Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier: lsQ7h+ffQNx8BKTfw/leKj/am3OxguDUphLHdXG2LjA=
Subject key identifier: 8C:09:F9:0E:2A:29:A9:29:D4:17:AE:D9:28:6D:76:F5:75:E6:E8:5B
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial: 019DA48B78EFEDDD63FCE30828DA16E39621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number: 0ED6
Signing time: Sun 19 Apr 2026 07:01:37 +0000
Manifest this update: Sun 19 Apr 2026 07:01:37 +0000
Manifest next update: Mon 20 Apr 2026 07:01:37 +0000
Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: Oj65GdtsjcBgVKs8HmQo/v5Ex3K7uq/U6zNgHVLglpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:78:ef:ed:dd:63:fc:e3:08:28:da:16:e3:96:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Validity
Not Before: Apr 19 07:01:37 2026 GMT
Not After : Apr 20 07:01:37 2026 GMT
Subject: CN=8c09f90e2a29a929d417aed9286d76f575e6e85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:d8:f6:2d:18:95:a4:8d:12:94:8f:e1:01:
db:d4:0a:fa:0d:30:4c:90:9c:64:ad:01:05:83:d1:
b8:ab:d3:73:93:e5:8f:fe:4f:ab:83:db:1d:c5:ad:
d8:3f:c4:de:6c:a1:68:41:19:95:35:21:d6:1e:e2:
45:7c:26:7b:10:97:b0:3a:a9:aa:13:59:78:80:6c:
8d:d3:2f:32:8c:e6:da:46:8a:b0:5c:5e:99:54:9c:
31:0c:dc:db:ed:43:60:75:12:23:32:23:d1:47:ca:
3f:66:b6:2a:4d:1d:a8:6d:5e:e4:2b:09:33:96:22:
c9:d2:4d:4d:6a:78:20:26:d1:36:67:eb:76:c0:e6:
89:97:0a:2c:5e:4e:90:1e:b9:00:99:04:48:77:aa:
0c:70:d9:1b:bd:ea:d4:25:55:81:f1:fa:62:12:11:
65:9c:2a:ad:69:4b:6d:f8:00:af:e1:dd:32:59:2d:
1a:26:04:6f:94:dc:a1:ed:b7:d2:d4:2f:d2:6e:85:
03:42:4e:49:0d:ea:88:ad:91:69:50:00:75:6d:cb:
00:ce:40:e7:10:27:b8:d5:d7:a3:c1:ba:f7:ce:c9:
c6:34:68:f5:5a:51:94:fd:a7:fc:f1:c6:e8:e8:fa:
1c:29:62:c0:6b:bc:f2:b5:83:fd:51:28:85:49:08:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:F9:0E:2A:29:A9:29:D4:17:AE:D9:28:6D:76:F5:75:E6:E8:5B
X509v3 Authority Key Identifier:
keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d2:14:a0:05:ac:16:09:ca:54:2a:25:1a:00:d4:48:02:79:
8e:fd:3d:61:68:20:13:d7:4f:ea:28:e9:3d:ac:43:77:58:83:
09:a6:82:27:7d:cf:0a:4e:e5:4d:cf:55:bb:4e:42:32:f8:8c:
23:e4:6b:13:e8:91:00:71:bb:78:20:90:41:35:f3:4d:03:f3:
3d:ae:b1:d4:b6:b3:72:bd:9e:4e:ff:da:20:99:26:06:8b:1b:
da:cf:77:9f:56:8c:37:4b:a6:5e:cf:86:0f:95:22:76:08:4b:
99:1d:09:40:3f:7e:64:38:d0:ec:ec:fc:51:46:bb:1c:6b:c0:
d5:b2:56:c2:c5:7f:50:c0:c0:bc:07:0a:05:c1:b4:25:21:83:
e4:ad:10:24:e3:0a:29:88:71:cd:e3:64:bb:e6:f5:37:98:11:
1d:8b:01:8b:c8:d9:ae:4a:b5:18:fa:6e:35:98:0f:72:11:2b:
7c:80:54:a9:9b:d5:c4:2b:5f:eb:f2:86:4d:29:5e:fd:c6:8f:
c6:c9:ae:8c:43:0a:97:b1:18:62:1d:1c:9e:82:b5:31:fd:e7:
ae:a1:e6:69:fe:cb:88:cd:f6:49:ae:c5:01:76:0d:8f:51:8e:
29:6f:d9:87:2e:b7:b3:42:22:be:d3:2f:94:56:cc:e4:e0:6d:
71:38:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:31 2026 by rpki-client