Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
File: QpBWwzjRbJLN_aHlXQk2givFDNI.mft (raw, json)
Hash identifier: /Dxc/BXQF/06J1Jyhwmm5SIxN+ijKv5XM9aBs3kM3MY=
Subject key identifier: 8C:2C:9F:6B:47:14:A4:ED:38:7A:64:40:0F:8D:87:27:F3:0D:5C:E0
Authority key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Certificate issuer: /CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Certificate serial: 019D29975FCA5B803ABA58759C38F8143DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
Manifest number: 071C
Signing time: Thu 26 Mar 2026 10:01:19 +0000
Manifest this update: Thu 26 Mar 2026 10:01:19 +0000
Manifest next update: Fri 27 Mar 2026 10:01:19 +0000
Files and hashes: 1: QpBWwzjRbJLN_aHlXQk2givFDNI.crl (hash: E+XkFKbWG0xeG9WyBi99mxUeXvWl15MYTBkyBMSKfEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:5f:ca:5b:80:3a:ba:58:75:9c:38:f8:14:3d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Validity
Not Before: Mar 26 10:01:19 2026 GMT
Not After : Mar 27 10:01:19 2026 GMT
Subject: CN=8c2c9f6b4714a4ed387a64400f8d8727f30d5ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:fc:74:fb:d8:0b:c9:ab:88:d4:5f:df:8d:
e4:f5:44:03:cc:a3:e6:8b:21:ed:ae:35:13:21:0d:
b6:fa:19:a4:b5:8d:e5:c8:fe:3e:7b:f0:6a:f5:2f:
9d:6a:5e:44:a2:0e:f8:c6:8a:62:a7:d7:b0:0a:1e:
63:79:1a:19:f9:65:d0:71:06:27:fb:e0:95:18:39:
38:b3:0e:6c:72:32:81:cc:07:cc:01:2f:dc:c6:3b:
f8:c8:f1:69:0a:8d:89:36:62:73:9f:42:af:f8:1b:
57:cf:e6:86:b4:69:b1:2b:61:40:d7:80:76:b5:1e:
22:a4:f2:a8:ee:da:82:ab:48:3a:1b:1c:bc:0c:8b:
de:20:88:f0:98:3c:cb:b0:2f:b8:32:ec:df:13:85:
d4:78:17:0d:fe:70:f9:92:11:06:bb:52:74:39:3c:
60:12:20:ed:67:2c:8f:d3:06:ac:6b:06:9d:f6:52:
15:46:28:e6:ae:83:b2:6e:67:05:ee:04:cb:7e:65:
33:b8:7a:91:f3:86:c8:45:3a:22:a4:fc:2d:a3:c5:
0a:84:06:76:65:1f:60:18:2d:5a:86:92:01:7b:29:
df:34:69:84:6e:1c:5e:19:93:f0:ec:c9:e3:22:c3:
cb:ba:5d:9a:eb:c2:81:24:7b:d1:ce:e0:c1:cb:4e:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:9F:6B:47:14:A4:ED:38:7A:64:40:0F:8D:87:27:F3:0D:5C:E0
X509v3 Authority Key Identifier:
keyid:42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d0:3f:45:c7:4b:c4:da:37:f9:54:9d:65:a5:31:99:94:78:
b1:c4:a1:cf:06:d5:59:52:6f:fb:91:fd:02:2f:73:70:b4:9b:
79:89:fd:1e:ae:e4:a4:9f:26:e7:b0:c8:34:7d:32:6d:78:f3:
a3:02:e4:cf:51:2e:85:f0:ef:f7:7a:37:3b:30:3f:ac:bf:a1:
58:f0:9a:0f:a3:8f:43:e0:6b:01:5e:4a:dd:1e:25:ac:53:78:
e8:2c:c8:9f:fd:7e:91:be:f5:72:5d:4d:b8:30:f5:88:a0:e7:
6a:d6:fa:8d:14:c4:23:10:a2:a0:6d:3f:ba:7e:d0:e9:05:b2:
2e:d6:4f:2b:31:9c:12:62:a8:cc:76:8f:d9:51:1d:5a:a5:79:
02:71:21:9e:16:96:51:24:0a:9a:c6:36:1c:a4:4f:99:0c:81:
bf:81:e6:6c:ce:f6:ed:93:5b:96:d2:09:58:b2:b6:6b:f3:a0:
11:e5:d0:94:34:77:17:c1:f6:db:26:91:0b:7e:44:71:c1:de:
f3:a9:2d:09:25:47:5d:44:7a:89:35:1d:78:17:68:dc:48:a9:
63:38:e1:6a:0f:b1:3c:f7:f0:3b:fc:1f:92:c0:ce:c0:0a:6b:
8b:5b:16:71:d5:56:12:e6:1d:8c:7f:13:f0:d4:ec:66:7d:d5:
5d:69:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:32 2026 by rpki-client