Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: +xU36R0DvLRFmKELf3e8h6Yj88mKEi3A+2Z2gwSiuTc=
Subject key identifier: CC:E1:26:D2:5A:7E:DA:35:EC:2E:31:B9:CE:5B:60:68:B1:E2:E0:48
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 019CAC4708FBDFC2B602FB23C79E97D105A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 12DD
Signing time: Mon 02 Mar 2026 02:01:02 +0000
Manifest this update: Mon 02 Mar 2026 02:01:02 +0000
Manifest next update: Tue 03 Mar 2026 02:01:02 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: RkvD4kqwV7ypU7+6ZWAL3Zs9oGJLMbGNs9Be9dZcKo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:08:fb:df:c2:b6:02:fb:23:c7:9e:97:d1:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Mar 2 02:01:02 2026 GMT
Not After : Mar 3 02:01:02 2026 GMT
Subject: CN=cce126d25a7eda35ec2e31b9ce5b6068b1e2e048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:a8:e9:1f:50:ba:ec:df:68:70:08:35:75:
d9:39:b2:fc:af:43:28:31:76:f1:6d:d3:07:4b:d5:
66:f9:2a:ab:a1:39:64:7d:36:15:17:d3:fb:ae:3a:
9d:13:9e:5d:ef:fd:18:0e:69:ef:5f:3b:01:85:02:
4f:fd:9c:21:a1:49:5e:52:16:4f:f0:2b:0d:ef:ef:
10:a3:84:4b:05:01:f5:b7:2f:19:ce:c1:60:1d:03:
c0:a8:0c:0c:cf:6b:bf:61:d8:ef:09:76:24:19:62:
d5:e9:64:09:cd:33:70:ff:b0:9c:41:75:bc:02:e4:
ea:43:98:ac:33:58:b0:3f:d9:ec:81:2c:3e:32:8f:
1b:01:f8:b3:d4:8b:df:e5:6d:ce:ed:71:bb:08:37:
64:f4:0f:c0:c9:9b:09:91:88:af:31:7e:82:2d:93:
f7:b6:69:2f:b8:47:3a:33:25:ea:0f:97:cd:13:aa:
ce:6f:45:67:7c:03:ee:0e:3f:82:21:ba:bd:b5:1b:
b4:d0:35:19:4c:81:ad:5c:a2:73:d6:8c:e6:6d:4b:
2b:1c:af:39:f5:7d:e0:52:49:1e:04:fe:25:fa:aa:
3b:d0:fd:21:54:6b:c4:f4:f8:fb:6a:e8:a8:6b:2a:
67:d0:44:ca:49:0b:7b:b3:5d:61:9d:63:36:9f:06:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:26:D2:5A:7E:DA:35:EC:2E:31:B9:CE:5B:60:68:B1:E2:E0:48
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:80:3e:cc:ca:fe:1e:c5:3a:68:e8:57:ce:31:d9:58:9e:21:
26:c5:e8:7e:d1:62:79:a4:1c:0f:2d:9c:d8:35:f7:a5:d0:75:
a2:f7:08:a7:19:06:c5:ea:f9:b5:9b:ae:38:af:8f:7e:12:95:
75:0b:0c:ef:e8:9d:78:84:72:b3:88:2d:94:41:66:bc:2d:ea:
c7:5b:61:68:16:63:76:7a:16:10:15:ed:98:4a:00:4a:7b:d5:
d5:eb:83:6b:e3:90:51:df:88:bc:73:b9:fc:5f:86:ea:35:f7:
bc:e5:f1:6e:6a:eb:37:49:c4:a1:0f:69:18:b9:a0:dd:10:8d:
b7:32:65:e7:70:90:fb:aa:c2:bf:24:d2:53:78:06:c1:94:25:
21:1d:64:b3:78:0c:7c:ff:26:f9:a5:e4:08:eb:cf:b2:fc:64:
f0:e7:23:3c:dd:0a:86:cc:4d:c7:8e:18:b6:27:dc:4d:6e:dc:
3b:6f:b8:f9:a5:62:c1:46:2b:49:ca:da:de:7f:c9:54:a5:61:
59:2a:4e:04:98:1d:09:b8:33:c0:48:06:3e:1a:01:cc:52:e7:
44:70:a7:70:2e:60:ea:8b:22:af:a0:b5:09:10:3c:8f:71:80:
57:97:6e:66:ed:3d:b0:ee:3c:4c:29:95:db:49:f5:df:82:32:
c7:f7:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:30 2026 by rpki-client