Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/QgmOqdZxMLy5MokFv7uUR_VwFmI.mft
File: QgmOqdZxMLy5MokFv7uUR_VwFmI.mft (raw, json)
Hash identifier: ofNNsO06/DZk9B1IGCEj2yI90AzJr/EnyzkON5rRNn4=
Subject key identifier: 0D:45:29:DE:08:73:E3:7D:63:43:E5:B0:18:43:B4:84:AE:7C:F1:76
Authority key identifier: 42:09:8E:A9:D6:71:30:BC:B9:32:89:05:BF:BB:94:47:F5:70:16:62
Certificate issuer: /CN=42098ea9d67130bcb9328905bfbb9447f5701662
Certificate serial: 019D33E44DACE04CD77A0B34230131490EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgmOqdZxMLy5MokFv7uUR_VwFmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/QgmOqdZxMLy5MokFv7uUR_VwFmI.mft
Manifest number: 40
Signing time: Sat 28 Mar 2026 10:01:33 +0000
Manifest this update: Sat 28 Mar 2026 10:01:33 +0000
Manifest next update: Sun 29 Mar 2026 10:01:33 +0000
Files and hashes: 1: QgmOqdZxMLy5MokFv7uUR_VwFmI.crl (hash: 0nDuYnPJIKTqPnVCuCQ4hK8oLoQQBblnljg1l1rFnUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/QgmOqdZxMLy5MokFv7uUR_VwFmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/QgmOqdZxMLy5MokFv7uUR_VwFmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgmOqdZxMLy5MokFv7uUR_VwFmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:4d:ac:e0:4c:d7:7a:0b:34:23:01:31:49:0e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42098ea9d67130bcb9328905bfbb9447f5701662
Validity
Not Before: Mar 28 10:01:33 2026 GMT
Not After : Mar 29 10:01:33 2026 GMT
Subject: CN=0d4529de0873e37d6343e5b01843b484ae7cf176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:4b:16:c0:b6:09:d9:d3:bb:25:0d:49:36:
27:f2:ec:c6:58:9d:36:61:e4:03:ed:01:d6:ea:e6:
72:b1:37:a3:1a:6d:98:9c:31:4f:3f:17:88:bd:6a:
7a:b8:3d:9a:4e:84:3a:da:93:25:7d:cc:3d:8d:a5:
dc:8e:1d:82:fc:cc:ed:66:1e:0f:2b:72:2e:9e:1f:
24:a8:a9:0c:6a:81:68:c9:e2:cf:b0:85:b1:2d:41:
2d:c8:6e:b8:1b:c6:e7:25:fe:20:f7:56:39:92:06:
f4:e9:8e:df:c7:cc:d9:1f:d8:e3:2f:cf:84:de:3e:
2a:80:65:d4:36:de:14:d8:70:88:bc:1f:b0:7c:c8:
64:90:96:65:2f:72:c0:18:c5:69:1d:5d:14:9a:7c:
32:2c:cb:c7:c0:d4:a2:11:6d:89:c6:35:cc:cd:84:
1f:51:59:f1:cb:99:dc:37:51:a8:18:a8:63:b8:f0:
e4:7d:61:28:7d:bd:7f:17:ab:9c:81:21:7d:61:c6:
79:c9:b4:4a:20:38:df:d9:d7:b3:03:7e:13:d3:c8:
b2:d4:c3:b7:16:85:8f:a7:27:3c:eb:57:55:53:fd:
13:27:f4:74:60:22:ba:2f:11:ea:67:b6:5b:90:f2:
83:2b:d5:3f:c6:af:d5:38:15:25:58:12:84:6b:b1:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:45:29:DE:08:73:E3:7D:63:43:E5:B0:18:43:B4:84:AE:7C:F1:76
X509v3 Authority Key Identifier:
keyid:42:09:8E:A9:D6:71:30:BC:B9:32:89:05:BF:BB:94:47:F5:70:16:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgmOqdZxMLy5MokFv7uUR_VwFmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/QgmOqdZxMLy5MokFv7uUR_VwFmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/QgmOqdZxMLy5MokFv7uUR_VwFmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:82:80:d8:83:4e:40:07:8d:51:11:a5:d6:b0:10:1e:e4:22:
45:46:86:f6:d9:da:9d:05:aa:48:3b:bf:35:5d:06:2a:b8:ef:
eb:ae:5d:ed:6c:d4:94:61:d7:02:31:ce:01:76:fc:fe:fd:06:
d4:cc:20:fb:78:de:b9:fb:0e:77:b5:a9:fb:50:ff:6d:4c:aa:
20:d5:07:f7:14:97:7c:06:8e:0b:9e:06:1c:8f:c6:07:7a:c4:
f2:7b:54:a7:cf:d6:ee:e0:37:e4:ba:e8:fb:b1:85:85:17:76:
76:fe:45:f7:32:ca:fc:59:f1:b6:b9:af:e4:14:18:6c:12:cd:
cf:97:56:6a:66:78:65:fb:7e:21:1c:3b:c3:a2:03:12:6d:9d:
fc:ef:56:7e:4b:d9:92:8d:02:83:51:de:cb:72:1d:06:da:2d:
90:93:6d:f8:aa:8a:c0:0d:3b:69:78:ea:40:49:79:1b:30:0f:
b9:a7:c9:53:84:16:bb:3f:ce:c7:a3:b7:14:52:65:98:3b:cc:
de:72:a2:4d:2e:f4:73:b6:e9:1b:03:e2:1a:c0:61:82:cd:52:
da:61:52:54:0d:8d:d8:77:2f:a7:d2:57:d2:ec:a1:65:05:c8:
8f:1b:dd:0f:bf:52:78:e8:60:7d:c6:58:47:70:99:71:c4:1b:
70:b0:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:06 2026 by rpki-client