Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: RsfaAMGJDD0aspPfXUYl9LW3Yj8m1lzZATi3XCRo4AY=
Subject key identifier: 49:18:A2:FE:B8:B9:34:2A:E7:C5:3B:70:5B:63:5B:AC:72:C8:B2:93
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 019D32D0DC64BFD1BE1377FB3311E2800779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 0498
Signing time: Sat 28 Mar 2026 05:00:41 +0000
Manifest this update: Sat 28 Mar 2026 05:00:41 +0000
Manifest next update: Sun 29 Mar 2026 05:00:41 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: D45LEyOQ06eXx1jwLcnegCvsWQTA3zoGIBUgc0ji2SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:dc:64:bf:d1:be:13:77:fb:33:11:e2:80:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Mar 28 05:00:41 2026 GMT
Not After : Mar 29 05:00:41 2026 GMT
Subject: CN=4918a2feb8b9342ae7c53b705b635bac72c8b293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:c9:ed:54:9c:95:ed:84:b2:fb:20:ee:1a:
1a:0a:1e:fd:73:13:e9:da:37:87:e1:f8:4e:2a:d2:
9d:af:8e:70:96:b8:22:fe:25:8d:30:38:e6:c5:80:
1d:52:1a:18:d9:e6:63:09:69:67:e8:3f:c0:18:7f:
ba:36:0c:0f:e0:c7:16:5c:27:2d:4b:27:8c:c6:71:
1b:d9:64:cb:70:2a:d3:2e:4f:77:22:a0:cd:05:90:
47:24:31:67:e1:89:19:43:08:1f:54:fc:68:b9:4e:
aa:09:22:a9:33:a7:f1:59:01:18:45:e5:df:98:5e:
0a:c1:3c:63:ee:88:5b:3b:62:65:d9:a5:44:9d:f6:
cf:b8:b0:92:c4:e9:36:d5:c6:4d:72:6e:f0:b4:8f:
40:f7:4c:31:58:9c:28:22:58:fd:72:20:0c:9b:3a:
6d:29:94:fa:15:90:86:47:1e:cb:88:e7:43:ba:6d:
c7:1b:f7:33:39:54:24:64:c4:6e:d9:7b:28:94:6b:
b9:68:3d:ed:a8:23:2b:ab:d4:7b:aa:19:87:f1:65:
b3:70:81:82:0e:5e:08:46:b2:20:a4:75:8e:68:8c:
69:4b:51:1c:9b:1b:b0:83:24:2e:f1:f3:35:6a:8e:
ab:2a:69:89:7f:09:39:fc:74:6a:f7:7c:a1:b2:58:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:18:A2:FE:B8:B9:34:2A:E7:C5:3B:70:5B:63:5B:AC:72:C8:B2:93
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ef:05:25:12:4a:d5:ae:38:19:d4:d5:0c:45:5e:49:dd:17:
56:12:09:13:73:4f:29:b2:a7:ca:74:87:6a:7a:60:be:b4:b3:
5e:c2:75:74:8b:a1:cb:9b:96:a6:63:c2:3b:1b:2d:17:74:53:
8c:40:5b:ee:b8:f1:9a:5f:cd:3a:b3:27:ca:c8:f0:bb:e3:3c:
cb:18:ec:81:1b:67:1e:fe:52:61:39:5b:31:e0:ab:1b:78:37:
2f:58:e7:a5:8d:db:f6:8d:21:3b:2c:4c:48:06:7a:c4:5f:1f:
d3:06:82:f7:d5:52:db:f5:0b:73:fc:cf:2d:b9:cb:b9:c9:03:
b6:69:68:e4:18:6d:e4:de:0e:1e:ec:47:d1:e0:88:ab:7e:25:
80:25:6a:bc:10:6b:bb:95:8b:b9:c9:4c:4b:26:9a:dc:3e:ae:
b3:e7:e9:9d:26:7f:15:b4:b9:19:51:19:a4:2b:2f:b2:9f:d8:
0a:15:87:0d:35:a6:c9:7d:47:4b:f8:b1:b7:cc:3e:50:20:4c:
31:e8:de:6f:a2:b6:79:ff:4e:a7:09:aa:bb:03:1c:09:d6:e7:
80:3d:63:60:f8:55:f0:ed:f1:96:24:42:6b:68:17:d0:04:02:
63:26:14:b5:86:e5:2e:03:65:9b:b9:3b:21:45:cb:bc:a6:3b:
f6:99:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:10 2026 by rpki-client