Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File: qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier: hIOeu4ezTUKXw7P/g2i2Ml32StLbvN384QNAfUaMKN4=
Subject key identifier: 29:81:D8:F4:BC:66:2C:7A:3C:93:7B:AB:26:88:6C:FB:EA:3D:AE:A4
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer: /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial: 019CABD8DF728E85EBAF0CB07265D520320D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number: 10C8
Signing time: Mon 02 Mar 2026 00:00:42 +0000
Manifest this update: Mon 02 Mar 2026 00:00:42 +0000
Manifest next update: Tue 03 Mar 2026 00:00:42 +0000
Files and hashes: 1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: yINrqD8TkZ0jpTTgHcaGe9HwR5x7KiVtFGbq8YW/M6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:df:72:8e:85:eb:af:0c:b0:72:65:d5:20:32:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Validity
Not Before: Mar 2 00:00:42 2026 GMT
Not After : Mar 3 00:00:42 2026 GMT
Subject: CN=2981d8f4bc662c7a3c937bab26886cfbea3daea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:81:2b:76:d4:5c:c6:15:58:fe:71:9d:64:
82:63:e7:46:df:fb:c0:09:69:8b:40:c4:ae:ca:47:
ba:30:f1:c1:f2:91:ce:6f:fe:18:8d:70:22:4d:b8:
31:f2:c8:6c:de:eb:ed:4b:6d:43:ea:8b:1d:b9:9c:
15:5d:e0:8d:9e:e3:3f:5c:01:26:08:af:d5:12:9d:
a0:7b:b6:55:86:11:6e:6d:7e:3e:4c:a6:f5:68:f9:
25:c9:b8:84:09:18:cd:8b:e2:3d:ec:7b:4b:79:0f:
8d:9c:e3:7a:83:b6:d1:51:34:76:56:c5:6e:e7:7f:
9a:ce:6a:80:17:13:e6:4a:b5:4c:4c:f4:37:db:85:
d8:0b:9d:25:05:02:51:86:63:81:fd:fa:e7:6e:f2:
78:4d:c5:17:ed:d2:51:ce:1a:25:37:b7:2f:7a:13:
5f:5a:43:40:6e:dd:6d:19:28:ef:19:0c:1b:ad:b7:
3c:57:35:ca:df:1e:c7:4a:8a:0a:bb:48:8e:67:3a:
55:2c:ec:b2:f6:08:c9:fe:d4:41:53:c3:0f:d2:7e:
7d:55:9b:e8:24:b6:ad:15:0e:47:55:82:fc:2c:54:
b6:35:13:21:f9:bc:73:56:84:d2:2f:3a:c6:82:b9:
ca:bc:92:33:f6:20:43:d6:8a:40:73:4f:bb:64:1a:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:81:D8:F4:BC:66:2C:7A:3C:93:7B:AB:26:88:6C:FB:EA:3D:AE:A4
X509v3 Authority Key Identifier:
keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:15:c0:a8:35:74:52:f4:0d:21:eb:41:a2:e1:26:04:f8:9c:
08:c5:0f:0c:79:8a:78:42:44:04:a8:86:04:f9:96:22:03:f2:
18:98:49:52:c1:c8:3e:ae:51:5a:43:6f:7e:4a:92:9a:a4:bf:
0f:87:dc:39:32:a3:dd:81:cf:ab:59:9e:37:85:75:bb:77:61:
03:13:ce:2e:0a:94:50:78:89:91:ec:9a:62:1d:0b:52:05:41:
e1:15:1f:40:45:a3:0d:de:8f:31:a8:c4:79:fd:1a:06:94:2d:
86:1f:b6:6e:25:bb:41:e3:8f:2a:02:15:48:f4:ac:0d:89:5f:
de:96:ce:0c:fc:93:a5:27:46:b8:b6:0a:e9:d7:f6:a2:22:a8:
0a:54:e7:95:95:88:7c:ff:5c:6c:b2:57:15:0d:de:c3:30:2f:
10:39:99:33:df:e8:e8:67:bd:78:7d:87:73:d9:03:fd:f6:61:
e0:4c:11:4f:62:e7:77:4d:e3:c6:3e:43:e2:0e:7b:3c:d3:d4:
0f:26:10:9d:b1:ee:7a:e0:76:05:80:52:88:55:f9:3a:2d:f4:
35:4f:ba:01:47:4d:43:f9:86:45:af:97:11:37:4c:bc:3c:30:
2e:3a:c0:05:ef:16:2a:5b:e0:88:bc:e1:ef:7d:60:b5:4f:f3:
cb:32:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:30 2026 by rpki-client