Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft
File: qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft (raw, json)
Hash identifier: OYV8uUzYh4G1wQe9WuzB+IIMze0ViEaqzjMTb2eZIFY=
Subject key identifier: 18:8D:1A:A2:CA:73:7B:21:08:02:90:5C:24:3E:21:47:88:95:F6:B0
Authority key identifier: A9:F0:80:A3:E9:EA:41:0D:1B:8F:06:5C:C2:92:3A:59:FF:6A:C1:01
Certificate issuer: /CN=a9f080a3e9ea410d1b8f065cc2923a59ff6ac101
Certificate serial: 019D265FC895BB8C9F5B7A0C965A53522BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft
Manifest number: 011F
Signing time: Wed 25 Mar 2026 19:01:44 +0000
Manifest this update: Wed 25 Mar 2026 19:01:44 +0000
Manifest next update: Thu 26 Mar 2026 19:01:44 +0000
Files and hashes: 1: qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.crl (hash: 07nVOHld/UOa84PVFeL+aNNo1M1FxNs6R2Q2M6tAj40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c8:95:bb:8c:9f:5b:7a:0c:96:5a:53:52:2b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f080a3e9ea410d1b8f065cc2923a59ff6ac101
Validity
Not Before: Mar 25 19:01:44 2026 GMT
Not After : Mar 26 19:01:44 2026 GMT
Subject: CN=188d1aa2ca737b210802905c243e21478895f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:76:11:19:24:69:09:62:54:bb:6b:6f:b7:
dc:fa:76:4a:dd:52:a4:ec:60:f7:7c:51:ca:f6:d1:
56:6f:dd:4c:ef:26:7e:92:cf:21:20:69:8c:32:5f:
41:91:51:6a:c7:a3:38:47:3c:47:2b:4c:21:e9:72:
a4:b1:f7:a6:f8:6f:b7:6a:bf:3b:27:f6:0f:e2:84:
8d:28:e7:33:c4:b7:3e:e9:07:2f:45:f4:9d:19:6e:
47:19:16:e0:c8:f9:7b:65:f3:a3:c3:9a:fb:44:50:
f0:45:10:cd:f5:04:48:5a:fc:d5:78:d6:1c:c4:95:
bc:aa:55:cd:da:8f:cc:4e:90:5b:d5:16:c7:bc:f5:
7f:91:9a:df:a8:d6:4d:64:d1:5b:e5:b9:fe:e2:e3:
b6:40:56:f1:f3:39:85:fc:b2:d9:d6:a5:ff:15:f3:
c6:e0:1d:58:7b:4b:b4:a7:61:94:52:23:67:1e:13:
5a:28:e4:b1:56:50:fb:0e:be:0e:17:7e:ef:fb:38:
81:06:66:57:d3:3e:2a:66:ed:f3:dc:79:53:1a:ee:
64:1b:a3:c4:3a:62:e6:23:68:95:c8:eb:cd:c7:e4:
95:cc:79:ca:58:44:75:1d:6c:d6:2b:6e:0e:e6:c0:
89:be:a2:e0:36:2e:3e:dc:6c:5c:d1:f4:f5:8b:de:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8D:1A:A2:CA:73:7B:21:08:02:90:5C:24:3E:21:47:88:95:F6:B0
X509v3 Authority Key Identifier:
keyid:A9:F0:80:A3:E9:EA:41:0D:1B:8F:06:5C:C2:92:3A:59:FF:6A:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cf:7f:66:ac:e9:05:ac:b9:60:e7:4b:b9:d3:1a:9c:9f:a1:
1d:13:69:dc:56:8a:5f:c3:a5:86:61:41:23:3e:ba:a6:8f:c7:
22:97:db:9b:b0:01:33:e2:61:ef:6f:45:17:78:06:d6:a7:0a:
08:d5:5b:83:59:9b:09:62:f1:06:16:6b:c4:4a:d5:e0:8b:7f:
f6:6c:41:3e:a4:8c:c9:6d:29:f0:c6:3f:37:90:5e:90:23:7e:
99:d2:cc:ae:1c:53:94:f8:0c:4a:e6:98:0a:a1:c7:06:7c:72:
a0:4f:7f:ab:4b:f7:5e:bd:30:cf:f7:da:54:76:40:e7:34:85:
2b:41:bd:55:d1:92:ad:f6:2d:c5:0d:6b:d6:28:7b:e6:d0:69:
0c:78:42:e6:4b:77:33:f0:30:65:3e:54:8c:2c:1d:d4:ee:2d:
e3:8b:44:9c:43:07:17:8c:fb:a2:ec:5b:7c:9e:b8:ba:3e:fe:
88:3c:6b:67:78:8a:32:01:34:e2:af:32:e2:96:a7:84:c3:85:
78:50:04:5f:ed:e8:9c:09:ae:75:18:b9:f2:86:4d:bc:06:1d:
6d:f4:d8:34:57:cb:4b:44:ce:23:ec:af:01:29:80:85:cc:32:
ed:c0:c4:f8:81:9d:5b:c9:81:77:de:03:5a:4a:89:0e:8b:9a:
99:c6:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:25 2026 by rpki-client