Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File: QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier: 085bq8yXqWtY4BvUl7honSvxo/Tw1yjCEeWW562LkII=
Subject key identifier: EC:A3:3C:5D:D5:AB:D6:79:B4:14:70:9B:E9:FF:DC:1F:2D:A8:3E:4F
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer: /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial: 019CAD5942DB7B18DFAC98E2C16C832567F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number: 12A1
Signing time: Mon 02 Mar 2026 07:00:33 +0000
Manifest this update: Mon 02 Mar 2026 07:00:33 +0000
Manifest next update: Tue 03 Mar 2026 07:00:33 +0000
Files and hashes: 1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: X1jXdfnkaFraqhhz3+DaVAG1HXj+tu7LhBBKfxzHE9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:42:db:7b:18:df:ac:98:e2:c1:6c:83:25:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
Validity
Not Before: Mar 2 07:00:33 2026 GMT
Not After : Mar 3 07:00:33 2026 GMT
Subject: CN=eca33c5dd5abd679b414709be9ffdc1f2da83e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:6c:8d:cd:91:05:23:d5:93:a1:92:b9:c6:
6f:aa:d9:c6:db:0d:c6:de:a6:65:86:48:b7:0c:e5:
9a:67:66:17:02:9a:ab:95:f4:fa:cf:b5:85:b6:77:
45:11:4f:53:b6:05:3f:04:1d:95:10:81:68:f8:66:
e6:f0:c7:ca:ab:a0:03:44:25:4c:47:01:87:85:e0:
3c:04:cc:0b:7f:3f:61:49:0d:8c:24:ec:45:49:af:
b0:0c:5b:49:9c:f1:1d:eb:99:34:06:25:44:7e:6f:
83:60:f3:cc:ed:34:0b:31:4d:ee:f3:1c:20:3a:9c:
ea:bb:1f:f1:6b:40:4c:af:1d:6a:1d:e3:b7:64:02:
5d:73:99:e6:2a:29:19:ee:96:17:52:4c:9f:cd:f0:
8e:ea:96:6a:b8:51:42:a8:57:34:11:de:04:63:66:
8c:a2:9c:aa:d0:de:16:2c:18:d2:de:d1:5b:24:ec:
ad:c7:73:07:62:f1:1c:3c:a2:ed:20:66:87:a5:71:
40:e1:ee:31:4b:a4:d5:1b:26:b9:ef:f3:75:be:ed:
70:33:14:fa:6b:e5:60:05:ea:57:55:1f:23:0c:dc:
45:a9:fc:94:76:df:76:12:9d:8c:2e:5b:b7:e0:84:
25:5c:3a:16:44:11:68:c4:f2:37:22:a7:30:d2:2d:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A3:3C:5D:D5:AB:D6:79:B4:14:70:9B:E9:FF:DC:1F:2D:A8:3E:4F
X509v3 Authority Key Identifier:
keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0e:41:cc:20:45:1d:49:94:4a:7b:4e:43:26:55:21:59:5a:
f8:ee:5b:3b:54:17:d0:fc:d1:a3:16:7c:59:06:61:79:f0:52:
bc:7b:a4:ed:0a:65:d3:74:68:32:f1:1e:8a:ae:93:db:3b:a7:
34:17:fb:bd:6e:37:a2:92:43:30:62:65:d0:05:7d:94:bc:02:
08:11:3b:46:fe:5d:45:15:9b:60:17:be:48:34:5f:0a:a6:ed:
19:88:be:74:3a:e3:d0:7b:59:92:48:fb:a8:9d:c3:16:65:ef:
b5:f0:50:6f:1d:dc:ad:ee:e1:0c:78:e0:67:15:1f:ad:97:ee:
d9:39:26:44:3e:1e:2e:15:64:07:e7:1a:ed:45:8f:fe:8f:d3:
58:1a:55:49:c5:f1:e0:7d:3b:44:a4:36:89:3a:43:e4:76:fc:
ba:0b:fe:ce:19:46:05:a0:aa:70:51:d2:db:16:13:8f:74:b2:
9f:62:b4:56:de:74:3b:d3:cd:4b:28:58:b5:bb:55:3a:50:91:
67:52:7f:c4:b1:b2:85:64:74:69:61:36:2c:1d:cb:6b:91:c1:
43:2f:d2:33:5e:2b:d8:ab:b1:b8:ff:f7:ad:06:5f:b0:3d:a2:
64:b7:23:79:13:23:2b:01:a9:e8:a9:cc:70:36:5f:12:ab:94:
0e:11:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:36 2026 by rpki-client