Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier: d8cjLUX2wGXxu08eTuI7QbpOY45DNwmKv1/4qV94Iug=
Subject key identifier: DC:99:3C:EA:9D:EA:A1:89:77:1A:F2:32:93:E8:62:0F:CA:7C:61:F7
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial: 019D27040D94A72ACB57102CA21E3C3634F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number: 1380
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: FF41YMAt0sjEIDhxhZLOjY3GLR8arGdHrXhwCgECmxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0d:94:a7:2a:cb:57:10:2c:a2:1e:3c:36:34:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=dc993cea9deaa189771af23293e8620fca7c61f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:d3:15:18:80:be:a5:98:1f:93:42:71:0f:
14:bb:b9:56:fd:e4:75:66:d9:99:76:79:20:6d:c9:
97:90:d1:4e:a7:56:04:ad:9d:96:df:a2:be:94:eb:
21:65:c9:01:e0:f5:62:88:ca:7e:e5:c3:4f:a3:d9:
0a:be:4b:f7:6a:cf:86:b2:36:bb:f0:a0:8f:e9:7a:
1e:ba:2e:e9:d9:a1:9a:e6:ad:8a:50:71:92:6a:28:
41:cf:f0:0f:3a:1c:98:72:b5:25:fe:e3:5d:c7:c8:
4d:50:62:95:1d:8c:e5:c5:be:20:43:49:8f:6c:bf:
2b:e4:e6:b9:72:1f:de:fb:a1:20:11:a9:07:fc:46:
39:f6:19:96:da:60:ba:ed:2c:54:b7:9f:42:6c:2b:
85:7a:bb:d8:9c:c2:e9:5a:cf:f2:e2:bd:3e:8d:cd:
47:91:1b:01:5b:fa:88:65:f5:2a:6b:86:dd:c5:54:
0a:72:a9:5e:46:fd:6e:10:08:01:b3:da:29:a1:53:
f6:1a:fc:c6:36:4d:54:2a:cf:0f:95:e3:b0:2e:96:
bd:f0:4a:49:fb:94:06:d0:ea:3b:84:9d:c8:69:96:
fe:d9:2f:f9:c6:30:5a:9d:c8:78:57:88:ce:52:67:
ab:85:bd:4e:46:3d:d8:1d:5c:b9:f5:ae:7e:c9:03:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:99:3C:EA:9D:EA:A1:89:77:1A:F2:32:93:E8:62:0F:CA:7C:61:F7
X509v3 Authority Key Identifier:
keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f1:80:c5:49:ae:8b:b7:5f:45:29:00:a5:99:1b:0f:24:c8:
29:c6:79:ee:c0:73:e1:fe:ea:e0:a9:b8:b7:45:b6:ad:d0:c5:
b3:88:04:5a:9e:a5:b5:64:09:91:bb:73:b6:7a:7d:9f:2e:b8:
a1:78:5f:17:5a:92:00:45:23:bb:9d:b0:ca:19:17:58:b5:09:
c1:5c:dd:33:c1:bb:71:5f:b2:11:01:d8:85:90:2f:e2:0f:67:
34:e0:5b:eb:f5:92:52:0a:26:21:f7:36:f8:4c:80:64:1f:aa:
9f:c1:29:f0:e6:6e:16:4c:c4:04:30:56:6a:37:45:ff:41:32:
67:f0:b8:14:0f:ff:b1:7e:b5:b2:a1:6e:76:bb:e1:76:44:b4:
f9:85:a2:bd:2b:23:4d:68:45:bc:78:c0:6f:5b:b7:bd:f7:23:
90:38:8e:9e:8d:4d:f9:bd:6c:0f:92:91:a8:eb:aa:61:78:99:
55:f6:eb:24:46:2b:e8:c2:04:d9:85:be:f6:01:17:f8:f9:98:
3e:18:4f:50:e5:6e:76:61:78:c3:88:15:3b:b8:6b:df:69:1b:
d9:e2:75:61:da:3e:12:2d:5a:41:aa:01:95:0b:89:46:b0:7a:
ce:88:52:51:29:e2:1c:99:50:6b:e3:57:05:7a:76:aa:02:93:
c6:64:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:23 2026 by rpki-client