Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: d8ncKKzxXxUjw4gixZ3R8GEWghLrkiUyODm6Puwtjk8=
Subject key identifier: F6:B7:76:17:CF:B8:6B:FC:04:FA:AA:6C:85:E7:F5:6B:F9:96:41:08
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 019CAB3482DDE7E8427652578386B2519705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 07C5
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: sCyYal6ywHwSSLjDsyruQXsE3qqFFqJtNO6Qeiz3drg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:82:dd:e7:e8:42:76:52:57:83:86:b2:51:97:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=f6b77617cfb86bfc04faaa6c85e7f56bf9964108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:7f:ef:e7:a4:26:c3:ea:2a:e8:8d:a0:5d:
70:5a:e6:7e:10:4c:6c:53:ce:a2:fc:ef:c3:21:24:
10:26:02:89:6d:74:14:86:52:c1:6d:91:14:81:fd:
80:ab:39:92:6e:60:c4:48:3f:ad:3f:72:a1:37:fc:
05:60:34:c1:84:64:ec:a1:af:b6:8e:c4:43:b7:7e:
56:c5:5b:ca:46:35:18:01:b7:f6:62:14:65:67:f9:
df:e1:a6:89:90:ef:b5:8e:3d:f0:bc:43:42:ff:cf:
50:7a:97:1b:5f:63:6f:24:b9:98:8d:9c:85:2a:7f:
cd:89:7f:29:b3:bd:ec:8d:c3:d0:2f:f8:59:8b:a5:
d9:f8:27:30:48:ff:7f:b4:f8:94:0e:64:12:5b:12:
a8:4f:83:db:44:d4:c9:82:72:d7:95:f0:84:40:32:
40:3d:c4:ac:f6:ce:79:ee:ef:4f:11:d1:e5:c6:62:
e6:66:39:c6:75:3c:2a:31:c9:d6:e2:bf:47:a9:e1:
5e:84:76:75:f6:bd:d6:27:99:94:1f:13:90:48:bf:
c0:9e:b1:49:04:d4:95:13:57:b0:83:47:4a:73:37:
21:41:83:86:9d:d2:2f:eb:a2:be:e2:71:a1:74:27:
92:4f:00:40:07:da:14:d7:d2:3a:89:84:09:5e:37:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:76:17:CF:B8:6B:FC:04:FA:AA:6C:85:E7:F5:6B:F9:96:41:08
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8e:30:e7:64:07:df:19:ea:bd:65:91:42:0f:8f:91:97:a5:
0f:ca:8c:71:54:c0:bd:81:13:fe:0f:aa:b3:7b:fb:11:1d:e5:
4f:fa:19:f9:9a:a2:f3:81:00:a7:c2:1d:48:48:04:a9:77:6d:
b7:a3:5f:6d:12:f3:12:7f:26:7c:0e:30:85:19:3b:ad:aa:3d:
a3:5e:cf:c0:f8:e3:de:02:f7:a2:74:2a:10:cd:ae:b8:d3:bb:
6f:84:b9:97:26:26:68:4e:24:ba:f7:6d:ac:dc:67:d7:23:58:
1f:4c:a7:0c:3b:02:e6:d1:39:09:a5:fd:00:f4:5d:5c:65:dc:
ca:14:82:47:54:86:70:41:ef:90:55:37:fa:f8:40:a0:97:dd:
93:1b:8f:c4:45:c8:5f:25:5a:f1:3c:eb:2f:2a:e2:ed:77:ab:
4e:e8:51:4f:1f:60:87:ef:89:39:3c:44:a3:56:ce:26:78:c3:
de:c2:9d:a4:dc:8e:b1:fb:c9:a1:f2:3d:f0:3e:5f:24:74:72:
92:56:cc:fc:18:4f:32:c9:21:89:af:d9:da:0e:a6:dc:2f:79:
a5:44:c0:3f:0b:a1:81:ac:03:1a:03:2e:0c:82:8c:08:e0:c1:
97:9a:e9:47:b6:21:b4:ab:54:10:27:27:60:ca:3c:05:c1:4e:
82:40:41:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:18 2026 by rpki-client