Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
File: QfIoYMpivSg4-DKPF4OdHoYI0m0.mft (raw, json)
Hash identifier: 3zSMc3ndsbmqBJepcMGUBXRZnD1+iLXjvPnSCmvPJBk=
Subject key identifier: 8C:C8:B3:D0:6F:FF:85:80:40:C3:11:7D:21:92:49:3C:CE:BC:E1:BF
Authority key identifier: 41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
Certificate issuer: /CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Certificate serial: 019CAAFD05FA4A5E76E8B2C4BC68D2B9E8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
Manifest number: 041F
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: QfIoYMpivSg4-DKPF4OdHoYI0m0.crl (hash: s5x/qoOjC4GvaQ2GLnkoXfsj1NC9sZBiguJOrCxWEmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:05:fa:4a:5e:76:e8:b2:c4:bc:68:d2:b9:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=8cc8b3d06fff858040c3117d2192493ccebce1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:11:d1:79:4c:a3:d2:c3:f1:c7:2f:67:b7:
05:86:e2:0d:e9:60:7f:c0:27:60:66:e1:ec:6d:d6:
25:5f:e1:88:77:c8:63:06:52:5e:1e:a8:7b:1a:0d:
5d:01:8f:64:bc:29:e2:29:16:5c:87:a4:a2:fe:af:
4c:da:1a:58:75:12:b7:1a:65:6e:06:ba:5c:7a:18:
d1:f1:37:43:9e:a3:28:cc:87:9e:fe:e6:4f:2b:37:
6e:ec:1e:f1:89:29:8c:b8:37:bd:e7:71:5a:3d:f2:
49:66:92:32:fe:4c:4d:b5:65:d9:8d:55:07:d9:4a:
1a:e8:d4:89:3d:58:6b:9a:40:03:58:84:14:38:2a:
85:7f:8c:64:ff:7c:1a:14:25:e8:1e:6c:44:8f:23:
2c:d5:0a:e5:d9:65:c9:66:cf:2e:27:be:68:3f:7c:
ba:5f:a7:7d:e5:11:04:a6:57:de:a5:79:0d:bc:0c:
bf:73:c9:b1:4f:55:34:ca:63:41:36:b4:89:10:ee:
3e:2d:60:ae:4e:c2:44:5b:50:1f:de:3b:f3:11:3b:
26:00:b7:e1:83:02:67:9f:91:bf:eb:13:8e:41:6a:
78:3d:12:a1:38:5f:83:78:37:01:36:bf:08:29:6f:
92:8f:3f:7c:dd:97:9b:9a:a4:a2:6e:dd:b0:58:78:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:B3:D0:6F:FF:85:80:40:C3:11:7D:21:92:49:3C:CE:BC:E1:BF
X509v3 Authority Key Identifier:
keyid:41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3b:95:bf:a5:4b:7c:98:53:c2:91:73:14:57:95:50:c2:c9:
d3:7e:c6:78:b8:80:ff:65:e7:54:01:ab:e8:8b:be:48:dc:10:
f0:ee:a5:63:83:c9:f7:b5:e1:d1:9a:68:51:a7:9d:9d:82:f3:
2f:f6:3e:16:8b:b2:49:ad:87:5e:93:9d:4a:a7:5a:84:36:ac:
7f:8f:8f:3c:ae:d0:8d:8d:cb:e4:10:21:31:49:93:2e:02:2b:
62:1c:39:2b:ac:39:f3:aa:2f:9b:73:5d:fd:3b:c4:5e:b4:dd:
44:75:85:36:81:78:a9:35:e1:bd:65:ff:84:6d:54:f0:e4:62:
98:8a:51:1f:1a:d3:4f:d7:7d:f5:e3:e7:03:b8:ca:7e:12:31:
06:98:c6:4f:f8:09:43:d4:fc:11:97:ce:33:0f:f8:ed:1c:a2:
6d:49:69:e2:5e:b1:6c:ae:9d:16:bb:1e:b4:ba:64:59:2a:3f:
9a:fc:97:46:53:97:97:30:fa:5d:7e:2c:2c:e5:c6:e0:89:2a:
94:00:21:36:d0:c0:12:30:c9:d4:31:59:23:2d:9c:b4:ed:cf:
89:f9:ab:c9:97:b7:0e:92:57:25:5d:09:37:d1:55:29:89:09:
2c:ac:83:b6:c1:9b:58:62:f4:fc:34:45:17:70:42:f2:8d:3d:
bd:7f:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:22 2026 by rpki-client