Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json)
Hash identifier: inWcBg4jHU8qPJTaQXbxYn0NW9R1yfVJTUKH2x8kW2o=
Subject key identifier: 03:B0:40:10:E4:66:C7:60:3B:FF:C7:52:D1:19:BE:63:23:A2:A6:26
Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Certificate serial: 019D375311165AD11EB48A76E878A1198082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
Manifest number: 0619
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: bOu91n6Z43vpmi2ewFoN/UhJDD7rcsGoCoXcbdY0TSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:11:16:5a:d1:1e:b4:8a:76:e8:78:a1:19:80:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=03b04010e466c7603bffc752d119be6323a2a626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:c6:00:cc:0c:0a:f9:4b:1c:33:48:99:35:
84:3e:72:fd:83:74:ab:80:29:d2:65:3c:ad:d1:57:
fa:f9:ef:fc:50:76:d5:0b:38:ac:33:7b:e5:c3:1c:
a1:f2:d4:ae:95:a2:73:45:7f:1e:90:80:81:f9:0f:
00:e9:90:43:4f:95:e3:dd:07:a4:d4:bd:ac:04:66:
25:5e:07:06:ba:6e:31:ad:ea:cf:b1:a9:a1:74:a5:
9e:03:ee:08:ff:d2:9c:c1:fb:63:e6:d7:36:0b:e9:
99:29:b7:d1:fb:3a:31:15:83:04:5c:4d:cb:09:ea:
54:f9:e7:40:7f:75:67:66:41:aa:c4:b5:98:a4:28:
e0:eb:24:d0:1d:29:c6:25:6a:60:94:84:e8:a1:0c:
b3:49:5d:bf:a1:0c:30:e8:0f:9d:01:71:4a:ab:6e:
2f:cc:c8:71:26:f1:ff:98:0e:7e:64:5f:f1:1d:5b:
10:d8:fa:a4:e1:6c:47:0f:cb:ef:17:2a:f9:b5:16:
a1:ed:d6:66:28:c6:94:a8:6d:a5:5c:8c:d4:dc:1c:
ca:44:1b:36:96:ea:2d:fb:4b:81:76:2a:ac:8c:13:
c3:88:0c:72:57:c1:c0:0e:7f:59:ca:11:d9:f5:b8:
5c:60:5a:18:b7:88:ca:bb:bd:b9:e3:2d:c1:e0:ee:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B0:40:10:E4:66:C7:60:3B:FF:C7:52:D1:19:BE:63:23:A2:A6:26
X509v3 Authority Key Identifier:
keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e7:38:4a:d3:87:b2:d6:8e:5f:0c:0f:eb:35:73:fe:57:5f:
94:67:fb:8a:30:19:d5:cf:a9:bc:21:61:5c:46:13:4a:13:ca:
ff:ab:0b:42:9b:d5:88:34:9b:13:44:11:dc:1f:dd:72:d2:88:
b3:1e:c8:ca:1a:06:c3:2f:dd:74:c7:65:8a:4d:e0:49:52:93:
76:d2:a4:9c:b8:fa:6b:9c:6b:da:80:76:ce:d8:32:ef:5c:3b:
7a:e1:91:a4:d1:c8:8b:11:23:cc:b1:95:54:d4:9b:92:80:43:
e4:46:1c:2c:38:16:a8:71:bd:8f:87:87:69:e5:89:d7:aa:3b:
91:d5:72:06:e5:a9:b7:6d:c1:37:c5:ae:49:d6:e9:c7:dd:57:
00:74:f6:27:81:be:90:e4:82:4b:d0:55:50:9c:2b:64:82:a1:
5a:5b:fa:c3:59:2a:30:1d:82:84:93:83:89:92:9c:79:a1:eb:
3d:d4:c8:64:98:cf:e0:59:1a:7d:43:c7:35:a1:2d:af:e6:2e:
01:59:a5:15:41:46:5b:b3:46:1d:e1:fd:b3:c3:cb:37:aa:2f:
d5:bd:6e:06:48:3a:29:ea:ad:ec:ab:e3:ce:f6:ab:5d:7c:a8:
60:02:0d:9a:4d:db:ab:23:16:f5:6e:2b:16:66:31:4b:e5:e9:
6b:08:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:37 2026 by rpki-client