Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: 5OHNLva0df5sdHcX6VjM6dWxbZU4AFWiNhjk3B5ltbY=
Subject key identifier: CF:83:C9:2A:2C:91:FF:54:64:01:F8:05:A5:0E:BE:76:AC:32:4E:19
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 019D28F30E04B3BEDDE9413CC805C48FA76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 07:01:50 +0000
Manifest this update: Thu 26 Mar 2026 07:01:50 +0000
Manifest next update: Fri 27 Mar 2026 07:01:50 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: K4cw9hfHvDROrAKINlDBIqTJD4un+6931ttnBT0QnvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0e:04:b3:be:dd:e9:41:3c:c8:05:c4:8f:a7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Mar 26 07:01:50 2026 GMT
Not After : Mar 27 07:01:50 2026 GMT
Subject: CN=cf83c92a2c91ff546401f805a50ebe76ac324e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:c4:42:1d:88:f0:c3:52:8f:5a:cf:7f:1d:
e7:37:42:44:fe:af:64:d3:12:85:29:67:58:87:66:
06:52:43:34:d8:e1:14:cd:19:50:11:51:98:49:0a:
51:b1:98:64:24:d7:14:19:81:00:5e:e1:32:29:56:
b3:86:11:c9:f7:cb:e3:5f:7a:8b:6a:34:97:61:42:
61:84:58:02:9f:d0:36:6e:87:d1:3c:9e:ce:06:59:
71:4e:fd:bb:92:b0:11:78:a1:27:86:d0:09:e8:82:
74:ea:96:20:3f:83:73:0a:0b:c2:41:70:1e:22:96:
e5:bf:80:87:4a:83:b7:9e:b4:d4:47:d6:31:6f:58:
e6:d5:ee:d3:b9:87:f4:54:25:d8:85:93:46:58:ee:
88:81:a5:85:49:3c:21:77:49:15:5a:70:6f:37:c7:
f7:2e:22:6a:9f:39:17:d9:d4:01:0a:4b:1e:d9:21:
af:ec:e5:31:32:4d:f7:71:60:8e:60:8a:63:ed:1b:
6c:82:2a:73:da:ce:e4:97:d1:19:5c:0c:67:02:90:
c1:b7:7c:b1:88:97:4e:06:f7:8f:6c:e0:00:3a:03:
41:44:ed:5a:45:1f:57:8d:4f:5f:9c:72:61:39:a1:
12:b1:b8:db:2d:3c:79:a6:f2:fc:48:7d:ab:fd:30:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:C9:2A:2C:91:FF:54:64:01:F8:05:A5:0E:BE:76:AC:32:4E:19
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a5:ce:7d:49:70:f4:10:6f:0b:c3:d3:d8:f5:23:eb:bc:48:
31:b5:62:ac:1b:85:fe:df:7a:7c:05:46:8b:2d:76:fe:56:b2:
5b:63:f6:52:49:94:ef:59:81:31:94:b4:11:0a:6c:e3:32:4b:
86:7a:84:05:78:7e:06:4d:d0:2c:b2:96:80:ae:15:e1:28:89:
59:6f:71:1d:80:a3:24:a5:dc:5b:29:cd:ea:99:38:16:e6:82:
60:f9:80:5f:19:a0:86:25:12:2b:8c:15:54:d7:02:dd:eb:e6:
cc:0d:9a:36:6e:c5:4a:39:27:ff:b5:90:29:a0:2a:dd:0e:89:
eb:e5:dd:1c:4a:75:75:4c:54:39:95:3c:33:32:b8:f0:03:53:
67:c7:d5:d2:e8:4f:86:3b:c7:d3:c9:d1:07:85:87:00:17:07:
a7:65:39:dd:98:26:ef:80:51:e1:95:53:27:e5:f5:9d:96:9b:
90:70:6f:4d:45:34:d8:67:a1:3a:da:6d:65:72:6a:b7:77:4b:
2c:66:6e:71:6d:20:11:bb:12:3d:4a:f4:26:4d:a2:b5:5e:04:
90:56:32:13:48:4a:d8:ce:a6:83:54:79:7f:72:a9:c1:89:82:
83:87:7a:c1:98:56:3d:5c:1d:56:93:b3:e1:73:2f:5e:f6:30:
44:b9:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:05 2026 by rpki-client