Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: SNC6GpNz8ia0Vdgj3qi+pDZj3L3mxly0qhT5nlTIwDc=
Subject key identifier: 83:C6:65:83:5E:E3:2B:BF:76:1A:B9:16:6B:AF:4B:ED:9A:82:D5:25
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 019D37C0E0EE69E38C47710154494EECC41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: 0517
Signing time: Sun 29 Mar 2026 04:01:20 +0000
Manifest this update: Sun 29 Mar 2026 04:01:20 +0000
Manifest next update: Mon 30 Mar 2026 04:01:20 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: 55suNCH+9sOO9u9evBpQ4aYFakA5gl1qcZ1IzgFd7UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e0:ee:69:e3:8c:47:71:01:54:49:4e:ec:c4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Mar 29 04:01:20 2026 GMT
Not After : Mar 30 04:01:20 2026 GMT
Subject: CN=83c665835ee32bbf761ab9166baf4bed9a82d525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:c5:d9:09:12:96:28:f3:fc:b9:97:76:c7:
7e:37:ee:fb:54:f5:1d:5b:63:2e:f3:6d:91:ff:d1:
37:37:3b:c6:bb:a1:fb:2c:80:66:3e:01:7b:9b:c2:
33:0d:a3:da:94:7b:18:05:ff:fa:ec:47:26:9c:e9:
fc:a5:d8:e0:46:c9:4a:11:eb:f6:b2:3e:c0:4f:66:
71:4b:b5:e4:0d:29:45:3b:63:71:48:3a:99:54:eb:
64:35:e5:70:a9:af:88:a2:02:22:c1:ed:07:44:13:
4a:a3:b7:6e:98:36:68:a0:f1:c8:ba:7d:48:08:4f:
cd:6d:18:d2:f9:44:52:f9:13:60:12:63:db:83:31:
b2:7f:ed:ad:89:73:e9:f0:e9:9d:5b:c9:73:d7:fc:
dd:10:9e:22:5c:09:28:81:c6:40:9a:f5:71:5c:cb:
2b:61:0a:d4:2b:28:11:e3:1c:df:39:c4:e2:92:f1:
a5:4e:19:b8:a7:26:b7:22:01:08:c9:d6:76:e6:68:
8b:15:32:3a:47:86:6a:4c:b8:ea:c2:b9:a3:38:e0:
34:25:28:ec:77:15:ee:bf:05:ea:ba:b4:a6:2c:de:
6a:4b:7c:e4:b1:17:fb:47:e2:2d:ac:d2:eb:ee:5f:
6f:d6:20:16:a5:11:fc:9c:9e:be:b4:b4:a2:b3:4c:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:65:83:5E:E3:2B:BF:76:1A:B9:16:6B:AF:4B:ED:9A:82:D5:25
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:83:b9:ef:ec:fa:08:f8:b9:ea:8e:37:9e:68:76:91:df:5e:
4a:da:25:3c:04:d7:cf:f5:ca:73:59:f5:81:2f:94:df:83:74:
74:67:3a:67:87:5a:07:b4:22:d6:43:4b:4d:a8:5d:27:89:e9:
32:9a:78:31:76:8e:c6:14:26:c2:60:94:93:30:e5:65:3c:07:
9d:e8:d3:0c:d5:5b:d1:dd:19:7c:52:6f:74:8b:8d:b3:cb:da:
d4:d4:03:43:13:42:6e:63:d5:ac:98:44:07:4c:ad:b8:e3:84:
70:f6:0e:c9:85:f9:fb:eb:ca:a6:5e:d3:f9:ea:91:a7:01:43:
87:14:05:37:32:12:8f:ac:f1:59:f1:09:e1:6e:5a:eb:09:e6:
06:25:67:bc:7a:2c:76:3f:5d:ba:ab:1d:68:79:e7:ad:2a:75:
19:84:63:bc:7e:10:ee:dc:4d:4d:e5:89:0c:86:61:cf:f7:ba:
39:4b:a0:b3:1f:99:b2:04:02:92:5a:6b:54:43:3c:52:b6:06:
06:41:d5:97:ca:5b:de:21:95:a3:5a:ce:8d:23:fa:e1:01:c6:
11:9e:a3:eb:57:81:62:48:69:de:96:04:f7:19:44:27:e4:91:
41:9e:24:4a:18:40:97:d7:5f:6c:34:17:99:79:b1:d5:f3:42:
e8:76:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:53 2026 by rpki-client