Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: yBesFdFNLpGJ5N1yhs8H2DyJinaxGwqEivhYoPQoTKw=
Subject key identifier: 23:99:E3:5E:E5:FF:9A:30:7E:9B:EE:38:8F:3B:73:3C:DE:9E:2F:FC
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 019CAA5891CC3DD77EE54F9D2D8F60D31C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 0B67
Signing time: Sun 01 Mar 2026 17:00:57 +0000
Manifest this update: Sun 01 Mar 2026 17:00:57 +0000
Manifest next update: Mon 02 Mar 2026 17:00:57 +0000
Files and hashes: 1: Cx0etRilK9OPqVPhXKuGC2ZlVgk.roa (hash: REFN0+myM+evXgHngcWpaLUQ/JCZd+oxd4ZqR8bABR0=)
2: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: UIVYbImTrYPIR4CPZdu2+8868ypDE78E8O6M/5WcISU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:91:cc:3d:d7:7e:e5:4f:9d:2d:8f:60:d3:1c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Mar 1 17:00:57 2026 GMT
Not After : Mar 2 17:00:57 2026 GMT
Subject: CN=2399e35ee5ff9a307e9bee388f3b733cde9e2ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:1e:ae:67:d4:78:e0:ee:52:5e:4d:fe:80:
6e:b9:31:07:9c:46:16:78:a7:28:6e:bd:2b:a4:5a:
29:9d:06:6d:4d:05:9b:ec:f1:69:ec:16:8b:76:1e:
f8:5f:ef:72:58:0b:fa:49:2e:62:89:04:33:ef:4d:
61:70:51:da:ec:99:db:ca:16:91:64:bc:22:f7:8c:
12:b7:55:f4:f0:1a:b9:ed:c0:be:c9:3a:51:5e:00:
38:b7:ea:22:8a:c8:f9:2d:73:25:0e:c6:7f:5d:d3:
a3:53:66:64:5b:e3:2d:e9:b9:80:95:b3:fa:fc:88:
9a:79:da:16:12:10:b9:5e:77:1b:9c:cc:e8:61:44:
a6:d9:4c:ca:47:40:b5:9a:f2:b5:c8:ec:41:51:91:
6a:40:a8:c6:eb:1a:19:24:be:65:36:d2:23:15:2a:
18:b4:fe:3d:bb:82:31:90:a6:27:46:d1:27:e3:a5:
a1:d9:ba:73:5d:ce:31:57:b1:b4:65:d2:d7:da:74:
05:52:e0:85:7d:35:11:44:45:0a:2e:64:e0:ca:a0:
9f:bb:d6:c1:4b:a2:0f:fe:53:97:55:c7:c7:f1:23:
da:02:e1:e4:7f:bf:bf:52:ef:72:33:75:89:52:d7:
3c:b6:37:8c:03:47:3c:bf:d1:e5:7e:4a:5e:b7:1e:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:99:E3:5E:E5:FF:9A:30:7E:9B:EE:38:8F:3B:73:3C:DE:9E:2F:FC
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f5:23:a1:43:a0:e8:1f:67:93:3b:2f:30:23:06:b5:f7:64:
a2:00:e6:5a:6d:7a:cf:8d:f5:50:bc:1b:8b:11:6b:b6:0e:a2:
5b:fc:06:8b:30:35:d7:bc:55:1c:14:73:33:db:96:03:25:a3:
9a:8f:21:bf:fc:5b:cc:af:ad:a6:ec:fa:24:41:54:6c:2a:c5:
14:2a:21:2a:65:59:d5:57:9c:f0:ee:95:f9:11:71:60:d3:d4:
ec:82:35:56:d7:f4:fd:9e:5e:c7:3d:c0:00:3c:42:90:34:67:
46:d0:fc:23:41:24:4a:fa:83:88:35:49:4c:58:aa:f0:fc:82:
29:4c:bc:e0:01:9f:6d:08:88:a3:40:0c:04:bf:f3:0c:7d:8f:
ef:d1:9f:ab:ce:71:dc:d9:40:fb:88:30:dc:8d:ca:a4:54:64:
c7:ff:56:42:d4:11:55:34:da:8d:81:30:ed:fc:db:72:55:1f:
7b:35:98:da:c1:0b:27:74:6c:32:94:8c:4d:37:02:26:d7:8f:
8f:00:54:9d:e2:1d:20:0e:d3:05:05:10:90:ee:68:1a:ee:77:
10:a4:f3:3f:4d:be:c0:12:26:58:e9:8a:aa:39:5c:98:8e:f5:
7b:db:4f:1f:13:2b:c8:5c:7b:89:85:0d:a8:45:f0:dd:4c:33:
7a:fb:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:58 2026 by rpki-client