Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier: Wn3anQqBkaHN03eMv14K22F9oyPPHr/lA2Kr/V83MQY=
Subject key identifier: F3:4B:B9:1D:7A:0E:8D:F8:E5:2E:C8:18:CC:E8:0D:E4:C3:40:9A:24
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial: 019DA3AF4B2D15D5F3717C52488028261BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number: 1419
Signing time: Sun 19 Apr 2026 03:01:07 +0000
Manifest this update: Sun 19 Apr 2026 03:01:07 +0000
Manifest next update: Mon 20 Apr 2026 03:01:07 +0000
Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: E1vlUUJufE1DSHvtK+DwjffzlKzgu3DY0QBjuwmfBVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:4b:2d:15:d5:f3:71:7c:52:48:80:28:26:1b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Validity
Not Before: Apr 19 03:01:07 2026 GMT
Not After : Apr 20 03:01:07 2026 GMT
Subject: CN=f34bb91d7a0e8df8e52ec818cce80de4c3409a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:a4:3e:a6:90:76:99:e8:ce:71:cd:c7:5e:
97:83:78:4a:bf:a9:26:67:1b:23:6e:ab:f5:5f:94:
b0:a6:b9:12:e4:ca:d2:64:ff:2f:0d:19:f4:5a:ed:
69:36:b4:e5:86:12:24:1d:38:16:da:09:72:b7:c0:
2f:84:28:ec:a4:1d:b7:05:dd:58:7e:ef:4d:7f:3c:
5d:7a:de:a7:a0:b8:15:6a:25:23:6f:ef:1f:b7:ea:
09:10:b5:c4:79:56:ca:d2:35:90:1c:3c:68:c6:52:
48:d9:e5:c5:ef:c0:c1:a1:80:b9:d2:cb:c3:38:41:
c5:bf:3e:8b:26:f4:e2:37:94:6f:cb:c4:50:37:5f:
5a:05:6b:9c:8b:01:96:8e:7a:7b:01:a2:90:8e:6b:
31:c3:f7:de:1c:21:6a:f0:8f:6a:37:8e:94:b6:65:
e8:b2:ed:e0:dc:69:d4:bc:86:35:ca:36:3e:08:16:
a3:c7:0b:c3:d3:7c:f1:e5:0e:ee:cc:42:14:23:23:
a5:20:91:23:61:85:12:24:9f:ea:1c:ae:cf:9c:98:
67:31:53:38:d3:4b:b2:6a:c0:8f:b9:d9:3f:4f:df:
1c:a2:09:a9:2b:f2:04:21:d6:70:83:5a:92:97:6f:
f4:cf:d0:1d:ee:37:fb:22:a4:be:d1:98:d7:3f:dd:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4B:B9:1D:7A:0E:8D:F8:E5:2E:C8:18:CC:E8:0D:E4:C3:40:9A:24
X509v3 Authority Key Identifier:
keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:15:81:ed:71:49:1b:42:ab:e8:bd:da:72:59:ba:90:b9:5f:
0d:ee:45:cc:2e:0f:ab:8c:48:1d:f9:b4:ea:50:f8:fc:34:ec:
0a:63:28:25:5c:06:9e:af:0f:e2:90:1e:a1:84:39:87:0d:60:
79:f6:c5:18:b4:f2:21:ba:fe:fd:f8:3c:4b:96:7c:13:6d:3e:
7a:a7:bc:83:5b:a5:81:c4:56:45:65:0f:4a:52:22:09:c6:a0:
9e:9b:48:b8:0c:7c:f8:a6:7c:19:12:ff:8d:82:59:e9:7f:a2:
cf:01:75:5c:05:c9:5e:53:7b:48:0a:19:33:ba:a7:ff:7c:e7:
56:9d:cd:d1:28:0a:54:90:ad:76:f5:15:0a:e3:fb:96:64:d6:
a9:f3:40:bb:99:7f:2d:ac:d4:be:6b:18:4e:9f:a6:e5:09:ad:
0e:92:6f:a8:b9:f1:5c:7a:8e:e9:89:8c:16:58:4a:f6:6d:aa:
4f:40:98:a3:4b:b3:e3:05:a6:fd:93:25:e7:8d:94:f8:de:bd:
99:00:de:13:67:e8:35:29:21:8f:a1:c5:7c:13:34:86:26:8f:
b2:99:73:68:f6:1d:07:0b:b6:e0:b2:f4:71:a9:32:8b:b9:f9:
5c:0d:4f:5a:93:3f:e1:e2:1c:80:e5:99:73:ea:e9:6e:78:67:
f2:1d:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:03:01 2026 by rpki-client