Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: I//S2qwT67cAYVsLnzj2iUl+usa/V6bcDDXLwykGrwg=
Subject key identifier: 3F:7A:36:FF:45:F7:FA:1C:01:8C:20:AF:1A:41:76:A9:B5:52:67:80
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 019D37524A8A9FE5F0742F1D731622EF4A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 0BB0
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: Cx0etRilK9OPqVPhXKuGC2ZlVgk.roa (hash: REFN0+myM+evXgHngcWpaLUQ/JCZd+oxd4ZqR8bABR0=)
2: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: xiqerlg3STKWyjYDtIK+THO0p2h9Sk3+vXWZX1EJits=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:4a:8a:9f:e5:f0:74:2f:1d:73:16:22:ef:4a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=3f7a36ff45f7fa1c018c20af1a4176a9b5526780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:ab:9b:21:83:18:fa:7a:2c:2d:2e:f9:27:
45:4a:a5:4a:22:51:b7:d1:c1:c1:df:0b:78:e4:d9:
d1:a6:47:6a:4a:a6:a7:ec:c6:85:42:4a:67:ce:c0:
cc:2c:b5:88:c6:21:45:47:f0:be:50:c9:80:e0:4c:
bb:4c:c2:50:73:f9:b5:64:9c:9b:59:28:c4:73:14:
62:d7:16:a1:03:57:1e:bc:36:e0:8f:5d:6d:dd:20:
82:c9:c8:45:53:48:89:52:77:69:b9:87:40:8b:bc:
f3:e2:6e:f2:97:e3:be:97:ba:97:8b:3e:a7:25:86:
9a:92:97:58:7c:1e:f9:51:27:6b:ed:5f:86:b9:c9:
3f:a6:05:61:6c:39:9a:8a:f9:67:d3:e8:10:fd:84:
63:c8:87:a8:02:ea:9c:f5:3f:0b:be:40:96:40:75:
7f:61:bd:93:84:a2:b2:76:4c:24:b5:97:cb:e5:a2:
8f:db:e6:ab:88:02:cd:d1:2a:28:e8:7f:91:97:5f:
ad:f1:0a:9c:f4:83:38:ff:22:d7:80:0f:5e:86:ca:
d2:97:e8:23:ae:e4:a4:66:99:9c:8f:a8:93:54:26:
25:66:2b:19:3e:17:53:2f:a4:ee:49:a2:54:ce:f4:
04:2c:e1:ee:66:79:5d:d3:a4:67:d9:24:5b:ff:4d:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:36:FF:45:F7:FA:1C:01:8C:20:AF:1A:41:76:A9:B5:52:67:80
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bd:ce:7a:47:e0:83:a6:89:9c:e4:e7:d5:aa:84:91:8f:18:
32:ce:76:c2:fc:bc:f0:9a:30:67:f2:fc:c9:a2:6a:70:f6:3d:
3c:50:2f:dd:7c:dc:bc:73:69:cc:21:57:21:94:39:65:83:34:
c2:52:bf:e9:7a:86:75:9b:ba:03:f3:3e:cc:23:39:f4:6b:cf:
9d:bf:bc:45:b7:c4:cc:dc:78:79:e3:58:85:7c:b0:57:14:4f:
38:95:da:49:70:7f:74:e2:00:19:de:b1:14:1c:72:0b:d7:5d:
a3:c2:66:dd:79:ad:aa:f1:ca:cb:8f:57:29:9f:e5:0d:ab:5c:
90:b7:77:7a:5d:68:54:b2:ec:8a:b5:39:38:4d:98:af:f3:c1:
41:33:5a:3b:f0:bc:be:1e:cd:73:57:a0:24:6a:10:ea:1c:83:
bd:e2:55:23:52:98:7a:5e:ca:6b:f0:f3:0f:be:7e:bd:b3:24:
14:87:4c:51:f9:34:45:bd:ea:0a:22:06:e9:10:a1:f6:e7:40:
59:0d:3b:49:b4:e9:ed:c9:bd:33:eb:5f:87:54:02:3b:9b:0e:
75:8e:03:8b:80:5a:91:3e:3e:bb:35:19:e4:5d:c9:02:e9:a4:
05:0c:fc:31:4d:4b:49:1b:b3:87:5e:76:46:28:1f:29:72:39:
04:64:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:59 2026 by rpki-client