Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: XdyNZlhG5InQg5isdOVxvNivl3FJcsiYCczcwciw7To=
Subject key identifier: 9D:A8:2A:CF:21:E0:E0:FC:95:4D:FC:A0:89:CA:0D:F4:1B:81:CE:A7
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 019D3A53E6EE19A00DCB998642114FBC6B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 16:01:10 +0000
Manifest this update: Sun 29 Mar 2026 16:01:10 +0000
Manifest next update: Mon 30 Mar 2026 16:01:10 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: WD7zko1EnX2OSxnkohSQJFLCvrCRTesy/IgtM/nOUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:e6:ee:19:a0:0d:cb:99:86:42:11:4f:bc:6b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Mar 29 16:01:10 2026 GMT
Not After : Mar 30 16:01:10 2026 GMT
Subject: CN=9da82acf21e0e0fc954dfca089ca0df41b81cea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:d2:7a:e2:96:1c:87:bf:98:15:78:f7:cf:
88:e9:a6:8c:79:e0:36:c5:6a:eb:d0:7e:4f:93:04:
cf:fa:67:32:b2:50:0c:fd:3d:c2:ef:83:db:58:8a:
c1:6e:14:e4:4d:aa:9c:a4:87:ff:61:f6:6b:55:b2:
a0:73:1e:cc:af:92:10:36:50:03:ca:43:b5:e4:b8:
90:d9:f8:bf:da:cd:c7:61:50:c4:92:a8:44:c1:49:
23:eb:5d:35:1f:6d:f7:21:23:3d:d7:ac:6e:6b:bb:
88:1f:15:40:36:85:36:29:3c:c7:87:05:41:07:2c:
81:3b:c0:66:46:9a:0f:4e:5a:37:ee:a6:b1:95:a3:
5a:a4:73:3a:9c:13:6a:b3:50:63:52:5d:f0:e3:59:
e1:13:04:5a:22:39:e4:a7:30:0c:5e:2e:92:d3:7a:
f2:4c:75:2a:ef:5f:f4:2a:53:c3:66:d2:41:3a:e6:
92:53:de:74:65:ab:ef:6b:d5:76:aa:73:31:d2:9a:
d7:cf:89:78:cf:33:ac:9c:79:53:23:0d:3c:bb:83:
1e:45:60:b6:40:2d:2d:3b:0b:82:74:4c:9f:1d:5b:
f2:ec:0b:5b:62:8f:ff:3f:66:76:6b:6e:24:fd:54:
5f:b3:27:43:79:b2:99:79:24:d5:2c:e6:bc:06:f4:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:2A:CF:21:E0:E0:FC:95:4D:FC:A0:89:CA:0D:F4:1B:81:CE:A7
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6b:67:d3:85:f8:d2:1f:98:3a:3d:b2:5c:9c:5b:d3:8a:ad:
8e:a8:65:e4:81:83:6a:bb:68:7a:84:5c:b0:4e:fc:75:d6:e1:
ef:a6:db:7e:14:43:71:42:69:d4:e2:4f:87:73:c8:b5:88:80:
73:23:19:d3:77:cc:43:97:23:fe:98:ee:a0:82:9e:54:52:e3:
5e:85:80:1f:fd:7a:66:b8:c3:a1:a1:9e:e1:ae:29:35:c2:23:
d2:c1:08:c6:e2:7f:29:1e:54:8c:2d:6a:cd:2f:0c:28:9f:e6:
59:88:cb:76:f1:80:1d:e4:5e:3d:25:04:ae:6a:b5:c2:c7:94:
43:11:90:8d:9b:54:c2:e0:54:64:b6:61:61:f6:1b:29:5f:f4:
58:ea:50:73:7a:c4:73:49:3e:41:06:6a:25:05:20:0d:82:af:
42:77:0d:9b:bd:c9:c7:6a:43:a2:7a:8b:8e:c0:ff:67:d8:07:
35:44:c6:76:b5:b1:fe:b7:54:86:72:0e:88:44:17:f3:e9:da:
fa:84:0e:f9:96:d0:7a:57:ea:4e:c1:07:21:c8:41:b5:49:e5:
5b:b9:8a:16:4a:ee:ea:97:03:0c:66:ef:f0:80:90:2c:ff:6e:
b2:e3:e9:6e:53:64:59:93:a9:16:1c:49:67:00:3f:35:56:45:
70:dc:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:48 2026 by rpki-client