Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier: MXgI5jG/ZbMQ0ZVAUoujn1xipQWJDOi9ZowfjwL416U=
Subject key identifier: 45:6B:2E:FF:18:A1:26:EE:B0:1C:EE:AC:26:0B:8C:C3:88:76:75:83
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial: 019CAA8FD4D69084A3EB58F3E641D31E1C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number: 1398
Signing time: Sun 01 Mar 2026 18:01:18 +0000
Manifest this update: Sun 01 Mar 2026 18:01:18 +0000
Manifest next update: Mon 02 Mar 2026 18:01:18 +0000
Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: CXxNzoWzQV/XvGPNHYoD8zmt33NZ2Fp8XG4/V4KFfww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d4:d6:90:84:a3:eb:58:f3:e6:41:d3:1e:1c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Validity
Not Before: Mar 1 18:01:18 2026 GMT
Not After : Mar 2 18:01:18 2026 GMT
Subject: CN=456b2eff18a126eeb01ceeac260b8cc388767583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:02:35:8d:2b:63:b2:03:fb:bf:dc:80:8f:00:
51:34:fe:df:e9:8f:67:9f:88:ac:5b:b3:53:62:e7:
2d:b1:e7:ce:ca:c3:19:1b:31:22:c2:38:b6:7e:6f:
02:b7:e9:83:b4:48:2e:be:7e:3f:c7:3c:59:b5:d7:
d7:dd:b2:dd:49:26:5c:2e:71:53:aa:0c:4d:2e:7f:
fc:f6:b0:56:84:58:a7:cc:9e:de:51:a5:d5:e9:d8:
51:fe:bb:40:f6:19:0e:8b:88:6a:be:26:6b:b3:85:
d1:2a:b9:3f:d7:81:30:ec:58:2f:dc:9e:ae:7e:47:
11:6f:d3:65:0c:24:55:26:f5:3d:62:11:71:e0:a8:
d1:20:1f:5c:58:6b:a9:a0:84:e5:4b:96:5b:f3:d2:
22:db:02:bc:bc:3a:65:d2:07:9f:15:17:32:df:db:
9f:5f:b3:ae:ac:e9:7d:2a:8f:30:96:1f:b3:62:62:
7b:ca:de:25:2c:59:51:7c:fd:78:b3:c7:8f:66:9a:
0c:13:0d:45:d6:9a:c5:69:a9:f9:86:70:0e:bd:78:
b8:1b:45:7a:ab:86:27:b7:d5:04:c1:1a:10:90:2e:
81:c1:b4:b7:15:e6:fb:e7:a3:95:32:a4:d5:ca:51:
8c:72:7c:08:4e:2b:fb:d3:92:8c:e8:0d:2d:2f:52:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6B:2E:FF:18:A1:26:EE:B0:1C:EE:AC:26:0B:8C:C3:88:76:75:83
X509v3 Authority Key Identifier:
keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:72:6c:12:8a:9c:d6:93:c5:3b:a2:4f:6f:0b:ab:2f:be:94:
5e:af:3a:de:6a:15:86:7b:90:ae:9f:e6:c8:9f:ac:36:4b:e4:
2e:73:60:27:c7:9c:e0:72:9c:a4:b8:9f:1f:a6:77:0d:07:17:
5d:44:c1:cb:f0:0e:c8:ee:0d:13:09:b5:ab:82:63:6d:84:48:
ce:24:71:0a:e9:7a:58:6a:c5:eb:a8:b5:02:f1:ac:ba:71:b9:
0b:13:51:c3:f1:9b:a0:93:3c:61:da:79:49:a1:8e:6d:e9:6a:
cb:18:58:2f:1c:84:51:6f:26:bc:4c:71:77:b9:41:0b:bd:41:
a4:b2:0e:67:c0:58:ff:1c:bd:3d:93:fb:96:67:3e:d9:da:fe:
b9:3c:89:6d:13:9c:9b:db:0c:0d:25:a6:12:f9:1e:e0:a3:e9:
16:a9:9b:cb:a2:fa:b8:53:33:c6:9c:4f:15:a8:51:19:37:96:
e7:26:4e:c0:6c:f7:c6:31:cd:31:ff:d4:af:4e:4d:ad:e5:61:
b5:e9:6e:e8:a4:f4:c1:67:0c:c0:ae:38:61:98:e1:0b:b3:19:
7a:5c:d5:e1:a9:23:94:99:2d:33:06:77:9d:97:71:4f:f2:9a:
21:aa:cb:9d:49:25:da:f5:b4:4a:18:94:8b:84:d4:d2:7b:78:
c8:4e:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:42 2026 by rpki-client