Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: f69DyVesaih4yzXVo1NY38CivkQvonVwL4mPdMo2uf4=
Subject key identifier: CB:44:51:2F:A9:C8:24:32:F4:9E:1A:D4:CB:F2:2D:EC:9E:3C:A8:FA
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 019CAEA38962088B8F9921621D44D1578458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 0534
Signing time: Mon 02 Mar 2026 13:01:18 +0000
Manifest this update: Mon 02 Mar 2026 13:01:18 +0000
Manifest next update: Tue 03 Mar 2026 13:01:18 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: ewgijhuvKZEwEgD/LBA9ZnDMax6HVIv99iIysZsgvU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:89:62:08:8b:8f:99:21:62:1d:44:d1:57:84:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Mar 2 13:01:18 2026 GMT
Not After : Mar 3 13:01:18 2026 GMT
Subject: CN=cb44512fa9c82432f49e1ad4cbf22dec9e3ca8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:14:a5:f9:1a:77:1b:a4:65:6b:e5:6a:19:
4f:56:8c:ff:62:9a:fd:bd:93:34:43:e1:8a:3b:59:
3b:2b:68:04:9c:f3:07:ea:0a:fb:74:35:d7:4f:b6:
f0:38:06:87:1d:a6:3a:23:3f:14:e0:cd:b4:44:83:
f6:3a:b4:2d:db:89:58:95:57:f2:f3:b1:ff:fe:17:
1b:ec:01:dc:76:ae:ac:62:56:7e:1b:93:8a:3f:50:
e1:14:43:11:75:41:75:77:a3:68:94:a8:ee:41:9f:
e6:30:83:60:eb:01:03:75:4c:91:fd:10:b5:a0:17:
b8:25:e1:56:a6:f4:81:da:6d:23:a7:43:3e:ca:34:
09:77:e8:8c:ee:ed:3e:37:0e:cb:20:b2:a6:fd:69:
01:76:7a:bb:da:49:d0:a4:ed:66:c8:12:c9:c2:9e:
f8:5e:09:b6:19:db:9b:26:c3:58:d9:60:01:70:d9:
a9:60:83:38:9c:86:59:0f:b3:cf:a7:cd:72:ad:d5:
d0:3e:c1:90:04:5c:aa:56:04:cb:93:55:d5:33:1d:
43:11:73:3a:e8:56:e4:f8:d8:2c:36:05:e6:20:5a:
27:55:72:03:28:49:75:17:33:c4:18:37:48:6a:ca:
ba:bd:f3:03:d9:57:cc:9a:af:66:b1:cf:88:95:b1:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:44:51:2F:A9:C8:24:32:F4:9E:1A:D4:CB:F2:2D:EC:9E:3C:A8:FA
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e3:1b:97:1f:22:29:85:4b:5b:c0:3b:af:b6:7e:41:85:90:
3e:99:77:4a:20:b8:c3:ee:4e:3c:d3:fd:70:33:98:28:4c:29:
3c:f6:5f:fd:50:93:c9:b3:f3:af:c6:9e:da:d5:e9:f3:96:0a:
6b:61:79:3b:a5:5f:c2:ea:cf:f4:cb:af:37:92:c8:66:07:6e:
ee:18:87:fe:50:c0:df:56:36:5f:12:51:4b:4b:ee:35:00:41:
e9:6f:a0:4d:2d:dc:0d:5a:f8:5e:34:a3:78:8d:4f:3b:33:1d:
df:03:0a:82:4b:a9:d6:90:6f:86:70:d1:49:d7:65:86:84:6f:
35:38:f2:db:7d:d5:20:40:68:2f:76:0f:ab:d5:d2:a4:cb:50:
93:e4:e3:60:01:8b:ca:fd:9c:ce:01:e1:26:48:80:ae:1f:8c:
2c:df:93:1e:fc:2d:16:f0:0d:3b:21:5b:4f:f4:80:95:c2:ce:
86:83:29:87:7c:9f:9c:20:ed:7d:47:0c:1a:e7:bd:56:fb:7a:
9e:96:e9:4e:4c:5a:2d:14:5d:3a:e2:38:8e:19:c8:12:51:ff:
48:6c:1d:45:bf:75:7c:3e:22:8f:8b:e4:e3:6e:a5:7a:ff:bb:
14:63:b8:21:c1:de:f4:4d:87:5c:85:3e:e5:49:a7:fe:dc:3a:
be:e5:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:13 2026 by rpki-client