Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: gFSqzTDNSkNJOh5NnQmQzvu1shthQlyUwqdqCQN8yhQ=
Subject key identifier: 27:57:C4:C8:29:CA:A8:6A:B0:42:34:5E:B9:E9:44:C6:97:1E:0B:BC
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 019DA379030AD94050414D89A0BABC2640B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 0BE8
Signing time: Sun 19 Apr 2026 02:01:49 +0000
Manifest this update: Sun 19 Apr 2026 02:01:49 +0000
Manifest next update: Mon 20 Apr 2026 02:01:49 +0000
Files and hashes: 1: Cx0etRilK9OPqVPhXKuGC2ZlVgk.roa (hash: REFN0+myM+evXgHngcWpaLUQ/JCZd+oxd4ZqR8bABR0=)
2: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: tB6O3ir1bKN9KBvL2b51/Ckia1tyAg6j9OvMo1KvM2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:03:0a:d9:40:50:41:4d:89:a0:ba:bc:26:40:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Apr 19 02:01:49 2026 GMT
Not After : Apr 20 02:01:49 2026 GMT
Subject: CN=2757c4c829caa86ab042345eb9e944c6971e0bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:a0:9b:e9:8f:58:49:16:74:de:a3:27:9b:
c8:d2:a0:a8:76:38:8e:bd:fb:63:8d:56:7d:07:e0:
67:48:4a:5c:37:4e:38:cb:ed:37:41:c9:53:fc:5c:
f9:34:86:cf:f5:32:be:26:a3:5c:5d:1d:4d:67:cb:
25:f2:4b:c4:7d:07:33:e4:98:e4:66:c7:ff:d8:16:
64:20:ef:0f:35:60:9e:45:0a:7d:9b:70:64:79:19:
d1:91:d0:2a:d0:5c:fb:11:00:90:9e:a7:a8:17:96:
c0:ee:46:a4:5f:74:39:b0:4a:de:8a:a4:60:53:b9:
2b:21:5d:62:f9:9b:6b:7d:b0:98:ea:a4:8a:20:8a:
fd:bd:c0:d5:b0:dc:12:6e:2c:01:85:32:0e:5f:f7:
30:7e:fa:95:42:4e:ba:62:25:62:2c:3b:ef:04:d6:
95:af:b5:73:cd:fc:fb:5c:0d:b7:b4:01:24:e0:1b:
26:6a:4e:8e:31:ce:5a:65:89:82:a2:a4:7e:5a:04:
db:ea:d7:f3:f1:53:ab:f1:84:fb:6d:1e:0f:55:ea:
16:63:cb:08:04:d6:c5:9d:88:c1:c2:88:33:74:9b:
b2:3f:44:9a:ef:27:52:03:5c:f7:6b:13:d8:0e:08:
82:a4:18:34:af:00:b4:84:1e:6e:b6:d4:89:54:c2:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:57:C4:C8:29:CA:A8:6A:B0:42:34:5E:B9:E9:44:C6:97:1E:0B:BC
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:99:bf:7a:e4:05:f4:37:99:a5:e7:29:19:2e:9a:04:29:44:
fa:78:7c:94:fe:44:31:ad:f6:0c:e0:4f:9a:08:bf:48:8c:e0:
79:b8:7b:21:c1:8a:e2:cb:0b:f1:ff:68:99:7c:43:8f:cc:6c:
29:24:d2:28:34:d8:3b:93:f6:c7:48:3c:7b:15:4a:0f:b6:ce:
9a:bf:88:83:77:93:0e:e4:a5:a3:4c:d7:45:bb:79:f1:0e:99:
95:58:01:cb:9d:34:e3:6d:48:72:95:b1:7c:ae:6a:cd:5e:30:
f2:91:93:f2:61:6f:37:5c:fe:f6:65:d7:6f:c0:68:69:6d:fa:
1c:99:38:c7:d6:35:1a:47:d3:44:96:71:fa:3a:e8:12:70:72:
ca:af:6f:22:d3:19:07:55:d4:f0:a0:10:8a:35:1c:56:9c:f1:
94:a2:af:49:15:02:89:f8:a4:dd:e2:ce:29:18:6e:16:ac:47:
c0:ef:98:0c:31:15:7d:6f:85:2a:73:c8:aa:3b:1a:14:82:d2:
56:82:62:66:25:3e:dc:bf:e0:49:9d:d0:3d:42:32:5a:19:eb:
72:8d:5c:99:93:8b:45:ec:4a:6a:80:d6:c1:e9:3d:d5:d5:a1:
e8:8f:17:e3:41:45:0a:6e:6f:e3:4b:2b:b0:b4:ad:96:53:6a:
9a:bb:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:01 2026 by rpki-client