Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: Dajjx0RsNMo5RUxaaoHawVOeFRHR9fgh0D8w9kaPEI8=
Subject key identifier: C5:2A:AE:C3:97:4E:14:96:37:DE:9D:49:AF:C2:BA:3F:91:16:70:49
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 019DA4C196A19EFA2536826976D334792D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 04D3
Signing time: Sun 19 Apr 2026 08:00:43 +0000
Manifest this update: Sun 19 Apr 2026 08:00:43 +0000
Manifest next update: Mon 20 Apr 2026 08:00:43 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: zz1u+E3Yjjagd0lS5ljyDSoiPhFVWktMHOFEJk/LQqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:96:a1:9e:fa:25:36:82:69:76:d3:34:79:2d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Apr 19 08:00:43 2026 GMT
Not After : Apr 20 08:00:43 2026 GMT
Subject: CN=c52aaec3974e149637de9d49afc2ba3f91167049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:f2:f2:92:82:04:5e:e9:47:00:b9:31:20:
26:ea:ca:0b:89:37:34:be:2e:c6:c4:70:1c:1d:12:
e6:2c:b2:9b:87:d4:bf:63:55:7b:26:29:78:bf:22:
b9:71:d4:71:f7:0b:22:98:30:ef:68:e0:46:d6:72:
ca:f3:da:b3:27:2c:96:54:5f:fd:49:78:51:8f:33:
2b:88:4c:48:a1:ac:c4:c1:e0:a1:91:6e:ff:25:d4:
4a:3d:d8:6a:1c:e5:9e:23:d3:6e:70:13:7f:79:37:
59:b4:22:f8:21:a3:3a:a3:37:2e:b9:81:c6:6c:a6:
8d:40:ca:b1:6a:77:a5:c9:4e:fe:90:e2:55:6d:56:
3e:20:5e:14:8b:f6:1a:bc:33:a5:bc:62:96:d3:be:
0c:ef:e1:47:b4:cb:a5:7b:b9:71:e9:b6:4e:15:8e:
48:76:01:1a:82:d1:14:3a:e7:17:56:2a:fb:eb:d4:
30:da:46:80:88:0a:96:52:9c:42:29:44:14:e7:2f:
cd:ea:ba:6d:a5:3b:7d:31:9a:0b:73:e3:cf:50:e3:
21:54:c8:ba:bf:e8:e8:f6:15:42:8a:03:0f:a1:40:
9e:94:a1:5f:0b:1f:a3:62:d9:8b:c0:05:ce:50:b8:
5e:c1:18:2a:0f:51:06:23:90:0f:36:e8:c3:a6:98:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:AE:C3:97:4E:14:96:37:DE:9D:49:AF:C2:BA:3F:91:16:70:49
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:4c:5e:e8:06:20:b9:18:de:18:fe:54:fd:5a:6a:ed:d4:
5e:c2:79:4a:ea:b2:6a:52:8d:42:d5:34:96:27:cb:43:65:e1:
96:09:79:16:6d:54:27:35:f7:e5:d1:c7:1f:ac:0f:d1:c5:03:
ea:0b:00:b7:ad:28:e0:65:cb:87:57:43:89:33:5e:68:62:7c:
17:d3:4f:1c:d2:46:e0:59:bb:c6:0c:e7:a3:a8:7b:ff:11:49:
6c:fd:ac:ec:79:d6:0e:77:6f:68:c2:56:dc:18:a3:f1:b7:21:
82:65:d4:9c:c6:1b:00:59:4b:20:cc:78:bb:b1:41:02:84:c3:
fc:ac:f2:4b:c4:2d:11:d7:6d:76:bc:5c:f2:b3:14:d9:df:39:
76:ec:e1:d2:49:43:14:e7:65:50:71:28:b0:4b:f2:b8:b2:56:
47:37:6c:71:f2:82:fc:59:d7:68:ff:a0:9f:f8:09:03:d0:ef:
45:62:87:80:d7:fd:79:2a:4d:92:4e:b7:93:0e:7c:e7:b5:f9:
4a:59:ac:12:f8:0d:d1:25:5b:e3:71:b8:1a:c8:72:c5:5f:f5:
3d:3c:53:bf:f3:41:df:21:a7:c2:f4:18:4d:cd:0a:38:9b:ed:
58:5a:f0:12:75:9d:e8:b5:e3:ab:ae:e7:74:f1:7c:d0:55:f5:
d5:73:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:37:40 2026 by rpki-client