Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: B7z1Armjh+xHn6cW1SkFSSy6v3wcB6nGkcsmn494fb8=
Subject key identifier: 99:17:AD:40:74:E5:78:95:D8:C5:8A:56:16:FF:01:92:D1:11:4D:2D
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 019CAB6BDDD1E5F562F854B9BAD744AADAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:38 +0000
Manifest this update: Sun 01 Mar 2026 22:01:38 +0000
Manifest next update: Mon 02 Mar 2026 22:01:38 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: Yfcal1a+Z4Vah/TX2q93oVvfpBNbbMdPwcaT8dy6W3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:dd:d1:e5:f5:62:f8:54:b9:ba:d7:44:aa:da:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Mar 1 22:01:38 2026 GMT
Not After : Mar 2 22:01:38 2026 GMT
Subject: CN=9917ad4074e57895d8c58a5616ff0192d1114d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:ed:b4:3b:6d:89:7d:0a:9f:76:80:21:6a:
e3:93:30:a0:dd:18:c6:6e:42:9f:19:f4:ac:63:64:
c2:1c:c6:a7:a3:83:4f:fb:fd:f1:6c:cf:4a:1d:02:
6b:8e:36:cc:e1:88:46:21:23:92:af:b5:d9:e5:71:
e0:60:f8:d9:f3:00:86:30:68:e7:6b:6d:11:9d:58:
c3:d3:c1:7e:3d:b4:61:a3:e8:0c:ae:1d:e0:fe:65:
8d:a3:2f:70:0d:3e:a1:b0:14:94:58:ee:08:51:22:
e2:bf:8d:11:85:7b:1a:9b:fc:a7:59:04:c5:a8:51:
28:7a:b0:ac:39:88:70:9b:bf:a5:ce:ee:ae:4c:d9:
98:aa:e0:a8:9c:1b:a4:fc:8d:7d:f5:62:3f:34:cc:
92:b3:32:0d:a6:de:47:42:81:70:ba:fa:be:31:14:
cb:fe:4e:67:27:01:f4:ab:1b:be:32:ef:89:e9:79:
25:7a:3f:44:29:ef:82:16:3f:07:be:f6:f9:ef:3f:
53:60:11:29:a1:23:c0:18:35:85:42:29:38:2f:4f:
01:ce:db:01:48:6c:ae:67:1a:2f:83:9e:7f:1c:33:
de:01:ae:d4:2b:76:24:55:fb:4e:3e:43:92:aa:22:
f5:b5:f8:c9:5a:5a:01:5d:1e:d8:66:c7:ac:af:95:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:17:AD:40:74:E5:78:95:D8:C5:8A:56:16:FF:01:92:D1:11:4D:2D
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:42:1d:81:79:54:da:88:01:bc:c9:59:8b:e6:7c:f3:86:
bf:6a:27:3c:4c:1b:5b:e1:49:7d:af:85:3d:02:a3:57:4d:53:
ae:17:55:9e:e7:4e:9f:4c:14:8d:eb:88:bc:89:4f:c7:e5:8a:
58:90:aa:05:be:69:d6:9c:ea:c6:df:cc:3d:40:7c:b6:3d:40:
db:ea:c2:90:a0:08:5e:82:54:f3:e0:e2:1e:0a:d1:71:5c:1f:
f5:c7:a7:21:48:8e:98:07:82:9a:13:6c:5a:57:cc:91:a6:3e:
98:dc:0e:55:71:e6:df:da:dc:a9:01:08:11:5b:7b:1d:79:3a:
35:e7:e8:3e:49:22:87:fe:a0:81:f5:a6:c3:59:9c:fe:5e:79:
22:2e:b4:35:2e:41:05:00:bb:e3:94:db:6b:42:47:87:a9:cd:
f4:0e:ef:36:07:8d:74:1c:4b:e2:69:e7:31:64:44:7f:97:56:
21:1a:1c:3a:24:ae:6b:13:c5:4d:bd:52:30:8a:a9:71:9a:8d:
c0:1a:74:06:52:b0:56:77:4b:30:ae:39:41:b2:62:36:e8:21:
89:ef:1a:1d:c8:a0:4e:58:90:29:e8:90:cd:dc:7b:75:f4:d7:
1b:49:88:4c:9c:5c:3d:08:0c:f9:c9:c0:cc:d2:e1:c8:6b:24:
8e:7c:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:04 2026 by rpki-client