Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: p0+eDZ/b0fllVp9/LQiMSvOFmqrXZtD783ywSjp7264=
Subject key identifier: 7D:54:55:1F:A9:BE:EA:8F:45:51:16:A3:55:F3:EE:56:D3:82:EA:7C
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 019D27A90E3AA97F2BDB429C4A4DAE4493CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: f9pkZax7Ukk0e9oZTF3QTTuojbKyqi5kUsJ5wkK8Gz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0e:3a:a9:7f:2b:db:42:9c:4a:4d:ae:44:93:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=7d54551fa9beea8f455116a355f3ee56d382ea7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:76:7e:4f:a6:a5:aa:76:d3:0d:25:79:19:
86:5d:e4:7a:40:15:09:93:4a:77:b5:9d:ee:4d:f6:
7b:8b:17:04:47:67:75:03:9b:3d:54:15:a9:cb:62:
6b:a5:3e:73:ce:47:72:62:e7:b6:f8:f3:ad:6a:1a:
63:20:77:8e:f7:3d:4f:c0:76:55:ca:86:f5:94:ce:
c8:56:02:17:b0:c0:66:87:e0:16:b7:2a:a2:63:16:
6b:cb:9e:d5:09:8b:77:10:d2:23:60:30:85:3f:41:
b1:b6:25:6a:89:f9:ba:0f:78:f0:05:f3:56:c2:7f:
b1:20:6a:4b:2b:6c:9f:7f:6c:b3:5b:61:5a:83:7a:
f9:9f:66:d3:d0:c7:ce:24:c1:fc:db:16:14:d8:a1:
f4:8f:46:23:14:77:89:e7:8c:54:8d:de:f0:39:d8:
16:ea:e5:4e:6e:25:35:47:3e:97:7e:b3:4f:c6:86:
0d:56:d2:ef:7c:aa:d5:87:a7:60:8c:7e:2c:e6:75:
1f:57:80:bb:46:be:61:7e:11:a5:96:9e:5b:5d:3c:
9c:d9:5d:d6:be:bc:34:e8:fe:2e:37:bc:00:aa:9b:
49:9c:41:7a:60:0a:71:54:e6:6f:8f:8b:c3:71:70:
62:c5:91:a6:3f:fd:fd:65:06:33:f7:8f:31:12:8e:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:54:55:1F:A9:BE:EA:8F:45:51:16:A3:55:F3:EE:56:D3:82:EA:7C
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cd:d1:c8:ea:5b:72:1a:2d:77:a6:00:68:6d:bf:1b:c0:56:
0c:4e:cb:8d:37:1c:a9:17:f3:e2:3c:8d:8c:03:26:81:e5:2c:
0c:e6:72:af:51:02:41:6e:b1:10:ed:45:2b:73:54:0a:57:37:
ba:22:92:18:8a:30:cb:2f:5a:0d:83:c7:42:f2:53:91:4f:72:
29:b9:d2:0e:fc:87:7e:55:c7:18:c5:35:37:ea:7c:d1:ed:77:
ef:58:0d:61:9f:d0:39:eb:7c:e7:6e:eb:05:99:85:78:9e:23:
d0:99:61:00:42:37:a0:e5:ec:3a:20:47:dc:68:14:9a:5b:37:
35:ed:7f:5e:fe:6f:4f:97:ec:02:73:93:a7:7d:a4:69:b7:9d:
78:9e:d3:8d:cb:ae:88:e9:05:8c:8e:b1:2d:e9:61:ce:1b:53:
ca:50:01:0d:ef:df:85:ba:e0:8f:88:3a:fc:d3:ae:13:54:cd:
05:2b:94:c2:01:6f:17:fc:01:43:ad:77:b8:f2:6a:f7:3f:cf:
c7:ee:86:ce:a9:3d:eb:70:58:07:a2:9f:5a:5c:40:48:ea:66:
c7:d8:7a:64:58:f7:f4:2c:c5:1a:7b:a3:bb:a6:dd:08:3c:78:
da:ca:7c:60:64:d1:61:b6:98:4c:d5:7b:2d:4c:11:b4:04:4c:
c8:b3:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:07:06 2026 by rpki-client