Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: VEvE3EoX8yONPo9dGFZoheYfhQyZf8cxpZtinAbmoBY=
Subject key identifier: 61:F0:D4:60:AF:8C:D0:CD:3C:21:FF:75:AC:3C:D3:F3:D0:D2:49:67
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 019D389C01A198601DDE488952CB3EE710C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 049B
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: G0ASOU0n8fs6/isakrLDD2mNeZtAC9VhsWyWPmReKCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:01:a1:98:60:1d:de:48:89:52:cb:3e:e7:10:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=61f0d460af8cd0cd3c21ff75ac3cd3f3d0d24967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:c5:d2:cd:c8:01:d4:6b:04:06:3f:0e:c5:
b0:21:14:6d:ab:e7:98:b6:57:04:a1:5d:0b:e6:cd:
5c:f2:2f:6b:ea:e3:8c:fe:26:3c:f4:27:95:bc:45:
4d:7f:9b:b0:e8:e6:14:ea:ce:82:2d:98:88:81:1b:
5f:f9:57:8e:f5:78:7b:65:e6:ed:45:01:4c:a2:14:
f4:e7:e4:09:d1:f3:d9:02:e4:14:8b:7b:dc:8f:62:
31:31:06:48:69:85:78:52:98:68:3b:17:53:3c:3c:
99:36:94:90:29:ed:8d:d0:ca:59:57:77:4f:3b:05:
35:13:dc:aa:6a:d3:8d:fc:36:db:fb:b1:57:1e:fb:
c9:cf:06:d2:35:6a:f8:48:83:95:8a:ed:14:34:60:
c4:c4:91:97:ea:5a:da:8d:1e:b0:14:d1:8e:8a:d6:
8a:ef:24:d9:30:a4:6e:c7:46:2f:af:7b:df:9d:78:
2b:0d:bd:1c:d6:8c:3b:78:f7:5a:be:85:24:9a:a4:
5c:7d:71:36:90:ab:04:65:3d:c0:27:f7:5a:90:92:
95:dd:06:07:11:e6:2c:c0:28:8b:3f:0b:a9:ba:1e:
4c:2f:a6:7e:f4:73:f4:71:91:9c:26:f8:ed:d6:fb:
ba:4d:03:c5:7b:99:85:c9:8b:8c:a7:ec:fb:f8:6a:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F0:D4:60:AF:8C:D0:CD:3C:21:FF:75:AC:3C:D3:F3:D0:D2:49:67
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1e:57:be:0a:8b:0d:6e:d2:b4:de:4d:28:78:2e:08:1b:c6:
f8:8e:09:0f:58:c2:71:40:ea:ac:9f:d6:d7:da:d9:b5:ae:2f:
04:18:b9:23:4e:d9:d5:1a:94:4d:b4:9d:b0:d0:bf:20:84:aa:
38:79:ff:52:cb:4c:ac:4d:e0:85:28:b6:e1:2a:4c:fa:11:7a:
7d:39:bb:83:e5:a0:ef:3a:b3:15:4a:28:a4:4a:42:44:65:1e:
b7:63:d6:2c:46:8e:aa:0f:e4:08:91:13:b0:fe:45:32:90:f2:
22:a4:fd:4b:e7:dd:bf:0c:ea:a2:f1:33:b1:2c:cb:3b:3e:b9:
cc:1f:af:0f:e5:6d:a9:68:ac:c0:2f:a9:ff:a9:a9:e2:03:1c:
ec:2e:6d:82:5a:a8:fb:01:24:0b:fb:83:03:3a:a4:86:73:65:
55:50:3e:b6:2e:3c:a0:ab:86:68:47:07:64:8e:33:41:90:e0:
d4:c6:3c:9d:cc:f9:12:ea:cf:b9:03:85:ca:37:da:8f:fd:46:
26:c4:6c:58:f8:e3:1d:5d:b9:dd:21:7d:a9:3b:38:f3:ca:ec:
62:b8:d8:c0:b9:5c:2e:94:48:60:70:c6:f2:e4:5f:7c:41:38:
e1:c5:d9:87:26:4b:8c:b9:92:c8:92:b6:65:42:bd:26:cd:5c:
9b:06:98:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:00 2026 by rpki-client