Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: hzkO6ZC9vsguOD+23z5Xg7tAWPGWv91XFqw63nRXIaI=
Subject key identifier: 01:3C:C6:5F:2A:96:FD:76:C0:3D:49:59:F3:DE:D7:4D:8A:43:E0:23
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 019D2704AF2CBDE4BBE3CB4B65C6F7513D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:51 +0000
Manifest this update: Wed 25 Mar 2026 22:01:51 +0000
Manifest next update: Thu 26 Mar 2026 22:01:51 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: wgUAIV8kFYCfqBHtnATO7Myx6oFnruceBW4m5C8w7w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:af:2c:bd:e4:bb:e3:cb:4b:65:c6:f7:51:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Mar 25 22:01:51 2026 GMT
Not After : Mar 26 22:01:51 2026 GMT
Subject: CN=013cc65f2a96fd76c03d4959f3ded74d8a43e023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:04:36:0b:91:fe:be:c1:19:4b:02:62:e4:
71:49:81:26:3b:1e:2f:7f:a3:fc:e7:40:0d:1f:08:
aa:b3:7c:61:b9:de:4c:f7:78:a8:ba:79:1a:14:45:
1a:a0:e7:b8:6e:7b:cf:4b:8e:cb:7d:2d:e5:35:4e:
d3:ed:57:d5:b3:80:83:7c:9f:0a:c1:61:eb:93:15:
c1:b1:b7:47:09:83:fa:62:40:74:e7:b1:f3:80:27:
28:ee:95:02:36:ea:fa:ff:3a:6a:4b:6d:ed:26:8d:
c6:27:a3:72:20:02:46:51:8c:90:29:d7:94:f5:71:
c6:7f:ae:fd:8e:63:83:b9:37:0a:29:c8:f6:63:cf:
cb:dd:66:c4:2c:b7:a2:33:17:12:8f:92:13:1a:70:
c0:bd:99:c7:58:5e:c7:76:aa:35:27:31:e3:43:78:
1a:df:94:39:c3:f8:cb:a6:d2:4c:4c:64:92:43:d2:
10:4e:5a:61:99:72:65:6d:b0:3e:1d:68:e9:48:fe:
e5:39:47:f9:59:b5:35:0f:4c:55:1d:be:0c:8b:47:
7c:ce:53:47:b6:95:28:93:07:bb:2e:d0:7a:86:77:
cf:fd:03:52:73:8a:9c:13:b3:db:c2:ad:1a:2e:96:
86:9e:36:8c:49:cc:a3:ce:29:3f:d1:69:83:df:2d:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3C:C6:5F:2A:96:FD:76:C0:3D:49:59:F3:DE:D7:4D:8A:43:E0:23
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f0:63:0e:90:26:e7:ed:b6:27:a8:59:92:2c:a9:e9:41:6e:
44:7a:6a:cc:b4:d0:f0:26:31:00:ee:df:ba:8c:e6:c8:ef:4e:
74:ca:86:83:6e:01:ea:40:46:3a:5a:01:cf:ec:34:d4:d1:08:
f4:3d:98:e9:a6:c7:ce:f3:0a:c8:e3:64:cd:89:63:1b:8e:95:
56:e6:23:61:35:9e:b5:11:8b:f1:25:40:fc:f0:a7:03:56:36:
ef:e2:8c:a7:c9:99:e7:10:60:d6:89:f5:16:c5:a8:54:be:06:
7b:28:a1:a5:c7:11:9c:05:af:b9:50:d0:65:dc:05:ac:8f:2e:
53:d2:dd:2e:ce:52:1c:9e:16:29:ad:16:c0:6f:6d:c7:ec:51:
38:e1:f8:b1:f1:6b:57:2b:86:54:d7:3f:56:b4:e7:c1:fd:49:
69:80:a9:e8:c7:e6:d4:96:df:78:2a:b3:ff:8b:a0:a4:6e:0c:
c2:2f:65:8d:42:0a:7c:9e:b6:40:61:40:b7:92:57:c3:83:84:
95:ed:d8:5d:a0:72:97:1e:6d:93:0d:95:6d:ac:4e:88:9f:6a:
2a:ec:22:5a:5e:53:f7:80:b2:3f:90:7f:be:34:21:bc:d9:9a:
77:09:11:7c:11:be:66:28:5c:00:f2:5b:c6:8f:33:9a:20:52:
a2:96:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:15:47 2026 by rpki-client