Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier: CsD9SSbjOIuHvoYEccgtM7a9R8Ft69XQJG9ybiTRsc4=
Subject key identifier: 23:A2:B9:E1:B5:0E:9D:C7:74:0A:F2:93:BD:0E:65:91:2A:18:D9:32
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial: 019D98F473801A7CC8A02BE867F01E4124E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:00:50 +0000
Manifest this update: Fri 17 Apr 2026 01:00:50 +0000
Manifest next update: Sat 18 Apr 2026 01:00:50 +0000
Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: K5jRa+BSeJlFrhun71TnVoGfaiBqBja+XfpCmqtXItc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:73:80:1a:7c:c8:a0:2b:e8:67:f0:1e:41:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Validity
Not Before: Apr 17 01:00:50 2026 GMT
Not After : Apr 18 01:00:50 2026 GMT
Subject: CN=23a2b9e1b50e9dc7740af293bd0e65912a18d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:7e:0f:37:44:38:70:0b:a3:34:8c:bf:8d:
bf:42:ea:c6:ae:78:2b:1d:44:37:c2:34:28:e3:07:
be:ce:32:cc:43:13:dd:07:64:be:b2:e3:a3:f4:eb:
d2:0a:d5:60:9d:f7:46:34:65:44:81:97:85:5f:28:
f0:e9:70:eb:47:de:02:1a:5f:b8:5d:4a:6f:e9:0c:
24:fe:44:4c:52:b2:73:af:53:3d:06:b2:47:bc:9a:
3a:f1:1a:2a:e7:3b:37:e8:3a:cb:3b:8c:56:dc:03:
76:ee:c6:0a:8d:e6:72:cd:29:5d:f7:6f:1e:3d:67:
e9:76:f1:f9:14:cd:32:8d:c7:73:3f:b8:2a:db:52:
8d:67:58:9d:1e:f2:a9:a0:15:cb:7d:85:d4:2a:b6:
35:ce:b7:fa:65:e8:46:4b:6e:1d:15:25:0a:60:8b:
fc:3a:9a:b7:6c:ed:2c:92:f8:13:41:e8:27:2d:79:
b8:16:e8:d0:38:37:36:52:91:b4:0a:7e:cd:8e:9f:
76:34:66:11:ed:99:6f:d2:1e:3c:b6:0c:ff:42:cc:
f8:32:71:52:6c:8a:99:23:94:8c:ce:d1:5b:d1:f3:
ff:11:bb:d1:d9:cb:b5:f8:e0:3e:5b:75:bc:58:97:
35:da:73:5f:b9:9a:87:92:a2:4a:bf:d2:53:d3:4c:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A2:B9:E1:B5:0E:9D:C7:74:0A:F2:93:BD:0E:65:91:2A:18:D9:32
X509v3 Authority Key Identifier:
keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c1:70:83:ad:06:ce:c3:fa:18:6f:97:9f:1a:12:44:f0:a7:
9d:2b:aa:6f:2e:2c:4a:de:01:3a:4c:7d:5b:ed:34:1c:d4:ce:
ef:ff:86:d2:c7:da:25:3b:68:06:84:f7:75:0e:e7:69:4f:b9:
af:10:3f:ec:d2:b6:c6:43:46:3d:f3:2f:c2:73:fd:37:40:25:
74:3f:2e:2f:33:02:47:db:7c:41:c5:32:ce:c8:fd:d7:50:55:
d4:80:7f:58:01:b7:62:4a:f1:54:af:ba:ac:1c:1a:0b:7c:18:
9d:39:bc:03:91:7e:21:87:62:b3:c6:04:02:c2:55:16:5f:83:
8c:b5:45:63:69:75:46:09:5f:7f:0a:ab:85:46:de:7f:d1:23:
8c:de:05:c8:2f:55:63:47:f8:07:8a:e1:81:b5:45:45:6b:e4:
38:dc:20:1d:e1:c9:66:11:c1:c9:6c:92:10:59:ea:ee:bc:64:
40:04:40:7d:54:81:7e:e9:48:44:6a:96:06:5f:ad:a3:99:28:
19:1c:7d:ce:f0:38:c3:34:a6:23:12:0f:03:d9:47:33:1a:8f:
a0:ad:ce:79:9b:16:56:da:1a:6e:80:bf:ce:5c:4f:fb:7f:9f:
16:38:dc:a0:2c:4b:44:5c:81:bc:0a:8e:4c:f4:d0:d6:d5:ac:
51:ee:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:59 2026 by rpki-client