Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: dKHV7r+mMr4/Q32+Ya28Q/gMzEaAwrMNnQapWgDatj8=
Subject key identifier: EA:D6:06:B2:4F:D4:16:07:27:96:84:5D:D6:63:92:DD:A5:50:D0:EA
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 019D28BB41B34A1D3A47A7047BD2BD39DEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 0806
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: BnhrltB3q71gPyL1W5V+Yh+lxt7UuxyFCUedhCxPiUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:41:b3:4a:1d:3a:47:a7:04:7b:d2:bd:39:de:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=ead606b24fd416072796845dd66392dda550d0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:ff:6c:af:2a:6c:24:71:84:8f:6b:b4:6b:
dd:26:b6:d9:f5:85:67:00:04:6c:ce:0e:8b:3a:46:
59:bc:7b:34:00:5b:95:f6:76:89:0c:c7:c7:58:b7:
63:da:42:c7:4d:15:29:0b:fc:cc:e0:40:83:59:1a:
42:78:37:8d:1a:3b:be:05:97:04:5c:9f:3b:46:ac:
72:ae:2a:83:70:60:f9:87:7a:ce:24:50:5c:d5:ce:
4d:80:cf:b7:d8:8d:42:e3:55:25:be:75:74:e3:eb:
98:ec:e6:f0:bc:0e:97:fd:8b:85:b8:ac:77:c7:2a:
58:92:84:11:3b:64:3e:2c:62:67:11:6f:d2:33:55:
72:35:71:db:2c:45:5e:cd:ec:3f:25:96:43:54:e8:
f6:92:40:b8:5d:6a:23:40:f4:91:b5:9f:2b:20:6d:
87:dd:4e:ca:ac:13:71:a2:16:17:97:60:b7:85:73:
a6:50:05:8c:cb:ce:9c:53:d8:7f:04:60:14:02:91:
72:56:3f:ef:90:5b:d4:4b:39:8f:d2:13:6a:5a:0e:
f7:52:21:b4:5d:b8:f9:81:fe:62:4e:b6:00:01:f6:
e1:16:e7:d2:41:3b:37:af:62:63:1d:a4:72:2f:a4:
c3:40:24:16:11:e0:c8:5f:32:2e:35:4f:9d:e6:ec:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D6:06:B2:4F:D4:16:07:27:96:84:5D:D6:63:92:DD:A5:50:D0:EA
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:06:95:e5:df:bd:cb:44:45:9e:29:87:9b:55:18:21:33:cf:
af:80:96:77:39:47:11:b2:47:8b:fe:c2:0e:20:a0:d8:b2:5f:
f0:ce:79:f5:ac:06:5a:c1:59:77:7b:0b:f4:6b:6a:f1:a2:3d:
44:90:14:c5:6a:d8:a9:33:be:bc:41:f4:7f:c3:1a:2a:d3:12:
09:52:61:b5:89:fe:61:0d:a6:3b:01:80:71:84:48:0a:3f:14:
9a:39:db:41:e1:bd:b0:db:ee:66:1f:13:ed:a9:21:e3:7f:e0:
31:f5:5f:08:90:49:7d:13:96:a5:19:e1:c2:26:1b:86:b3:53:
84:17:cd:88:8c:dd:c3:0b:0b:a6:26:81:c7:5c:0a:b4:9f:c7:
5b:d4:b5:cf:78:ac:8f:66:14:99:25:54:10:28:3a:cc:98:14:
9e:d4:8e:1a:39:93:1d:54:66:b5:ce:32:7e:64:ba:c2:a8:49:
1c:d9:9f:0b:0f:80:fb:41:16:3f:6b:4a:13:88:d4:47:67:c5:
55:cb:4c:52:b2:b9:fa:bb:77:9d:ea:9e:77:de:40:9e:dc:5a:
ff:00:f5:48:41:72:a5:05:8d:c1:04:ad:da:ad:47:db:6c:35:
33:95:50:df:a1:f4:95:32:79:eb:78:6a:07:c3:c2:1d:f4:d2:
c8:c8:17:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:12 2026 by rpki-client