Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: C6IZNSevUI8Zb85qNRCRnPfST8r5bk+lmJft5THZ3ZA=
Subject key identifier: 01:C1:A4:E9:FC:7A:1D:15:36:2D:A2:8F:7E:AB:0F:91:C8:19:A5:5B
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 019D3866259ED5E1E0BE82E6A4A560032226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0C7B
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: 8qZZa4i7nh6ThM07ocfyGJgyQQ5wZ10Ju/bLhkjf8P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:25:9e:d5:e1:e0:be:82:e6:a4:a5:60:03:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=01c1a4e9fc7a1d15362da28f7eab0f91c819a55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:69:c6:a8:e4:92:9b:92:6c:c3:43:7a:f5:
5a:ba:5e:1c:63:36:48:99:df:48:3d:45:0a:f7:9f:
45:cc:11:f9:ca:ad:d6:0a:a9:72:b5:81:0e:d5:eb:
2f:64:40:bb:3e:52:24:53:41:94:67:85:50:75:21:
00:e1:5d:78:4c:56:b5:4b:d3:4b:4b:3a:02:86:95:
05:33:0f:20:cc:0a:ea:bc:98:d2:14:09:d8:77:55:
ad:16:94:ea:15:9b:b0:d8:78:77:ca:78:05:2b:c2:
b3:3a:39:28:ac:f6:48:96:6d:c5:e2:23:2e:71:d8:
a8:2c:5b:e5:38:da:12:76:cb:20:1a:e6:de:31:b3:
48:85:2f:68:28:62:1d:33:ad:d4:61:e4:fd:a9:4b:
92:3f:70:54:d5:5f:a5:83:c2:d9:64:cc:ba:e4:7c:
3f:54:83:98:ff:48:7a:68:9a:33:c1:4e:49:a3:97:
5a:0d:f9:1f:94:e6:81:51:70:87:0f:5c:67:d7:65:
c6:60:a0:57:1b:62:12:69:ef:2a:11:8e:9c:56:62:
f3:1f:13:51:72:2c:cc:85:c5:30:5d:f6:e7:80:c2:
09:30:6e:5d:21:d4:f5:42:89:38:d2:b6:cb:b6:93:
13:16:1e:55:db:5f:8c:cb:3e:22:10:51:c0:64:a3:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C1:A4:E9:FC:7A:1D:15:36:2D:A2:8F:7E:AB:0F:91:C8:19:A5:5B
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:54:9b:6d:3c:d9:36:70:2f:b7:a7:53:5f:14:48:54:00:a4:
f3:8f:f8:5b:b0:46:e1:df:0b:14:20:1c:35:40:68:03:57:58:
77:6b:c7:d7:36:f2:d0:1b:0a:ac:93:6e:79:aa:32:ef:a4:03:
4a:66:4a:7b:2a:f9:cb:07:11:d4:ce:68:86:1d:83:d7:db:56:
0e:14:af:22:3d:8f:89:b8:bb:b5:ca:5b:76:42:11:3e:a3:98:
25:6c:91:95:2b:62:0d:b0:77:6e:3e:6d:68:df:e9:ca:5a:b4:
3b:c9:64:e0:db:d5:9b:7e:3b:6d:a7:e7:cf:53:30:42:ce:fa:
5f:f3:12:f3:82:6f:81:fc:9d:fc:a4:89:87:f7:05:d9:78:b0:
c9:b3:31:3b:f7:0e:a7:2a:72:de:15:6f:cc:19:8f:e4:69:7e:
a5:22:b6:3c:8a:4c:dd:04:1d:28:3d:3e:1c:57:dd:29:ce:b8:
3f:da:f3:1b:71:b8:9f:89:27:79:e5:17:4d:be:c4:0a:62:a2:
7f:d3:8a:56:0a:72:d4:0e:12:f8:a6:e5:be:e4:e1:11:b9:38:
f7:ee:bf:7a:97:89:0c:3c:b9:a8:63:ba:8d:6b:f9:d7:5d:da:
ea:a1:af:ec:f4:df:a4:dd:a3:9b:04:69:1e:af:3f:e3:5d:ce:
0d:53:d8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:03 2026 by rpki-client