Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft
File: QapYrSjgocFk2w1i1SplaRMeYW8.mft (raw, json)
Hash identifier: j4IXIVBXBS055eHDFhco+ENybqxp0hK/Y2iMKYcbYpo=
Subject key identifier: EF:33:A8:94:82:CA:C4:BA:AE:C5:CD:45:C8:00:AF:38:4F:BD:1B:B1
Authority key identifier: 41:AA:58:AD:28:E0:A1:C1:64:DB:0D:62:D5:2A:65:69:13:1E:61:6F
Certificate issuer: /CN=41aa58ad28e0a1c164db0d62d52a6569131e616f
Certificate serial: 019D3A53F1B8838072F10B0F3E1D451C868E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QapYrSjgocFk2w1i1SplaRMeYW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft
Manifest number: 0127
Signing time: Sun 29 Mar 2026 16:01:12 +0000
Manifest this update: Sun 29 Mar 2026 16:01:12 +0000
Manifest next update: Mon 30 Mar 2026 16:01:12 +0000
Files and hashes: 1: QapYrSjgocFk2w1i1SplaRMeYW8.crl (hash: paWDKnK8ar3rC9b35iAMZbdFC4kP8wl3qs8p900GwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QapYrSjgocFk2w1i1SplaRMeYW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:f1:b8:83:80:72:f1:0b:0f:3e:1d:45:1c:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41aa58ad28e0a1c164db0d62d52a6569131e616f
Validity
Not Before: Mar 29 16:01:12 2026 GMT
Not After : Mar 30 16:01:12 2026 GMT
Subject: CN=ef33a89482cac4baaec5cd45c800af384fbd1bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:fe:5a:76:44:64:93:e0:fa:da:bb:48:58:
07:bb:bc:4e:64:03:91:37:fd:4e:a9:6a:e5:0a:83:
7d:28:62:be:fd:1e:33:3c:02:a0:12:d7:64:ab:19:
1c:ff:75:0f:bc:00:81:a6:2b:bc:51:a8:e2:c6:62:
44:b8:25:43:b5:88:c7:73:ab:55:50:09:b7:25:d0:
4e:30:42:ad:cb:28:d6:d9:d0:cc:cf:ac:46:95:d7:
52:b6:52:6c:4f:8f:85:81:77:a2:9e:5f:5b:0d:cd:
f6:05:a1:a2:a7:ac:f3:de:b3:33:c0:5e:0d:cf:64:
e5:c6:18:9b:dc:7a:8d:ef:ec:52:8e:6a:41:5b:91:
01:55:b6:f9:ed:52:2c:97:5d:e9:71:6f:9f:94:7e:
d7:3d:40:06:1c:7c:c0:ec:dc:33:2d:fb:ac:50:a1:
dd:2b:09:2d:6a:35:ca:95:49:5b:9d:da:69:77:67:
72:25:e2:83:ef:76:fa:99:f4:14:48:eb:e4:d0:03:
f2:42:dd:82:b0:ca:4f:78:b4:bc:5f:09:f9:b1:db:
fc:54:18:c2:75:c1:3e:c8:99:a1:da:31:35:6e:4f:
c8:21:12:4b:e8:f8:cd:4d:1e:f9:36:f4:41:08:30:
d0:61:e0:0c:48:db:94:b9:12:d8:4b:0f:2c:91:2b:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:33:A8:94:82:CA:C4:BA:AE:C5:CD:45:C8:00:AF:38:4F:BD:1B:B1
X509v3 Authority Key Identifier:
keyid:41:AA:58:AD:28:E0:A1:C1:64:DB:0D:62:D5:2A:65:69:13:1E:61:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QapYrSjgocFk2w1i1SplaRMeYW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/0fc5b3-97d6-467b-bed6-32c2c2619cfa/1/QapYrSjgocFk2w1i1SplaRMeYW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a6:a9:9a:ab:d4:7e:3a:43:f3:aa:46:7f:d5:a4:9b:2d:f8:
e5:27:f8:34:90:83:20:67:3f:a3:ee:ab:3b:b3:9b:75:f5:d3:
c8:43:fe:ba:a0:c8:78:da:ff:f5:09:a5:ef:b9:38:af:19:ff:
ff:56:ff:17:43:a2:37:01:ac:59:3e:f0:6d:59:7a:17:ea:16:
e6:fd:78:ef:34:62:90:dc:b7:14:25:52:b9:8f:85:46:25:82:
4d:e5:a0:87:c8:99:9f:03:fe:72:f6:44:34:ef:fd:9c:5b:42:
34:95:b1:cb:24:af:37:9c:85:a9:d2:cf:a1:1f:24:4e:d5:0f:
b0:f8:ec:35:84:41:fb:19:b8:33:2b:67:b6:51:75:c4:b3:d4:
05:55:44:d7:ed:86:48:3b:b1:c7:c7:d5:a1:55:50:4a:5a:85:
8f:52:a9:29:42:d1:da:0f:b9:7b:38:85:86:a6:ee:ad:c8:3f:
9b:c2:00:41:25:b4:81:cf:e2:d9:e6:26:b9:71:a8:e9:b8:68:
b1:57:b9:a2:2e:96:a8:64:67:5a:e4:65:83:b7:86:a7:fb:f5:
8e:a9:2e:c2:16:8d:d7:e8:fa:0f:6e:56:5a:7e:db:6a:cf:7e:
b1:1b:94:b7:83:43:a5:b6:d1:48:2a:c4:a1:a7:00:c4:ae:44:
36:be:65:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:19 2026 by rpki-client