Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: 1qEs1Q9LvpxngGrBc1rARHoteatVoFM+VBhyd/MVp+8=
Subject key identifier: 40:AD:0E:83:91:BF:97:1F:22:C4:F2:0B:E5:BA:5C:37:6A:C5:42:22
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019D38D29DDD589D5BC6BBAD9EC3B549AA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0928
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: 8OM3mPVUub9PaF6htyFFkP/kR9V7jgxHQC79k1A2s7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9d:dd:58:9d:5b:c6:bb:ad:9e:c3:b5:49:aa:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=40ad0e8391bf971f22c4f20be5ba5c376ac54222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:60:ba:13:fe:5d:b0:03:1a:da:0d:4a:f5:
bd:e0:eb:57:e8:ec:a5:58:5e:5f:bf:18:63:f8:05:
bf:6e:d5:de:b4:52:ba:f1:c2:92:11:06:af:6d:0d:
9c:4e:8e:e4:46:b3:1f:36:2e:29:b9:d9:f2:81:22:
8d:8b:9e:12:e8:b4:55:1c:55:e6:f0:1a:9e:89:a6:
90:40:9e:d9:9c:f5:65:3d:a1:70:56:ab:2f:1e:6a:
8a:36:52:22:ad:d1:75:0d:82:e8:71:f9:5a:ba:dd:
20:9e:70:f6:a5:98:04:66:18:c1:83:b1:47:df:55:
3b:9b:e2:61:ad:64:fe:5e:66:33:d2:79:e0:21:f0:
b7:3a:f2:26:fe:28:42:d4:f1:97:e7:5e:ed:c9:f9:
8f:9f:75:93:21:11:53:ee:77:f0:c3:b2:4a:15:fe:
48:89:35:3a:eb:6c:55:14:11:92:5b:3c:77:3f:51:
80:29:e0:4e:86:06:fa:38:4b:ba:2b:09:7a:19:69:
dc:43:b3:06:d9:d6:13:ae:5c:39:a7:f3:1a:82:d0:
74:fe:0a:4e:53:e2:4e:15:c0:2c:4a:d9:1c:e2:d2:
54:92:7e:dd:f6:b8:20:05:b7:60:4b:7b:84:b2:1c:
4c:cc:cb:e2:25:45:45:92:14:e5:2e:83:2c:f4:74:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:0E:83:91:BF:97:1F:22:C4:F2:0B:E5:BA:5C:37:6A:C5:42:22
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:78:3c:12:40:67:11:67:6f:65:10:3d:1b:d6:9b:f0:85:28:
97:6d:07:33:a9:2d:f0:ba:b7:02:12:1a:19:32:55:fa:ab:6b:
8b:86:8a:1f:4b:3f:06:b4:6c:4d:5f:62:1e:2e:85:7e:40:21:
28:10:85:fb:b7:b1:22:62:60:07:ed:94:a7:80:90:fe:f1:29:
64:83:5d:37:78:20:9a:3a:31:33:a2:25:18:23:5a:5b:72:5c:
fc:57:cc:fa:77:08:0e:e2:0c:71:0b:28:92:1a:f0:fe:2f:8a:
57:d0:11:8d:f7:15:6f:52:63:fb:7f:92:b2:62:cb:73:d7:84:
0e:57:8b:34:5a:18:b3:65:97:23:bb:a3:b0:fb:5b:eb:8a:8a:
be:57:50:f4:a9:d6:16:f3:97:0c:ac:ed:33:7b:02:54:8c:e1:
86:38:14:54:b0:05:78:ab:31:bd:4e:0b:df:d6:38:b0:f3:cb:
86:f6:05:e6:29:1e:2a:c4:8b:1b:ac:5c:6f:26:0b:8f:22:4d:
4f:7d:b0:54:27:67:a2:eb:bf:a5:3b:b8:fc:ad:a6:77:c0:13:
ba:a8:6e:e1:50:b2:b7:7d:66:5e:82:a2:01:70:2b:1a:5b:97:
af:ba:4b:71:00:6e:7c:3a:5f:5d:a0:e3:64:bc:0a:76:cf:41:
93:cb:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:36 2026 by rpki-client