Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier: TlZwYnrBSr/hyB12qALtAQ+nw8xWVxeoNinzrFEztxk=
Subject key identifier: 59:19:1E:88:CB:AF:DA:28:A3:F6:DF:5B:E4:A9:21:46:90:B4:69:2C
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial: 019D38665E8AB51240F2E93504F02D4E46E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number: 0E9E
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: i6XX4xlaQNfz4AD0o1UEHjQV6bzhj+gyTPqV09aGWSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5e:8a:b5:12:40:f2:e9:35:04:f0:2d:4e:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=59191e88cbafda28a3f6df5be4a9214690b4692c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:e9:0a:81:de:43:67:6b:ca:e1:7f:5b:0d:
5f:57:ca:d4:9c:5b:b2:04:c5:88:b8:54:7b:a5:fc:
35:74:f5:82:56:7b:fe:8c:e2:43:21:3b:6b:0f:db:
9f:fa:57:c7:1b:66:70:3a:26:a2:62:42:e2:8f:ac:
f7:3c:41:e5:c4:98:72:ba:b4:4b:90:d7:cb:cf:5c:
6b:c7:00:8e:2b:9d:08:90:fc:7c:b3:67:e5:b5:a4:
61:3a:2d:4c:04:07:b0:a9:36:be:2a:57:82:e4:f8:
bd:09:ed:27:ea:74:fb:44:4f:8a:7e:59:7c:f4:70:
70:19:3c:a5:ad:2a:5e:67:8d:15:e2:5c:d6:53:0e:
da:34:02:db:39:aa:83:e2:11:af:1e:0a:a7:dd:49:
06:f3:26:14:85:0d:00:53:f6:93:58:2d:c3:03:57:
bb:8a:75:dd:12:01:7e:5b:00:3c:d2:8f:59:b1:69:
f8:4d:b1:68:fa:33:90:2b:0c:81:29:04:5f:c5:48:
21:39:20:77:78:69:40:f5:69:e3:44:8c:3f:ce:df:
e0:2b:9d:98:84:60:c2:fd:aa:20:50:a0:4b:65:ea:
97:b3:eb:42:20:5a:9f:10:e9:f9:33:e0:f3:6a:1e:
aa:18:e6:15:45:4d:72:2d:40:3c:21:05:a3:35:2a:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:19:1E:88:CB:AF:DA:28:A3:F6:DF:5B:E4:A9:21:46:90:B4:69:2C
X509v3 Authority Key Identifier:
keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9e:4b:32:d8:cc:0a:24:e0:16:11:03:68:02:5c:6a:47:6f:
3c:41:8c:37:f6:03:41:ad:a1:c1:ca:2d:5d:2a:49:3b:ea:e3:
f3:8f:9e:a0:59:c9:0b:3f:35:e4:c3:d8:3f:7a:96:b2:d1:6d:
e1:ca:83:06:ee:77:e9:33:d4:6e:eb:05:c3:57:9c:37:5b:d5:
95:0c:ea:64:a2:80:ce:e6:7a:f0:85:c0:26:f9:26:d3:d6:3d:
68:84:26:4c:07:fa:2d:df:b4:1d:37:8c:6c:f4:1f:09:33:64:
4c:e0:2b:10:19:74:5a:21:a4:09:49:ee:01:94:19:80:dc:13:
d2:90:92:4f:6b:a4:89:4d:da:5a:42:22:aa:55:10:1c:3e:61:
e0:98:bb:0f:03:45:63:55:01:a8:bc:be:bd:0b:72:e4:e8:0e:
ae:74:41:75:38:7e:b0:96:04:5e:a9:cb:39:68:bd:9a:f8:dd:
a1:8a:74:c1:7e:c9:ed:f9:d6:32:47:cd:81:b8:5e:c0:1f:05:
41:27:b4:eb:2c:5f:ef:f1:a2:98:91:4d:5e:e0:38:62:f6:bb:
ea:99:85:a8:bc:78:df:fb:09:50:5d:4c:7d:68:87:30:2e:69:
2c:1a:98:39:9e:6f:e3:01:d1:36:eb:1b:de:3c:35:71:b5:e6:
7c:b1:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:05 2026 by rpki-client