Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: Vw7wEjwMVTvPoEsYxhHZi/VMUIGcko1KphsoTNMPsr0=
Subject key identifier: 77:05:FF:C0:7B:65:DA:4A:B9:A0:2F:F3:79:F1:4A:D9:12:25:79:00
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 019CAB6AEBEC9C0B77B9954ED9AD9F9BF54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 22:00:36 +0000
Manifest this update: Sun 01 Mar 2026 22:00:36 +0000
Manifest next update: Mon 02 Mar 2026 22:00:36 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: GYL1HaHv+sJwXRBUVa4z0jtDU9pwzk10sxoHLOprK7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:eb:ec:9c:0b:77:b9:95:4e:d9:ad:9f:9b:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Mar 1 22:00:36 2026 GMT
Not After : Mar 2 22:00:36 2026 GMT
Subject: CN=7705ffc07b65da4ab9a02ff379f14ad912257900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:85:2e:80:3f:d2:13:dc:5c:6b:b8:77:b8:
96:2e:71:92:93:2d:25:76:b1:a3:a2:6b:4a:50:84:
a5:42:b0:46:6e:32:4e:97:11:ab:02:3e:0a:6f:98:
90:0d:6e:b7:a9:11:22:61:10:23:23:b2:a2:2c:6b:
91:9b:df:fd:1c:27:f3:76:30:3c:2d:65:c2:b9:6b:
c5:22:49:cc:b0:b1:19:ae:ba:4b:ab:19:67:00:0d:
be:78:04:93:04:ff:eb:3a:d3:e9:b7:93:b5:88:b0:
2c:91:3f:ff:06:2e:6b:79:9c:bc:21:da:7b:2e:e5:
f3:04:d0:23:c5:b5:a1:ae:e9:8d:9a:64:96:7b:c1:
e6:d5:63:42:36:3d:ea:a6:60:0a:a9:5e:d1:70:3e:
ed:1e:71:46:2f:fd:8a:24:63:92:88:1f:ff:b3:0e:
a7:b5:76:0e:e7:a6:31:e5:6f:4c:2b:d3:1d:94:d6:
80:14:7e:3d:54:da:5c:0e:09:65:0a:dc:de:62:45:
67:35:7f:9e:9a:b1:9a:84:5a:0a:70:ae:4b:68:11:
34:5d:68:2d:21:2a:73:df:9a:f1:2c:e6:1a:70:70:
e4:f9:d8:63:f3:2f:7e:04:97:0c:48:63:bb:8e:ee:
d1:79:d8:49:66:1a:1e:d4:9f:d1:16:8e:09:ee:d7:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:FF:C0:7B:65:DA:4A:B9:A0:2F:F3:79:F1:4A:D9:12:25:79:00
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a1:fe:31:eb:ac:bc:78:cf:e9:8c:0c:dd:c7:55:7d:1e:7b:
19:91:53:dd:6c:2c:87:20:81:48:a4:55:83:f2:2a:06:52:4d:
70:46:ef:ef:e5:3a:62:3b:fa:08:47:d3:06:98:02:12:45:f8:
2b:ba:4e:e2:46:56:ba:45:ba:64:8c:77:e6:61:2b:be:ab:3d:
e6:10:cc:d4:cd:bb:3f:83:3c:81:28:4f:75:65:b9:82:d6:44:
4f:61:3a:c9:c4:3d:f7:d7:d9:af:cf:15:62:35:e2:01:16:63:
1b:f8:4c:0b:b6:9b:fa:06:66:e3:05:ec:f1:55:b5:cb:9c:07:
30:09:e6:ab:03:ef:78:fe:24:57:4f:87:73:ea:1f:cc:cf:0f:
7e:80:eb:5e:da:69:19:3a:a7:ed:1f:fb:58:a3:b3:6e:59:80:
89:5a:25:08:35:b2:b1:19:39:f8:17:fe:b7:8f:fa:c4:52:4b:
c2:0f:c8:ac:9d:0a:4d:07:1a:27:cf:18:fb:4b:ba:53:b6:3c:
e4:e3:c3:61:6c:99:e2:a5:b3:18:67:bc:4b:c9:a3:bc:03:94:
71:ff:12:25:c6:72:56:35:3a:70:29:8a:c6:43:5c:59:4e:fa:
7d:c7:01:5a:90:64:57:19:ac:e0:c9:26:78:87:7f:03:2c:32:
e7:d1:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:39 2026 by rpki-client