Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: 5wUNvWrr22gLaxauHnpZhA46lqQgVN1qB4tJmGd+2ys=
Subject key identifier: 06:AE:38:00:FF:5C:5A:14:61:61:43:27:AE:9C:28:91:CD:F6:6D:98
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 019D329A7DA2C71D48F6E300CE6262AA152A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 04:01:18 +0000
Manifest this update: Sat 28 Mar 2026 04:01:18 +0000
Manifest next update: Sun 29 Mar 2026 04:01:18 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: y9+nCozzwPpJpVLD3NN4nRM1WVmTFpofPh04SgPW314=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:7d:a2:c7:1d:48:f6:e3:00:ce:62:62:aa:15:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Mar 28 04:01:18 2026 GMT
Not After : Mar 29 04:01:18 2026 GMT
Subject: CN=06ae3800ff5c5a1461614327ae9c2891cdf66d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:0d:3b:31:e0:b6:4f:8d:13:23:41:fc:49:
7e:6f:e0:5f:42:a0:f7:f6:de:be:a0:3f:f0:8a:7a:
fe:3f:d3:19:1d:7a:d3:f9:69:57:12:0d:06:17:0b:
45:f5:d0:70:f6:cd:e1:9f:13:96:8a:3c:69:04:fe:
60:c3:bc:f9:9e:8a:97:15:a2:29:68:ff:35:8a:39:
bb:aa:a6:34:2c:a1:df:2b:b8:af:3d:72:a9:cf:c1:
bf:97:02:39:3e:6b:08:ed:23:0c:0f:0f:e0:7a:30:
04:f5:23:86:16:48:4e:c8:cc:33:79:0f:8c:61:09:
e9:3e:e8:40:6e:1d:ff:15:51:f0:6c:21:2d:e1:8d:
e3:3b:6c:17:ff:e0:a5:6c:c1:92:ba:3e:bc:9b:9e:
e1:2b:f3:c9:22:3e:61:0f:15:93:ef:8b:9f:b9:82:
f9:1a:1b:a3:ce:a0:22:e1:ad:cc:b0:f9:06:8b:c8:
b9:32:9a:1d:2a:50:b3:3d:57:fe:45:ba:cc:c5:4f:
ca:8a:57:9d:3b:65:b7:d5:f8:ed:b8:04:e0:49:14:
37:82:23:8c:f8:43:3d:0e:4c:d5:85:b5:10:4c:7f:
76:e8:be:f3:b1:58:48:6b:5f:c9:b8:ba:4a:f6:22:
70:f2:55:0d:83:6d:49:bd:03:fb:0a:c0:16:65:30:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:38:00:FF:5C:5A:14:61:61:43:27:AE:9C:28:91:CD:F6:6D:98
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7e:fd:2c:04:6c:57:b1:e1:17:b5:5a:9d:cd:63:61:d3:40:
7d:39:24:f5:aa:70:bf:96:c6:30:69:0d:cf:b6:fc:a0:b7:9b:
1f:b4:58:a6:ae:26:9d:63:0c:be:e0:52:cf:51:5d:3a:fe:2a:
08:27:fe:9b:4f:f4:9f:01:3f:4a:e5:17:f5:80:2b:cc:b0:0d:
f1:e3:33:dc:7f:27:ad:0e:19:67:4d:36:96:d9:b6:ed:6a:33:
82:6d:71:b4:0d:33:73:26:9d:e4:08:1d:64:66:0b:14:87:73:
7c:a7:09:d1:22:5c:ec:46:70:73:a6:bb:fc:88:08:c4:33:0c:
01:ce:22:0d:ec:11:cd:99:54:f7:8b:57:21:ad:69:e1:86:d2:
75:95:31:c0:a5:8f:a9:17:9e:46:0c:08:c5:ad:1c:5b:7a:ce:
90:60:7a:39:21:d2:d0:79:4d:95:ce:57:48:81:d5:a7:82:a4:
fb:a7:a6:0e:54:bd:b3:60:44:c9:55:63:d5:73:1f:03:cc:9c:
b6:ea:91:c8:05:28:58:c5:26:e2:9a:76:f5:11:10:3b:b8:20:
00:00:66:c0:a9:a6:82:c0:4a:02:3a:9a:83:95:29:e7:3a:fb:
e4:ec:da:c1:d0:f1:3e:02:93:03:6a:b9:d4:49:9f:ed:e5:6b:
fd:64:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:29:39 2026 by rpki-client