Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier: R31L8cVbaaA31Xv7lxIqEE8yRV2QQAF9uJo57wAABRE=
Subject key identifier: 9B:E8:33:22:AB:03:5A:C9:F0:CB:EF:03:AB:3C:B7:B6:29:C5:20:B8
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial: 019CAB6B69995341F11BF7CE41E204FA9262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:01:09 +0000
Manifest this update: Sun 01 Mar 2026 22:01:09 +0000
Manifest next update: Mon 02 Mar 2026 22:01:09 +0000
Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: +uz9O6mSerj+HkzPy045V+f2UYo5y5C3psLxTzmoP30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:69:99:53:41:f1:1b:f7:ce:41:e2:04:fa:92:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Validity
Not Before: Mar 1 22:01:09 2026 GMT
Not After : Mar 2 22:01:09 2026 GMT
Subject: CN=9be83322ab035ac9f0cbef03ab3cb7b629c520b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:af:a9:8c:22:6a:d3:6a:7c:6b:ac:de:e9:
9a:f4:b2:39:f9:d5:44:8e:72:77:56:2a:07:3b:d8:
61:03:12:f2:3a:48:23:56:f9:be:db:20:1a:2a:50:
7f:ad:0c:8f:4b:71:92:e6:d6:e3:99:76:16:01:d1:
1c:04:0c:d2:fb:c7:1a:4d:1a:d4:a7:db:cc:0a:9e:
fb:8f:6c:fa:f8:cc:46:5b:42:28:d2:80:81:c8:05:
c5:ff:4c:d0:76:cc:db:66:09:77:5b:64:4f:02:1a:
df:77:45:72:98:04:06:3f:0a:fd:a6:5a:97:9b:66:
12:3b:b6:f0:3a:81:c4:50:a2:3b:5a:2b:77:ce:41:
00:85:e5:fc:9a:16:55:21:12:0b:9d:84:08:c3:2f:
57:2c:0a:70:06:7c:58:4d:32:0d:37:76:69:35:87:
7c:d5:ee:1b:81:4d:51:89:62:ae:c2:38:bf:c0:d4:
a6:00:08:28:0f:74:a1:9f:97:fe:7e:b9:ae:e6:e5:
5d:f9:da:62:40:8d:26:e7:6a:f5:86:42:63:3a:13:
0d:bd:6a:98:c5:b5:18:53:11:d0:c1:62:a5:f9:98:
4c:ac:5d:59:0f:af:d3:29:0f:19:c6:16:dc:03:bc:
a0:72:53:c9:bf:86:6c:97:8b:de:04:11:1c:84:85:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E8:33:22:AB:03:5A:C9:F0:CB:EF:03:AB:3C:B7:B6:29:C5:20:B8
X509v3 Authority Key Identifier:
keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:af:e7:16:3a:3f:d0:dd:15:e4:72:32:74:03:37:29:d3:92:
6c:c0:52:ea:de:ac:15:d7:78:2e:58:30:f4:83:43:36:d2:2d:
1e:a4:44:77:7c:1f:0e:be:39:0e:31:53:68:4d:f0:43:53:5c:
b2:a2:a1:fe:b9:5e:14:de:be:d8:ed:ee:46:cd:36:59:03:af:
86:2e:92:7f:69:d3:35:51:46:ce:de:e1:d2:c3:44:cb:11:ef:
b5:b2:23:49:2f:b5:ff:86:3a:9f:94:4b:ca:dd:86:5c:97:75:
94:77:23:da:e8:7d:3f:55:26:54:d2:2e:8f:38:59:56:9b:2c:
c4:43:9b:e6:6e:40:85:57:6a:97:10:e4:cf:fc:44:97:2a:1d:
20:56:70:c0:85:bf:6d:26:a8:c3:db:80:3f:ea:de:fd:99:18:
2e:f7:fb:e7:2f:e7:99:77:8b:74:a8:6b:05:45:b0:59:37:4a:
45:f8:bf:f2:2f:af:a9:9b:80:36:fe:5c:0a:58:43:86:98:c7:
3a:1e:2c:eb:5a:b3:0c:13:41:0f:48:df:f4:89:e3:38:b3:61:
91:ad:20:d3:1b:20:fa:fc:2b:9d:85:cb:9a:77:20:f0:5c:2e:
ec:bf:8e:fc:d6:79:8d:b4:d2:3b:bc:bf:64:5e:e8:f5:3a:c2:
8b:d3:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:08 2026 by rpki-client