Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: sa7tsR4u8/LdjJfUVmUDzDC876CWof7XSR9HoF2Ym2E=
Subject key identifier: DA:81:3C:A2:D4:7E:E2:9B:6D:F9:01:EC:DA:24:1B:3B:C6:BB:3D:C2
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 019D2884A68753F1C3DD6B264458D2282323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 14DB
Signing time: Thu 26 Mar 2026 05:01:15 +0000
Manifest this update: Thu 26 Mar 2026 05:01:15 +0000
Manifest next update: Fri 27 Mar 2026 05:01:15 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: jRcmPLdSj8fBo0LQvXSS/TTp2LpldG7oj7tB7TGulaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a6:87:53:f1:c3:dd:6b:26:44:58:d2:28:23:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Mar 26 05:01:15 2026 GMT
Not After : Mar 27 05:01:15 2026 GMT
Subject: CN=da813ca2d47ee29b6df901ecda241b3bc6bb3dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:c3:0f:c2:2c:85:6e:30:de:44:ec:cc:b1:
24:74:f4:97:01:57:d4:ac:69:44:ea:e8:97:b4:b9:
9f:c8:b5:04:1d:11:30:9b:62:8e:94:fa:c6:1b:05:
99:0c:87:e2:8a:30:30:db:36:04:12:fc:67:20:a0:
f8:30:60:db:b7:b6:a0:42:fb:5a:8d:9f:64:b9:b7:
06:1c:41:80:b8:f6:b8:07:4d:d0:6b:9c:a5:62:6b:
52:3c:de:6f:98:c8:a8:9a:53:26:1b:2d:6b:9e:13:
d3:c0:27:c5:66:d3:79:dc:28:33:44:28:8d:e6:ca:
f0:83:2e:b1:fb:c0:35:19:7b:18:4f:aa:10:11:37:
87:33:4c:7a:61:55:2e:97:e9:ec:0b:f2:19:4e:46:
ef:2f:01:7a:e9:b6:3f:fc:2e:c1:26:f4:57:2e:ff:
11:14:b6:7e:ab:59:04:23:69:fd:34:a2:8c:85:e1:
96:6b:bf:57:48:6c:c7:b4:cc:65:ad:d6:7a:b2:ee:
2f:e5:28:47:91:c0:31:4b:a4:d2:93:49:77:74:84:
5d:d1:5e:54:0b:a8:28:64:f3:b5:ac:9b:41:40:c6:
92:0b:fb:cc:d8:8e:d7:bb:d9:2f:b1:e1:3d:2f:b0:
01:7e:dd:ab:d1:16:2b:17:42:57:cd:2f:46:b3:38:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:81:3C:A2:D4:7E:E2:9B:6D:F9:01:EC:DA:24:1B:3B:C6:BB:3D:C2
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cc:ec:3e:65:51:64:62:74:40:3c:c0:b3:f2:47:2f:f7:3d:
ac:4c:4e:b8:51:c8:fd:b2:14:42:b8:4b:6d:60:d8:fd:9a:6b:
03:c1:b8:f7:38:03:ed:de:c4:27:24:fb:f9:b0:6e:e1:a6:a0:
18:0f:62:3e:b5:66:16:01:48:a1:a8:a7:e1:c3:f4:61:3f:57:
cd:07:f0:87:e2:7e:45:36:62:e0:c2:5e:0f:91:0b:35:65:dd:
cd:55:34:d1:55:f7:b6:26:b7:ee:00:01:b4:a2:79:77:b9:75:
06:87:84:b8:4d:47:68:c7:c0:d9:58:1b:9b:81:a0:ed:f4:f7:
b2:6d:c1:8c:e1:dc:9e:71:8c:53:d4:c9:b9:47:b2:9f:23:a5:
e5:58:fc:a1:9c:76:87:f9:39:42:50:06:4c:29:44:bd:a5:2a:
d9:74:5b:7a:d4:92:37:5d:bc:dd:60:34:e6:4d:d3:6e:fa:2d:
4f:e2:76:16:33:0a:29:b2:f9:97:5b:99:6e:63:35:53:df:a6:
02:ce:db:38:06:d8:75:99:f9:4c:09:4e:da:df:a8:da:08:d7:
d9:52:75:d6:f7:bd:7f:6a:e8:ae:81:b2:18:53:ff:82:07:42:
18:36:29:dc:20:9e:a8:99:79:db:3c:f3:4a:bc:c6:e1:1e:f5:
a4:8b:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:39 2026 by rpki-client