Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: TZSE2b1FxSGNgepOgAUemqqUPcD3lMszpW8Pd+yLzl8=
Subject key identifier: 6E:9F:E8:79:A2:75:C6:2C:A0:7D:62:EC:68:E8:44:28:68:50:9F:97
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 019D27DFB339C80A1876690DD7F02E44DCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 131D
Signing time: Thu 26 Mar 2026 02:01:04 +0000
Manifest this update: Thu 26 Mar 2026 02:01:04 +0000
Manifest next update: Fri 27 Mar 2026 02:01:04 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: OayTWBP0e5yKGKuuDyg5SoQbNdblCjw+sOT+VFM6IPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b3:39:c8:0a:18:76:69:0d:d7:f0:2e:44:dc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Mar 26 02:01:04 2026 GMT
Not After : Mar 27 02:01:04 2026 GMT
Subject: CN=6e9fe879a275c62ca07d62ec68e8442868509f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:d6:f1:f3:80:d5:d4:c7:9a:9e:e3:6a:ae:
14:2c:3a:3c:6a:d3:f6:66:dc:0a:bb:32:12:3d:05:
a5:b9:d5:bb:f9:9b:6a:12:78:38:77:c9:8c:e5:97:
93:ac:44:b0:13:f1:0c:76:bf:9a:74:98:62:ce:29:
9c:6e:3a:61:de:47:0d:77:c1:36:d4:d9:6a:7a:32:
36:b1:d2:5c:4e:98:50:e9:c8:db:07:22:c9:1d:8c:
1a:5b:eb:d4:fe:e7:38:6c:64:ca:61:5e:49:87:96:
a6:4a:75:39:9e:8f:2b:80:82:d8:28:c3:6f:11:14:
02:bd:8e:74:48:bc:fe:af:68:bd:94:74:12:b2:61:
ac:8e:be:94:98:a8:54:d8:68:20:a9:1d:43:5f:db:
b9:92:b7:ef:7a:39:b4:2f:60:01:94:b9:f3:8a:9f:
d4:b8:6b:17:06:3f:78:8d:e2:94:df:0d:0b:4c:2b:
96:83:6e:2d:17:20:12:06:b4:b6:58:6a:3a:b9:fc:
e0:c8:96:1d:0e:ed:4f:a9:25:85:41:13:83:31:ad:
2b:4f:48:f7:d4:35:aa:b5:32:84:ea:d9:b8:f6:1d:
9c:07:ae:09:a8:26:9d:0a:ab:d1:f4:2e:71:ec:74:
2a:2c:45:8a:03:c1:b0:f6:b2:07:9e:e2:69:b5:c7:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9F:E8:79:A2:75:C6:2C:A0:7D:62:EC:68:E8:44:28:68:50:9F:97
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ba:76:1c:15:7f:0b:59:8c:79:ff:c0:65:66:81:59:98:f9:
a5:bc:b2:86:89:b0:5e:d6:99:cb:84:13:be:e6:74:da:a3:08:
c0:f4:74:5f:fb:0a:9f:3a:ba:6b:62:9d:66:c8:d1:b5:9f:ce:
44:71:6b:45:55:dc:32:22:86:b3:90:ce:cf:5f:60:d4:7d:dd:
13:bd:30:80:de:46:f0:21:aa:d6:c1:cd:b3:fe:3f:4c:d0:93:
5d:7c:bc:e2:9a:cf:b1:ea:0d:6d:0d:3e:07:3f:81:3c:02:18:
66:37:bd:dd:43:a0:01:48:82:83:5c:fb:9f:3f:d4:f2:0c:79:
e5:0e:75:f6:94:db:d3:01:c6:f3:95:f7:fc:29:6a:bb:15:1e:
17:de:63:60:4d:22:f5:6a:a4:48:cc:01:d0:c9:36:2c:ba:12:
8f:25:72:ca:5b:f6:93:fd:d1:92:bd:cf:37:d5:54:25:73:84:
05:68:ef:de:3d:d4:bd:ec:38:5e:aa:c7:71:70:48:09:f9:fb:
f3:e7:e3:64:1f:16:0c:51:ed:34:f3:26:57:73:39:9d:47:a9:
af:57:7a:46:cd:8f:30:15:c6:f8:9e:24:24:80:7e:e2:8b:32:
c9:b7:31:61:61:d1:ef:ee:e7:f2:bd:b3:7f:c2:7f:7b:8d:a0:
6e:75:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:27:14 2026 by rpki-client