Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier: Px9J6Xrioic7qItM/qYBx3aIJJmh5P3wNAHIHIVgY3k=
Subject key identifier: F7:27:95:9B:90:CE:34:B3:82:6D:FF:9E:BB:7C:92:30:D6:63:75:38
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial: 019D98F5120938FE73B64EF2A52FC1ABBF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number: 13BB
Signing time: Fri 17 Apr 2026 01:01:30 +0000
Manifest this update: Fri 17 Apr 2026 01:01:30 +0000
Manifest next update: Sat 18 Apr 2026 01:01:30 +0000
Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: MSQwfHR8DSJ5HRuz4LBl+6RZAE8DTD1SJIT9EWeyR/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:12:09:38:fe:73:b6:4e:f2:a5:2f:c1:ab:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Validity
Not Before: Apr 17 01:01:30 2026 GMT
Not After : Apr 18 01:01:30 2026 GMT
Subject: CN=f727959b90ce34b3826dff9ebb7c9230d6637538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:44:7c:ab:28:39:b6:de:d7:aa:24:db:5b:
83:51:93:ad:54:03:74:ef:1f:8b:84:a8:a4:92:b9:
b2:5b:04:85:9e:8e:d0:e0:2a:29:cc:8c:8f:52:2b:
ca:e4:64:ac:b8:24:55:50:07:43:72:dc:55:b5:8f:
93:70:c4:e3:90:18:28:ad:83:e5:b2:56:3e:f9:73:
89:4f:58:0a:1f:24:ab:5a:4b:49:a0:8a:a1:2e:ee:
5c:c6:f6:21:99:e5:f2:ce:f6:2b:b9:18:e7:84:03:
64:ec:06:41:72:aa:6c:8e:80:cc:17:1c:34:0c:24:
f4:bd:81:6d:d7:4a:e8:15:19:3d:9d:ad:df:ee:ea:
8b:09:bb:ff:3b:e0:fe:ed:6b:7b:f0:16:49:80:6b:
21:43:b6:05:3d:f0:f7:18:63:3b:52:14:92:e0:f9:
0d:10:eb:30:bc:54:ef:ed:92:47:b2:61:a2:dc:f7:
39:63:9a:91:0f:86:58:2e:34:4e:2c:fb:8f:97:eb:
f9:01:57:9e:b7:4f:62:ab:24:4e:cd:7f:36:33:f9:
ec:a9:d7:0d:b4:02:21:c0:9a:72:4b:23:d9:e8:9f:
18:1c:7a:ca:9f:6a:fa:b6:ab:bb:f3:00:7f:12:09:
47:dd:69:d1:50:74:f7:9c:31:b2:52:68:77:6b:37:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:27:95:9B:90:CE:34:B3:82:6D:FF:9E:BB:7C:92:30:D6:63:75:38
X509v3 Authority Key Identifier:
keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:31:7f:db:70:73:73:8b:69:b8:72:50:73:45:e3:39:6e:01:
7f:e7:b8:0c:98:10:2e:d6:52:2e:f7:ea:92:1c:7e:40:71:f7:
7b:f6:a4:7b:45:83:7a:f8:63:65:f6:9f:92:78:26:12:12:e5:
e7:da:1a:5c:72:1e:cf:2b:cf:70:ef:f7:59:37:2a:d5:bd:73:
82:3c:b6:76:e1:47:be:38:33:97:30:2f:4a:7a:b0:e9:3b:39:
4d:a6:26:87:ff:f8:27:11:5b:59:6f:ba:1d:32:af:de:56:85:
b4:5e:96:88:6e:f4:9b:42:13:85:75:ab:67:2d:8b:cb:c0:c3:
74:12:8d:8f:4a:08:c5:b6:8d:e9:ac:ca:b9:d4:92:5f:5c:c4:
33:13:e3:87:52:db:fc:1f:04:f2:15:60:06:7e:0f:9c:c8:fa:
9e:03:44:7a:4c:fd:f3:33:04:89:1d:fa:b3:5c:fb:35:08:73:
83:c8:23:4a:5e:22:08:b8:34:86:e9:3f:0d:79:4f:f9:5e:f2:
c4:b0:63:0f:b1:61:9e:7e:33:22:74:35:ed:85:e9:0e:16:38:
b4:42:a7:4e:be:4a:f0:fd:81:9e:fb:93:91:59:3e:86:53:7f:
9b:29:76:bb:82:5f:8b:45:ef:0c:e7:df:94:c9:86:27:9d:75:
32:af:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:43:22 2026 by rpki-client