Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: nUIYtZpYrFZAH3+ZHrQwhrLW/qirNyx5ehvtpNiQblA=
Subject key identifier: C3:E4:A9:17:40:02:14:50:D6:28:DB:37:67:B5:B3:E6:F6:36:74:85
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 019D3865AB9D31D2BE8B45A48B382CBF0F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: CJIq1KrEGYUJp7iznWpAmFxRyCy9j5RxvED5flWpSvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ab:9d:31:d2:be:8b:45:a4:8b:38:2c:bf:0f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=c3e4a91740021450d628db3767b5b3e6f6367485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:a8:5f:ec:bf:25:f0:c5:e6:de:ae:cc:33:
f7:02:46:b1:2c:b9:4b:02:78:24:2f:bd:b9:4d:3b:
ee:b2:42:9f:45:e2:1a:e9:cd:63:01:18:fa:21:15:
7a:03:ad:43:7f:43:0e:8c:a3:98:e0:47:cf:ca:39:
8e:ca:a9:79:4e:a3:ed:f1:97:71:4e:3e:c2:68:79:
b4:c8:0a:6f:71:5e:e9:d0:00:47:7e:04:f5:c7:81:
74:6b:38:ae:f4:67:b5:48:0f:7f:3f:5c:43:49:da:
65:1f:2b:81:6c:39:81:98:d9:de:6e:f1:47:fa:32:
1f:7d:1d:3f:4b:51:e1:67:31:83:2c:35:40:48:ae:
96:ba:15:a2:9a:ba:9d:88:ff:fd:d5:84:5e:5c:23:
f1:4f:06:41:4f:37:7b:b5:d0:7d:29:89:a8:11:b6:
0e:0e:0f:8c:5c:b5:19:c0:f3:78:18:fb:0b:6d:fc:
08:e5:3b:92:d1:c9:0b:cd:99:ad:b7:c6:55:43:19:
7b:f3:4d:cd:d3:13:c3:e8:30:8a:f9:45:a8:b5:9e:
c0:ac:82:a9:42:73:f7:ed:de:93:c2:4c:e1:09:a4:
50:ca:9d:25:b9:80:da:33:1e:c2:25:e6:f0:15:d8:
ec:f1:f6:02:dd:ab:fe:e6:a9:48:9d:86:30:f6:0f:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:A9:17:40:02:14:50:D6:28:DB:37:67:B5:B3:E6:F6:36:74:85
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:83:f9:83:7f:7f:d7:6b:89:32:ae:c2:2a:e5:10:3e:cc:
78:7c:cf:81:5f:e3:e1:2a:53:70:08:58:ae:e4:f8:f8:5c:6f:
bc:e4:dd:a1:df:f7:f7:07:36:6b:c2:e1:de:d2:78:c5:d5:6e:
af:84:03:a0:2f:0c:2c:13:bc:6b:d1:d6:0c:53:d7:5b:d3:b5:
01:a5:58:e3:5a:7b:f1:88:20:97:3c:2b:b1:4b:16:cf:e5:b4:
a5:f6:36:93:db:d6:ce:60:12:74:55:20:35:ed:9e:5c:1a:57:
09:a1:f4:35:1d:e1:9e:00:f3:f4:56:a7:4f:b8:e0:6f:6b:c5:
64:a4:ad:19:28:01:3a:e7:9d:9f:b2:19:ed:c7:bd:80:2a:cd:
e8:ef:9b:52:d6:36:42:53:9d:2c:cd:f8:0c:0d:6f:86:dc:b9:
5e:ca:74:c2:7b:19:96:6f:2b:6e:ce:bd:c2:bd:7a:d2:6e:52:
91:b3:e0:45:d9:12:2a:0b:52:1d:5f:38:4c:7d:65:a0:a6:e9:
05:ae:74:21:c1:20:1c:0e:a5:cd:62:57:c7:5f:8e:62:e8:2a:
b9:ab:08:c8:57:aa:63:8e:11:24:3c:fb:68:a7:27:23:06:fb:
d1:6a:99:77:5c:1d:5b:a4:c7:85:83:64:56:77:0c:c3:45:55:
dd:8b:0c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:13 2026 by rpki-client