Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: Y4KarSMyhNPaUam0t9bqErQJsr62a63SAmtITkXZXe0=
Subject key identifier: 74:31:75:E3:31:8D:07:40:54:ED:6B:C0:FF:69:AA:67:DE:A6:5F:54
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 019D3865A74A6E03E511438FB82D3DADD059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 09F4
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: O8+G5feZoaXAsHiMg36ZXiXDgFhnkqw06MMfQhym5ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a7:4a:6e:03:e5:11:43:8f:b8:2d:3d:ad:d0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=743175e3318d074054ed6bc0ff69aa67dea65f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:c3:4b:33:3b:43:58:4d:fa:15:0d:12:98:
3d:e2:86:d8:7d:10:17:ee:47:10:65:97:6c:8d:5f:
8c:2c:34:cf:01:bd:8b:2a:a5:97:03:ce:bf:f0:77:
ce:ae:19:c8:cf:d2:71:26:71:ba:4b:77:83:aa:e9:
26:c0:88:1c:eb:21:18:5b:e1:55:fe:04:9f:55:fb:
cd:60:2b:de:39:bf:8f:30:f6:b1:9e:d9:0e:e1:0d:
dc:7a:06:ba:1b:43:31:d2:9c:f5:cc:43:86:c6:4d:
57:d7:87:4a:b5:ae:94:32:a1:63:3d:34:20:10:d2:
db:a4:72:a5:e8:b8:77:b7:47:5b:90:ab:6c:bf:a4:
8c:d1:00:79:f1:58:54:c1:32:b9:02:74:c1:7f:1c:
3d:fc:8e:43:90:5d:ae:3c:21:9b:ec:7f:f6:ae:c1:
0b:b6:f9:07:a3:d3:8b:1b:4a:a5:7d:e9:fe:90:4d:
c2:77:98:53:a4:2a:96:3d:46:c3:d2:d9:6e:bc:4e:
4f:2d:35:1e:4e:ca:39:c1:b0:3d:3b:f7:0b:90:9f:
30:66:cf:da:5f:76:1c:9e:e6:04:f7:39:c1:a0:17:
f6:40:8f:b5:ba:e1:d6:63:e9:99:48:a9:48:b4:5b:
1c:31:59:13:85:70:fe:9c:af:51:4e:cb:5b:ab:ec:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:75:E3:31:8D:07:40:54:ED:6B:C0:FF:69:AA:67:DE:A6:5F:54
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e0:c4:68:50:e9:ba:25:3b:12:fa:0b:4a:0f:22:21:90:a2:
07:71:b4:0c:2a:32:1a:a8:59:54:37:4a:82:bb:a7:4e:bc:8b:
c1:6f:a9:5d:86:4b:f5:6a:6e:31:27:de:53:cd:f2:10:43:0c:
e8:9e:15:63:f3:2d:ea:65:12:61:43:a6:af:cc:51:38:1b:ff:
2b:ce:e5:20:90:a6:10:1b:e0:43:96:93:ee:46:2f:47:9c:32:
a8:7f:7d:84:f7:f2:cd:57:5e:28:6f:70:0b:9e:9a:07:c0:31:
45:cc:6b:1f:00:17:8f:cf:9a:59:f2:f4:63:a6:2d:10:0a:86:
9e:d8:45:a8:23:e8:75:74:5b:50:11:d4:ce:e9:09:fa:f8:ed:
0d:6c:f4:d0:e0:c1:58:d9:34:71:dd:0e:02:88:d3:85:67:65:
8b:10:2c:b6:87:37:4a:43:fb:7b:e5:ae:ec:ec:f1:30:ca:de:
dd:58:e8:77:e1:e3:61:53:f2:b6:a5:0a:ab:c9:a3:b6:06:d9:
a4:a9:14:c2:72:a7:ae:ac:ab:b9:6b:d2:f0:b8:14:f4:42:b8:
63:22:7e:36:9e:29:52:8e:02:98:6a:b9:be:6e:80:cc:47:56:
28:b2:ad:76:5e:a5:f2:1d:57:fa:59:47:c1:1c:ed:e6:52:ff:
9b:b8:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:26 2026 by rpki-client