Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json)
Hash identifier: L8NuCOGfVXM8IXkCX+iSV7K9G5VbMF7gpvG/x2YOBGQ=
Subject key identifier: A9:91:D2:9B:8C:09:8B:E1:6F:76:02:CA:7D:76:D5:1A:E8:FE:55:0C
Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Certificate serial: 019D99620E5C6174F72B5E1F9CE6C3DB5C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 03:00:33 +0000
Manifest this update: Fri 17 Apr 2026 03:00:33 +0000
Manifest next update: Sat 18 Apr 2026 03:00:33 +0000
Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: elhGqkJsXJRGXmSuyPsqFAa4CfqVCaWFTx2kcuk+hI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:0e:5c:61:74:f7:2b:5e:1f:9c:e6:c3:db:5c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Validity
Not Before: Apr 17 03:00:33 2026 GMT
Not After : Apr 18 03:00:33 2026 GMT
Subject: CN=a991d29b8c098be16f7602ca7d76d51ae8fe550c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:ca:2d:14:62:e9:44:62:2e:3b:cf:42:c9:
f1:4b:bb:fc:7c:9b:27:9c:66:ad:9e:12:cf:b6:7c:
b2:58:e8:6b:56:83:47:79:33:6f:cf:a7:b7:28:69:
cf:01:5e:2a:9b:f6:1a:92:69:13:d3:89:c4:2d:28:
e2:9d:ac:f6:79:47:7e:17:34:4d:6c:4a:40:4d:71:
1e:40:30:6c:32:ba:b2:69:06:34:37:f3:b2:f0:b0:
e8:17:b7:01:d6:4d:2f:29:fe:86:bb:1d:c2:fb:29:
8b:6d:25:c2:b4:97:57:b4:8e:d0:ee:12:fd:00:8c:
da:b3:8a:78:d4:11:d6:5f:90:30:bf:10:84:b7:9f:
47:c2:cc:ec:5e:64:db:36:4f:50:87:bc:6b:d7:1d:
6c:ab:de:cf:cb:6a:3e:ba:e4:8d:a0:10:c2:e0:87:
be:02:89:ff:ce:84:67:27:eb:f3:b6:b7:1e:4b:f5:
a1:de:ee:d5:fb:ef:1e:49:c4:96:c7:ae:db:88:00:
fa:1c:be:19:66:53:ce:42:64:92:99:b2:9a:ad:e5:
6d:a3:50:ff:cc:b2:3b:bf:89:70:17:e2:1d:3d:d5:
e4:8e:f4:e6:b1:05:d7:9c:ac:be:cd:f7:2c:ac:fe:
cf:7c:e4:7f:c2:96:d3:10:de:0b:e2:11:df:2e:e6:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:91:D2:9B:8C:09:8B:E1:6F:76:02:CA:7D:76:D5:1A:E8:FE:55:0C
X509v3 Authority Key Identifier:
keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:f5:f8:3d:6c:15:45:81:0a:45:fa:f8:04:06:4f:cd:75:00:
d5:a1:81:9b:72:f4:0a:6c:98:3d:29:d6:b6:15:3f:8c:fd:49:
f6:d7:89:81:35:f4:67:cc:20:7a:e1:70:6a:70:e2:ae:24:27:
91:6e:4f:12:a8:3b:87:23:c6:e8:3e:93:46:9c:8e:4c:ec:1a:
f0:2e:83:bc:55:d8:4e:9c:f4:61:74:7c:4a:bc:12:c9:75:8d:
bd:7a:e7:fc:0b:dd:72:11:cd:c4:0e:45:11:ec:1f:25:00:22:
46:81:2d:54:02:16:6f:80:01:00:d1:1b:45:a6:0c:1d:9d:41:
ae:b2:25:b0:4c:b7:fa:e5:7c:d3:b4:ab:77:2c:40:73:58:6f:
37:5a:7a:5a:23:c4:ff:20:9a:50:a6:bf:fd:0b:55:fa:46:d7:
88:f0:9a:c9:df:ad:f3:9d:74:68:8e:39:bb:82:12:37:75:28:
17:62:0d:a1:34:6d:6e:41:23:25:23:33:41:62:a6:56:5a:2a:
72:46:04:ba:8c:38:24:29:fa:b1:10:48:50:09:b5:af:e4:ca:
47:60:ba:49:4c:fc:44:76:c6:1e:46:13:fb:68:b6:42:6d:44:
f4:f8:43:c9:e3:b7:1a:f0:e4:db:32:b9:55:1d:ed:1b:8e:c9:
fc:25:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:57 2026 by rpki-client