Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
File: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft (raw, json)
Hash identifier: TvfWlT+e3AEDvNN5lcW3wdGjFAiCnS9mJF6C90TBX2w=
Subject key identifier: 37:B9:74:83:23:29:1B:E1:4C:31:6B:DC:50:10:80:E0:93:31:1A:55
Authority key identifier: 42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
Certificate issuer: /CN=424c165b6a49349541c65af9b21580163819f284
Certificate serial: 019D3865E8BABC86CE2ECDB86B650D0BC751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
Manifest number: 0C2D
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl (hash: M6pxpgsaKoz3ZuFehwDtAu+4HzoqXUkOmvO/2xvyPN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e8:ba:bc:86:ce:2e:cd:b8:6b:65:0d:0b:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424c165b6a49349541c65af9b21580163819f284
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=37b9748323291be14c316bdc501080e093311a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:44:9c:5a:d3:30:0b:3c:6b:a8:ee:98:88:
3b:90:27:69:04:d1:3a:dc:01:73:a0:f5:14:62:3c:
93:2d:32:26:b1:72:3f:63:01:3b:10:ff:34:fd:25:
0b:18:9d:1d:c9:a2:87:b3:31:df:ca:19:c9:2c:85:
bb:6d:9b:ae:82:a1:21:5c:76:b0:3f:37:65:b7:c4:
eb:ac:16:e4:22:f2:67:70:2b:2f:f6:61:cd:e7:1f:
06:0a:d7:35:21:fa:3a:a3:d2:c3:a6:e5:76:98:6d:
6c:83:95:2f:de:46:a7:ee:00:1f:de:6f:84:a8:6d:
32:6c:42:22:0d:09:18:34:e9:c6:35:76:34:a6:cb:
8d:d5:01:24:90:27:f6:fd:56:30:88:24:8e:b1:6c:
e1:fe:06:4d:c9:16:33:cf:01:6c:8c:e5:10:fd:82:
1d:b4:41:1f:f3:0e:d2:a0:41:48:38:78:ce:2d:bc:
6d:c1:54:5d:da:be:ab:54:f0:f9:e7:d1:08:5e:6b:
87:68:3c:35:65:26:86:00:55:4e:85:81:16:98:9a:
f9:db:ef:e4:7a:bf:22:0a:47:7b:40:c3:36:f4:ae:
87:98:be:66:16:1b:b0:74:72:03:39:52:ed:88:37:
ef:ef:6d:30:31:48:e1:1f:a4:10:5d:86:df:2d:e7:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B9:74:83:23:29:1B:E1:4C:31:6B:DC:50:10:80:E0:93:31:1A:55
X509v3 Authority Key Identifier:
keyid:42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:64:aa:1c:2d:68:89:53:0b:81:b6:48:eb:2d:13:58:6d:6e:
8b:8b:67:85:32:9f:83:1b:08:8a:ad:e4:a7:a7:e3:0e:05:87:
86:e2:39:32:80:e8:04:77:c8:19:30:5f:ea:f0:0e:43:07:4a:
24:dc:ff:c5:56:5f:7f:8c:d7:77:19:bc:9f:69:e4:a6:88:04:
5d:44:12:e5:72:59:54:48:5f:d2:b5:95:86:3d:f5:86:a1:e8:
f5:12:07:f4:ac:bb:b2:6e:1b:8a:dc:41:23:73:40:43:2e:2d:
ec:8f:05:02:e9:60:af:88:da:89:fd:f3:eb:a9:46:ab:7b:c6:
de:e2:0a:4a:9f:39:c5:47:9a:f3:06:cd:fb:7f:75:02:e6:fc:
f8:05:cc:3e:01:68:e4:a6:6b:ff:33:2c:22:26:d8:68:82:d6:
c4:84:f2:6f:6a:ad:c0:63:fb:da:bc:06:d9:de:13:58:ee:ca:
62:fe:88:b2:b2:e7:55:91:40:e9:2e:e0:cd:6d:c6:97:14:e9:
49:87:10:dc:f2:4b:8e:06:ba:cb:98:78:18:ac:d3:f9:b0:4e:
3f:13:25:59:9d:fa:0e:bb:9b:2a:24:b3:d0:af:da:11:de:06:
63:4a:53:3e:43:99:a8:a6:59:2d:35:67:8b:8e:e4:f0:5a:e5:
e8:4d:0f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:57 2026 by rpki-client