Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: JRToki7XMdo0VTo8Fl5sl3feVsu++OPMUVBsz3rbkCo=
Subject key identifier: B9:70:20:19:AB:16:09:C2:22:1E:64:ED:19:79:1F:25:60:68:F2:A2
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 019CAB6AE300C01486677C451C45348506F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 09AB
Signing time: Sun 01 Mar 2026 22:00:34 +0000
Manifest this update: Sun 01 Mar 2026 22:00:34 +0000
Manifest next update: Mon 02 Mar 2026 22:00:34 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: pHlvl++hlB09s+FsH4gkWgUWbcrH2crxPdx6f8LrqJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e3:00:c0:14:86:67:7c:45:1c:45:34:85:06:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Mar 1 22:00:34 2026 GMT
Not After : Mar 2 22:00:34 2026 GMT
Subject: CN=b9702019ab1609c2221e64ed19791f256068f2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d1:9c:01:37:72:be:4b:3e:62:a5:a1:be:b8:
5c:5b:af:27:94:e2:71:30:0f:69:60:6a:c0:f4:4a:
00:4a:4c:d9:9e:14:cf:21:b9:4c:c1:b4:c4:4a:82:
f4:0c:09:02:77:01:25:cd:6d:1b:13:44:98:4e:0b:
56:1b:64:ca:1d:76:70:83:ad:44:d3:0a:37:50:6d:
43:cc:f1:82:c9:07:cc:63:2a:5c:e4:ab:5f:b3:e0:
c3:92:1b:89:13:cb:ad:01:06:80:f3:9d:ec:60:a1:
22:f8:d0:88:47:c0:3d:5b:1f:eb:35:2d:3a:34:1d:
3d:7e:71:5c:dc:cc:bd:10:82:cc:04:55:d6:7e:2e:
45:08:83:50:26:c0:e5:82:40:ec:a2:87:cc:12:cf:
5a:08:8f:7b:8f:29:5f:83:ef:f7:c8:3c:c2:fa:17:
15:79:ba:52:a8:3a:80:3e:f3:7a:55:b5:2f:e4:9f:
b0:0d:c0:e5:39:6d:19:ee:4a:f8:3b:57:05:26:c9:
28:32:e6:89:fb:1b:64:3d:d9:1c:3a:5c:71:89:1a:
d5:ff:33:2a:42:81:33:b8:64:c2:05:2a:b0:67:6a:
ff:95:38:a2:6c:e0:e9:1a:18:c7:a9:91:b9:28:d2:
98:a6:8e:21:18:ea:6d:1a:83:5a:30:5c:79:70:be:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:20:19:AB:16:09:C2:22:1E:64:ED:19:79:1F:25:60:68:F2:A2
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:95:5b:09:72:85:66:7b:e1:61:dc:23:af:3b:bb:b6:ff:ff:
b6:92:bf:1c:3f:a4:3d:e4:3e:15:91:83:d4:71:a3:6e:bc:8a:
c9:6d:75:d7:58:19:cf:7e:77:f5:8d:40:1b:35:d4:dd:d6:66:
2c:1b:67:61:6c:f6:01:fb:81:05:45:99:fb:28:01:8d:9a:ee:
f3:38:47:51:26:8e:be:2b:b1:8b:83:c6:69:53:6a:6f:b0:ee:
be:44:e5:02:65:c1:70:bb:3b:0a:29:e9:99:d4:4b:7a:82:d1:
eb:d6:e5:e2:f0:45:cf:79:c4:2c:f5:1f:53:79:27:36:91:ef:
c4:d6:db:2a:2b:5c:15:9a:88:de:39:81:cc:ea:b5:3c:08:b8:
05:a7:05:4d:01:83:9a:4a:06:33:3c:32:3f:a4:92:0e:da:a1:
31:6e:cc:83:0a:6d:90:20:a5:d9:e4:cb:ff:63:da:ac:bc:af:
b9:5f:f6:3d:1b:3a:03:4b:a7:48:26:b5:e9:9a:25:d9:4d:ef:
6e:2c:ba:78:24:e2:b7:7f:10:30:16:db:e4:bd:f8:1e:29:8c:
f8:05:07:34:94:d5:ae:6e:89:0e:79:13:8c:b9:a1:93:6c:9d:
fd:5b:8f:30:bf:40:78:c3:00:07:33:9e:15:b6:aa:44:b8:6c:
3b:57:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:33 2026 by rpki-client