Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft
File: qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft (raw, json)
Hash identifier: r7R/o3fETNIsLMcteS6PYPuumk3k7kLh+bXPIfr0LQE=
Subject key identifier: 7D:6A:80:A1:ED:0C:AE:33:F5:7A:8B:D8:C1:51:CE:63:DF:20:C5:92
Authority key identifier: A9:F0:80:A3:E9:EA:41:0D:1B:8F:06:5C:C2:92:3A:59:FF:6A:C1:01
Certificate issuer: /CN=a9f080a3e9ea410d1b8f065cc2923a59ff6ac101
Certificate serial: 019D37C130B4C8E6534F21D44C4D87043AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft
Manifest number: 0128
Signing time: Sun 29 Mar 2026 04:01:40 +0000
Manifest this update: Sun 29 Mar 2026 04:01:40 +0000
Manifest next update: Mon 30 Mar 2026 04:01:40 +0000
Files and hashes: 1: qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.crl (hash: tjwboDmtpOaQNtuMTD2l2OX8pyGOqRGBWg4J+S9uTUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:30:b4:c8:e6:53:4f:21:d4:4c:4d:87:04:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f080a3e9ea410d1b8f065cc2923a59ff6ac101
Validity
Not Before: Mar 29 04:01:40 2026 GMT
Not After : Mar 30 04:01:40 2026 GMT
Subject: CN=7d6a80a1ed0cae33f57a8bd8c151ce63df20c592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:49:15:91:a5:7c:23:da:8a:ef:ab:ef:3a:
67:19:26:77:02:07:e7:1c:21:82:94:1e:4b:fc:e2:
ce:dc:ce:78:8e:c0:da:89:c1:bb:f9:e7:2b:dd:41:
02:78:82:e3:33:ab:97:f8:8a:9d:27:58:e5:c9:44:
fe:06:77:7f:47:68:77:fa:95:b2:d9:d8:15:75:00:
d9:ec:63:46:f8:88:95:93:ab:8f:82:d3:0e:ed:43:
ef:45:a0:e7:aa:4c:ed:6e:ec:6f:f1:bb:4f:99:f2:
9d:f7:0b:94:48:d0:4e:91:fc:16:39:1a:e6:4b:c4:
ab:b6:a3:18:1a:b2:26:be:7b:4f:39:5e:0b:2a:fe:
27:f2:1d:f4:ef:33:f8:a3:99:2e:df:a1:1e:c6:37:
df:55:fd:b2:c8:ac:4e:eb:00:fb:8d:99:22:6c:98:
ca:ab:fb:a9:e5:fc:3e:e7:ab:8e:ca:fb:2f:d4:21:
84:4f:d8:9c:23:f3:e4:fc:64:43:e6:24:59:3e:0a:
20:ac:08:3e:43:63:85:4b:d1:d2:2e:73:66:0b:1b:
42:d1:e0:05:56:46:67:74:f3:08:89:fb:b0:c2:69:
bb:e3:44:b7:7b:6b:9a:d5:0d:20:d3:32:24:89:35:
26:67:26:af:b2:cf:9a:ec:57:3a:8d:2a:16:c8:2e:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6A:80:A1:ED:0C:AE:33:F5:7A:8B:D8:C1:51:CE:63:DF:20:C5:92
X509v3 Authority Key Identifier:
keyid:A9:F0:80:A3:E9:EA:41:0D:1B:8F:06:5C:C2:92:3A:59:FF:6A:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/qfCAo-nqQQ0bjwZcwpI6Wf9qwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3b:4f:53:51:f5:eb:41:7c:be:f9:f0:2a:68:d0:eb:96:2d:
b6:7f:94:11:8e:21:0b:4e:7a:b0:8d:2f:07:e7:5b:ec:61:05:
df:6e:a5:7b:7d:37:7e:96:22:ef:93:50:b1:c5:18:d1:f5:51:
00:c5:79:e0:d1:41:b8:04:54:9d:73:6a:bd:98:55:86:1a:8f:
ac:cb:b0:87:94:66:67:1b:ca:ec:0d:c1:d1:43:eb:a6:98:62:
f5:69:51:8c:3f:71:c8:98:d6:df:4a:2c:be:3e:61:6d:5d:87:
c0:b6:96:98:46:d7:ef:40:bc:4e:71:07:dd:18:dc:6c:92:37:
47:fb:3b:61:b0:74:0d:3a:e5:89:bc:0f:73:a1:30:19:63:4c:
de:10:53:f9:47:ec:29:91:22:8e:60:ce:23:bd:da:41:5c:c4:
63:b5:d9:55:0b:d9:ac:66:38:d5:42:60:06:77:83:21:ed:27:
0a:ed:7d:c9:bb:5f:34:ed:cb:da:2e:1f:9e:9b:ec:d6:4f:20:
c5:e8:ca:e9:63:91:3b:aa:c7:4d:0b:9d:e9:d7:79:3d:d4:1c:
5f:1d:35:98:51:49:36:25:a0:0e:73:12:3f:ee:c4:f0:98:32:
7b:32:1e:8c:a0:7e:4e:56:15:62:e9:c6:82:31:d6:8d:ef:e3:
b5:c2:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:02 2026 by rpki-client