Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft
File: QapYrSjgocFk2w1i1SplaRMeYW8.mft (raw, json)
Hash identifier: 972bcNSLbcRS81Np0r8RtkqvGBVsI25WSS4hx+pENVw=
Subject key identifier: A2:F9:28:D0:DD:5B:F1:F4:4E:B2:34:DA:C5:B5:70:2D:15:86:A1:BC
Authority key identifier: 41:AA:58:AD:28:E0:A1:C1:64:DB:0D:62:D5:2A:65:69:13:1E:61:6F
Certificate issuer: /CN=41aa58ad28e0a1c164db0d62d52a6569131e616f
Certificate serial: 019D3299ECEF9AEBC25132BA81C29D322191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QapYrSjgocFk2w1i1SplaRMeYW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft
Manifest number: 0123
Signing time: Sat 28 Mar 2026 04:00:41 +0000
Manifest this update: Sat 28 Mar 2026 04:00:41 +0000
Manifest next update: Sun 29 Mar 2026 04:00:41 +0000
Files and hashes: 1: QapYrSjgocFk2w1i1SplaRMeYW8.crl (hash: 1tyYuvpoxuz6jAEdd6J69sm8XkcCpri2CB/j6CSTH20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QapYrSjgocFk2w1i1SplaRMeYW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:99:ec:ef:9a:eb:c2:51:32:ba:81:c2:9d:32:21:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41aa58ad28e0a1c164db0d62d52a6569131e616f
Validity
Not Before: Mar 28 04:00:41 2026 GMT
Not After : Mar 29 04:00:41 2026 GMT
Subject: CN=a2f928d0dd5bf1f44eb234dac5b5702d1586a1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:97:77:89:a4:80:0c:82:51:35:b9:77:b7:
58:15:d8:4e:2e:c8:eb:95:39:42:e2:bf:a9:3f:da:
f4:9a:82:b2:b7:35:b0:5a:06:b0:aa:9e:3b:c0:be:
75:64:64:23:6d:51:52:65:58:16:fb:59:64:c4:65:
d4:9f:98:fa:a8:3d:53:62:28:46:be:68:77:44:84:
d4:f1:c7:69:a0:68:fd:67:39:cf:b1:be:05:f1:1b:
6c:01:97:1f:98:91:c5:70:c0:38:6f:6e:59:15:31:
d2:f5:7c:46:08:a7:2e:2d:40:cb:8c:99:65:3f:9d:
fa:a5:53:12:c3:b9:c9:59:5d:78:ae:ba:2d:06:d8:
59:df:1e:27:04:63:0e:e6:b9:60:20:b1:99:17:72:
bd:09:64:cc:9e:be:5e:9a:52:a9:97:69:b7:f3:a7:
13:7a:c5:d1:11:57:b2:e5:82:9a:62:30:75:44:29:
71:2b:22:8a:a3:3c:7d:00:ea:c8:a9:72:cb:0a:66:
6c:59:39:82:a0:60:21:4d:60:4f:b3:19:61:b3:2a:
15:35:fc:cf:50:56:1c:d7:9b:16:72:77:89:5b:57:
f4:51:1d:67:22:72:88:aa:e9:40:ea:65:bf:b8:83:
98:11:65:38:1f:6d:2c:b8:98:ff:0b:61:70:b6:ed:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F9:28:D0:DD:5B:F1:F4:4E:B2:34:DA:C5:B5:70:2D:15:86:A1:BC
X509v3 Authority Key Identifier:
keyid:41:AA:58:AD:28:E0:A1:C1:64:DB:0D:62:D5:2A:65:69:13:1E:61:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QapYrSjgocFk2w1i1SplaRMeYW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:16:6d:6b:f4:f3:47:60:af:d3:4d:7e:0c:47:29:c7:70:6c:
e2:88:68:e7:8a:b0:86:36:f2:7f:c3:21:de:40:45:c4:02:1f:
73:9c:65:17:d8:eb:07:d7:48:7c:5c:bd:88:f7:ea:33:a9:87:
8f:08:06:83:5d:c3:d6:60:41:2f:db:a7:a1:b9:11:39:8e:84:
2f:e1:5d:ab:19:d1:9b:24:56:5b:76:7f:d9:f2:b0:6d:36:1c:
5c:61:3d:aa:6c:d9:fc:11:0c:60:96:bb:8e:39:f2:4d:33:66:
16:08:5d:e0:5b:40:c0:e2:6a:61:ad:e8:c5:83:ec:1c:17:8d:
e1:60:53:ad:11:93:34:29:ee:8d:14:47:74:d5:6b:7b:75:8c:
11:e2:a3:bf:ff:2a:12:4f:2a:ae:dc:39:e4:23:ab:12:7d:51:
54:e2:8f:54:15:6b:7b:8d:e5:c7:a6:53:0d:6f:ef:a0:68:08:
9e:c7:19:a8:ff:b0:4c:6b:df:34:4e:35:7e:c5:f5:43:25:c9:
eb:d6:be:6e:2f:7e:90:f8:90:4c:0b:6b:14:e2:af:8c:4f:c2:
04:5a:ee:8e:02:cc:dd:d5:38:c2:6d:2b:ff:05:46:3f:22:3c:
98:26:25:44:10:03:60:7b:9b:63:76:bf:4a:ed:ec:9b:e0:58:
fc:07:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:39 2026 by rpki-client