:63:9f:11:b5:54:3d:3b:8d:9e:
e9:a9:f5:64:52:e3:5e:33:3b:fb:d5:4a:fd:9a:43:e1:6e:5d:
59:fe:d7:6f:fb:9e:fc:c5:9e:4f:3e:62:8c:45:37:ac:92:f1:
e4:68:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:30 2026 by rpki-client