Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
File: Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json)
Hash identifier: tNrjdWZ2VTgFQK7RMZF3L8x3E3LPmG0aLMln7OZ3E/g=
Subject key identifier: DD:35:30:8D:1F:28:FF:28:A4:89:F6:B6:23:74:79:6A:1A:4F:66:7C
Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Certificate issuer: /CN=41b89bd3736ce4f008473965fdae4074567cda03
Certificate serial: 019D270422B7541C6F67E85189B95D651D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
Manifest number: 0DFD
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: zb5HuiExBK6wNCiTWV8PsuyfROYp1lggjFKoWeaGmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:22:b7:54:1c:6f:67:e8:51:89:b9:5d:65:1d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=dd35308d1f28ff28a489f6b62374796a1a4f667c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:22:94:1c:8b:59:d1:b6:ef:48:72:35:76:
ac:b6:36:ea:5c:d9:56:c8:3a:33:f3:02:f0:33:48:
00:83:67:d7:3e:95:82:5e:ab:24:a8:b2:4f:91:0d:
e0:0d:ac:a1:44:1f:ee:42:0b:77:94:4d:85:d2:14:
32:7e:a2:0e:b2:68:97:82:de:9a:ba:2c:44:70:bc:
87:8a:d1:96:a5:85:1c:76:d4:f5:48:22:7a:33:04:
11:cf:3b:d2:6c:a2:6a:da:a7:18:a6:b1:73:c1:8c:
ad:04:30:4c:ec:b1:48:5e:6a:8b:5c:0f:0f:d8:02:
43:ca:94:9f:29:cd:34:99:1a:14:37:73:fe:37:52:
57:b9:67:a3:27:e5:14:8b:2e:3a:6c:d8:60:0b:74:
a8:d4:cb:7f:e5:5f:33:1a:00:8f:20:a1:5d:a8:03:
ab:d1:13:65:c4:e7:fc:23:d8:c9:e8:c0:ca:a1:e9:
85:1c:d9:16:80:c2:0c:31:ce:99:28:ca:6b:64:2b:
83:11:15:74:0e:34:55:a1:8f:25:f7:59:e2:2a:97:
80:e5:bd:e5:01:9c:5f:5a:7f:96:09:63:6e:84:99:
6f:54:a2:26:ef:9e:33:b0:89:7c:2d:eb:ab:9a:0f:
e1:8d:81:28:13:cb:bf:3c:36:b9:ae:43:a5:a6:7a:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:35:30:8D:1F:28:FF:28:A4:89:F6:B6:23:74:79:6A:1A:4F:66:7C
X509v3 Authority Key Identifier:
keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:29:49:c1:32:bc:d2:6f:d8:e7:d8:c8:52:5c:37:19:45:c9:
25:53:70:6b:71:cd:f9:a0:20:24:9f:d7:37:d4:68:13:92:3f:
9f:09:f4:22:41:5a:2d:9c:fe:7b:b3:62:ab:9d:e5:dc:87:9c:
d4:09:72:c0:84:f9:09:69:8c:4f:ed:6a:1b:cf:45:f7:72:a5:
1a:90:74:ed:33:83:22:ee:01:03:04:2d:c3:3e:36:8f:38:8e:
ad:67:1e:87:13:66:ad:96:ac:f8:d8:1d:61:dd:7e:0c:6a:d3:
e4:d0:75:c2:c3:b6:b3:c6:fe:1e:b8:9d:52:5e:22:6c:4f:f6:
45:77:a5:97:e4:dd:56:66:2a:e1:c1:db:ee:3a:f9:60:17:14:
14:2d:d4:42:1b:e2:cc:65:0d:b5:0c:de:96:cd:f6:e5:ed:f4:
02:3b:ae:88:7e:10:a1:fd:93:72:df:ad:68:f5:59:3a:74:53:
2a:d1:a8:99:b7:62:ee:72:66:66:c7:6d:46:d5:ad:a1:8e:0d:
16:16:5c:98:05:fb:67:b9:4b:82:a3:ca:37:71:10:82:2d:75:
d2:fa:a9:f1:f1:39:59:91:c8:0a:94:bb:6d:69:e9:39:e5:9d:
fe:dc:e6:fe:f3:de:88:7d:7a:ae:7c:ea:7a:ce:66:d6:fb:31:
d8:42:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:41 2026 by rpki-client