Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: oC9jP76IVz5+SjBKwMK7xt5RJbXHws9dMx3RlbgneJk=
Subject key identifier: 96:CD:37:1E:38:BA:6E:A5:D7:C2:3F:D0:62:FB:0B:84:83:3F:33:E9
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 019D3941399CB8F38D6FBD48151098C45E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 1326
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: 0nGK1MYemZhzi1ITIXNnpfnL0p2sL7SYlQ0yYhh1o9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:39:9c:b8:f3:8d:6f:bd:48:15:10:98:c4:5e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=96cd371e38ba6ea5d7c23fd062fb0b84833f33e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:7b:f4:27:28:eb:1c:e4:db:c8:7b:8b:9a:
6f:82:fc:eb:41:77:ce:9e:2c:d0:b2:f9:b8:c0:cc:
35:8e:b2:a5:06:f4:16:f3:97:22:59:a4:9e:6b:9d:
cc:79:fe:68:d3:6c:36:d2:07:47:11:39:ac:85:5b:
81:dc:59:f3:dd:0f:7e:b8:a5:cb:02:bf:18:e0:b9:
55:95:a1:5b:59:2f:16:7b:6c:2b:26:0b:1e:bc:b0:
57:3a:7b:d8:d5:e1:19:95:93:00:70:b6:1e:dc:35:
db:11:45:60:d5:05:c0:01:7d:8c:d2:0b:77:3c:38:
c0:d4:bc:f2:7b:aa:b2:9e:d3:b0:fd:42:2a:ce:5b:
89:f9:2f:d7:03:44:ed:ce:9b:a9:5d:67:c1:b7:8b:
1c:63:ac:e3:6d:0b:b6:74:be:08:45:96:3e:1b:f1:
83:a9:6c:02:46:d3:b9:9a:10:1d:1a:48:0d:b8:94:
46:8b:42:c7:ae:49:3f:be:be:8a:09:97:cb:aa:2f:
98:0d:2d:fb:a6:1c:8d:34:15:94:de:91:31:a7:b0:
7b:23:b7:83:5b:6f:b2:72:b7:47:64:46:74:31:7e:
c9:38:cd:22:ac:24:97:14:ea:0b:48:b6:79:47:da:
b2:76:c6:f2:2d:c0:93:86:31:ec:f2:17:dc:84:82:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CD:37:1E:38:BA:6E:A5:D7:C2:3F:D0:62:FB:0B:84:83:3F:33:E9
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bb:f0:4b:cf:b1:3c:08:09:66:84:25:01:7e:43:85:57:d6:
6f:35:25:98:d0:07:8c:0f:2f:1e:5d:ec:1e:f0:5c:14:4f:8f:
db:2a:f6:82:10:f9:b5:7b:ec:91:b7:ca:a7:b7:27:0c:bc:75:
a0:f2:ce:eb:9a:9c:43:d3:88:56:20:f5:53:a6:4a:29:1f:68:
aa:e5:3c:d2:dc:89:47:31:e2:3e:09:82:42:b4:ab:25:21:d5:
3c:3a:16:d7:94:93:01:39:c9:12:0a:36:34:95:e8:63:f8:87:
e7:2f:d6:b4:f5:0e:e5:11:47:06:f4:50:2e:cd:18:62:6c:93:
66:e6:64:24:06:1c:d8:c3:2a:1b:23:11:94:2a:c1:28:3c:31:
ac:5f:06:28:8e:1d:7f:84:d9:70:51:25:e7:af:b2:3b:d3:a1:
e0:c0:b8:7c:18:17:57:2a:8f:e5:2e:1e:ca:02:d9:ae:ce:ac:
c2:5b:fd:99:19:b3:bd:3c:82:b5:3e:ca:5c:92:bb:93:35:c7:
69:13:23:34:e7:f2:e0:af:06:9d:9f:fd:a7:17:0a:25:d0:c6:
c4:d3:3a:0c:29:cf:fa:f3:0b:9c:67:e5:e0:eb:fd:c3:2b:cb:
0e:cf:a9:e7:fb:4b:32:b3:f5:ee:9f:ff:6c:5f:47:a8:ab:75:
34:d8:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:37 2026 by rpki-client