Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: eFYZo7uPPrlw9KxOQDSPppcIiWs6FFzAmTNezXyJ3sk=
Subject key identifier: 21:A6:C2:4D:47:BA:1C:AF:8A:B5:36:E2:24:79:99:9F:8E:15:78:A3
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 019D389C0C4029949ADD317A3F58FE64F8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: 8BGBC40USqecFufXZ+0nbB2/fRDDOlSkuIqgKXlYBbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0c:40:29:94:9a:dd:31:7a:3f:58:fe:64:f8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=21a6c24d47ba1caf8ab536e22479999f8e1578a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:7e:8e:3e:af:61:db:fa:36:ec:1c:b9:93:
fa:35:91:24:82:73:a7:2c:0b:d9:08:20:8b:da:27:
90:ae:b1:36:f9:29:e8:1d:69:78:31:3f:38:cd:a0:
68:e7:70:ef:14:af:ae:63:86:77:dc:80:e7:af:e6:
9c:fa:bf:31:73:12:92:de:bd:04:98:b7:8e:23:da:
b4:9f:a3:63:67:92:04:83:90:a8:19:f4:ad:43:44:
72:fa:94:8a:8b:ac:6d:50:05:e9:52:cf:92:2a:45:
11:a2:f2:f8:a0:21:30:4d:b9:6f:67:42:82:65:ae:
83:54:48:a5:e5:48:8e:1b:4a:75:42:4b:ce:06:26:
1a:2a:0c:6c:cc:fd:09:a7:b2:51:5e:b9:51:ef:ad:
57:1c:0d:63:de:39:11:ed:66:d1:2d:57:ff:99:da:
eb:ec:91:15:d7:d1:be:0c:a6:0f:c8:4b:5f:1f:39:
ee:27:ca:84:b0:66:2a:2b:40:16:75:f4:ca:72:dd:
bd:e0:8d:f7:23:f0:46:d9:d1:fc:d0:6b:82:0e:cf:
27:fa:79:b4:57:22:e7:ad:d4:bf:bb:9f:5f:f1:14:
5f:18:e5:7c:7b:3d:9f:32:d3:01:3f:03:42:0d:34:
b4:8f:82:b8:a2:af:3d:a2:68:21:25:c0:0e:5f:e1:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A6:C2:4D:47:BA:1C:AF:8A:B5:36:E2:24:79:99:9F:8E:15:78:A3
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c4:6f:ad:f2:ed:52:94:59:f1:e9:b1:0f:46:f3:94:18:cf:
5c:27:07:8d:fb:33:c0:8e:cc:5b:52:84:1e:00:01:3d:13:2a:
32:38:5c:b4:84:e4:95:9c:a9:f6:1f:b8:d9:78:7d:d2:b8:e4:
8e:ea:85:0a:42:43:7e:c9:36:9b:34:83:38:e2:1a:72:8c:fb:
58:c4:5a:4e:9f:39:5d:34:81:7a:90:54:33:aa:47:4f:99:9a:
a8:bc:f0:d7:e5:b8:c1:c8:e4:b2:53:6f:92:b9:6c:59:20:37:
b5:69:58:20:34:d0:df:25:7f:bc:6e:bd:bf:7e:60:1d:ad:d5:
58:3f:8b:29:fb:ef:4f:3d:b2:09:a0:3e:e4:e6:0c:4d:66:04:
23:5e:ff:45:ad:e9:38:13:b5:03:cf:c0:0b:c3:69:17:fd:c4:
b9:0f:ad:b7:2c:4a:4e:b8:d6:29:b9:e3:38:54:b9:ab:a7:5a:
b8:f0:bb:bd:a8:fd:88:db:6c:73:d0:b6:6e:a6:a1:9f:12:b8:
f2:22:fc:ff:f4:30:44:ad:d2:54:19:bd:e3:39:a1:f7:fa:1b:
91:e5:a7:95:11:ab:f3:11:45:5d:8b:9c:02:f1:db:db:e2:26:
9d:33:54:6f:d5:d5:97:a9:c4:c0:3e:b4:c5:1a:c6:0e:ac:a2:
ac:8b:24:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:52 2026 by rpki-client