Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: 50hcqHYE85iNFy5muwPgQ3G38qndcAZOL4DcJIIPzUk=
Subject key identifier: 6F:6B:BC:86:4C:5D:CF:52:E9:BC:17:4F:36:28:01:47:50:D8:2D:84
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019CABD90565AE5AA5505607B45FCC96882E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 08DF
Signing time: Mon 02 Mar 2026 00:00:52 +0000
Manifest this update: Mon 02 Mar 2026 00:00:52 +0000
Manifest next update: Tue 03 Mar 2026 00:00:52 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: c4oj6N6FgmQI0RtUXppE72i8AKnzNB0rXBm42LwrhHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:05:65:ae:5a:a5:50:56:07:b4:5f:cc:96:88:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Mar 2 00:00:52 2026 GMT
Not After : Mar 3 00:00:52 2026 GMT
Subject: CN=6f6bbc864c5dcf52e9bc174f3628014750d82d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:ba:a7:82:fc:30:4c:fc:0a:83:d9:83:f1:
35:09:19:72:9a:08:13:68:ab:1b:7e:28:ea:33:5b:
4e:24:44:ac:8f:d1:70:5d:0e:77:a6:3a:91:50:b6:
9c:67:70:61:a0:ae:0c:2f:7e:d9:1e:8c:e6:cc:21:
05:31:b6:dc:e1:92:d9:81:82:b7:fb:7b:07:98:2b:
d5:69:e3:2f:ed:a0:86:0f:92:b5:52:5f:44:66:06:
eb:b6:8e:ba:1f:ec:ef:10:f8:a3:b7:c3:97:1a:8b:
5d:9d:38:a2:6d:29:eb:b3:83:12:2c:c6:89:66:15:
1c:7e:da:a3:0b:98:f1:35:2b:8f:02:c6:7e:f1:4d:
97:51:e5:c6:bf:44:d2:c6:74:41:ff:24:03:7d:b7:
eb:4e:7a:4b:b7:17:13:2b:43:a6:83:ff:01:59:c6:
db:40:9f:df:02:be:4e:86:db:6e:9f:70:b0:e5:6c:
49:08:7b:84:4b:a2:c1:2f:ed:6c:ed:bf:06:80:4d:
85:82:b4:da:93:f0:80:94:ad:7d:55:01:09:23:85:
50:5a:6c:f7:9d:1a:ec:44:d9:f5:dd:06:78:32:c9:
43:b4:f3:94:54:b8:29:61:40:0a:24:bf:33:25:41:
5b:66:db:63:9f:40:df:f7:eb:ac:fe:ae:4f:63:11:
39:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:BC:86:4C:5D:CF:52:E9:BC:17:4F:36:28:01:47:50:D8:2D:84
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:51:61:3b:14:a2:50:04:3b:d9:88:9b:1f:8a:c0:a5:b8:b3:
71:36:42:8d:e5:56:40:da:25:14:42:a0:8c:d6:c0:e9:e7:a2:
b7:4b:1c:ae:05:5f:f3:94:86:2a:5c:f0:0f:eb:99:39:3c:e7:
81:aa:13:fc:81:5a:71:28:0e:c8:2b:52:e5:fd:e7:76:fe:f3:
c7:ef:46:07:4d:3e:18:f1:cd:00:b7:e6:b4:5b:c2:d6:f3:c6:
88:77:7d:a8:dd:d3:e6:bb:25:21:6b:3d:96:4b:ad:8e:1c:ed:
8a:ba:1a:99:32:72:88:7e:76:a8:27:c1:b5:43:bc:5f:d6:a9:
5e:5e:0d:1d:33:62:c2:46:a2:f5:39:74:1c:fb:8f:50:91:ef:
97:e5:0d:bd:a5:fa:3f:21:86:5a:77:92:61:2b:1b:78:19:c5:
f6:4c:e1:fd:96:af:05:af:9c:43:ff:a5:8f:be:1c:f3:f7:85:
a6:28:9b:04:26:2a:c5:d4:77:2a:14:9f:44:2f:0e:d9:cc:cc:
d7:81:70:dc:d9:a0:8e:42:b6:00:a6:fa:b6:f2:e5:a8:c9:8e:
41:e1:92:c8:e2:a9:0e:e2:36:3c:d0:7d:ab:81:2e:b0:d6:c3:
64:e3:b0:d2:4b:99:f2:38:8c:52:0b:19:1c:b9:b0:c9:5d:73:
26:dc:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:26 2026 by rpki-client