Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: i3ZkjQ0LvlqzQHsVObLZ+eNAMgx+GL/PbXFX1J0uZ1Y=
Subject key identifier: B1:FF:09:48:57:24:55:6C:62:AA:29:DF:E8:78:03:BC:B6:41:88:D9
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 019D37F6DCFA07A949146074B00837B0DC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 14E3
Signing time: Sun 29 Mar 2026 05:00:18 +0000
Manifest this update: Sun 29 Mar 2026 05:00:18 +0000
Manifest next update: Mon 30 Mar 2026 05:00:18 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: m8tL7pxhm/FIkYRZbe3r9xSEtuKHBMNJ2meuxlUXteg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:dc:fa:07:a9:49:14:60:74:b0:08:37:b0:dc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Mar 29 05:00:18 2026 GMT
Not After : Mar 30 05:00:18 2026 GMT
Subject: CN=b1ff09485724556c62aa29dfe87803bcb64188d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:87:94:52:a4:01:68:c6:a1:38:08:8c:d7:
e5:61:aa:83:2c:86:20:ca:8a:70:da:bf:10:7f:09:
1e:ac:15:4e:6e:3f:3a:2a:23:35:76:d9:c2:7e:1b:
e4:e2:78:22:5a:ab:84:9c:c0:7a:e3:81:d7:d5:16:
6e:20:b1:05:dd:b4:2e:0c:d9:26:b2:e6:be:fb:0f:
d5:e1:66:ba:fb:b3:75:1f:13:a1:50:04:b4:70:7d:
47:e7:4e:d6:35:a6:56:bd:6e:94:39:e3:6a:f1:57:
84:00:f6:9a:c3:47:d0:bc:fc:25:42:88:04:15:38:
95:9d:66:e7:a7:4f:e7:2e:e7:46:29:bf:eb:42:9c:
de:b5:83:d2:92:7e:58:02:d7:b2:76:51:da:19:26:
35:ab:bc:34:58:8f:5e:9f:0c:de:0e:87:25:8e:25:
be:21:b0:44:86:0d:51:35:ac:57:3b:99:05:ae:72:
c4:1a:34:90:2a:bb:9e:69:98:62:d9:e7:e7:a8:e2:
3c:cd:d8:83:c3:56:45:15:20:a0:b0:4c:f1:f1:8a:
6b:f9:7b:9d:02:e3:eb:70:01:51:ef:02:d7:fa:75:
2f:c0:b2:51:30:ac:53:70:24:40:2d:77:ad:eb:a8:
30:bc:d8:07:ae:4d:14:f4:92:1f:d9:07:69:6f:02:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FF:09:48:57:24:55:6C:62:AA:29:DF:E8:78:03:BC:B6:41:88:D9
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b4:0f:c1:46:21:82:a7:11:34:8a:10:84:e0:0b:f6:e9:4e:
9c:0d:3f:1b:aa:75:52:63:d4:3f:b5:51:2f:71:b2:c7:02:fa:
d1:19:11:f1:43:b7:5b:c5:07:4c:77:fd:0d:0c:e6:5b:9e:1f:
7c:5f:9a:08:1d:e3:12:df:a7:5c:d9:bf:24:6f:e5:b9:b4:a3:
9a:9a:89:7a:46:44:23:26:38:9d:d9:3e:04:99:a8:a2:bb:cf:
c3:3a:61:cc:cc:30:71:37:a8:dc:ad:0e:35:8b:56:e9:3a:fe:
69:cc:cc:19:67:4d:d5:f0:73:d6:19:a8:fd:cf:cd:99:47:cf:
98:ac:4f:0b:8b:88:3d:93:5d:be:4f:60:89:89:a9:8f:7a:27:
7e:fa:ac:c9:be:2c:5a:bc:4f:d7:ea:7b:58:26:35:55:3c:2d:
85:34:85:f4:4d:04:87:56:7d:e9:d2:29:24:ac:d3:91:9a:b9:
34:3a:1d:70:f9:8a:28:fc:a8:ee:81:80:5a:d8:d2:1c:4f:e4:
73:03:e7:f3:d5:c0:97:b0:c6:9c:8e:c3:1a:e6:b2:46:4e:b8:
a2:16:bf:aa:d6:8a:ea:80:94:ab:33:7c:e3:63:e8:ca:4e:f4:
cf:41:2e:ba:5e:51:0a:0a:69:d7:c9:a0:e1:4e:94:53:3f:35:
bc:f9:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:18 2026 by rpki-client