Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: +LuXWVD2MzleEMn/iggdsfUy6Cqng1/Qrc+6cpZDWrM=
Subject key identifier: A3:C6:C8:11:56:2E:87:F1:1E:3F:81:07:60:0B:6B:A0:09:95:62:A7
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 019CABA241DF2FADC3EC7BCBD4979E144A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 0452
Signing time: Sun 01 Mar 2026 23:01:03 +0000
Manifest this update: Sun 01 Mar 2026 23:01:03 +0000
Manifest next update: Mon 02 Mar 2026 23:01:03 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: CZMBsVaUZ1XzJGyLhxM/5FUUDxl56oIc7rn8D2q1myc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:41:df:2f:ad:c3:ec:7b:cb:d4:97:9e:14:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Mar 1 23:01:03 2026 GMT
Not After : Mar 2 23:01:03 2026 GMT
Subject: CN=a3c6c811562e87f11e3f8107600b6ba0099562a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:af:d5:3e:96:ca:12:43:9a:cf:eb:ed:3b:
94:42:70:d7:8d:6c:05:0f:7c:06:eb:6a:0d:22:03:
f7:10:3a:f6:f2:39:ff:ec:7d:53:98:5a:4f:39:e0:
d1:31:6f:08:51:0d:03:a5:66:d6:e1:20:ce:65:c8:
88:c3:24:52:ba:88:4c:12:2a:c7:d2:1a:c7:18:72:
f4:5b:b8:29:24:b9:89:43:9b:69:a3:cf:8a:ef:cc:
34:15:0b:2c:6a:6b:bd:48:f4:94:33:f5:a3:2c:32:
88:c0:93:21:79:f1:48:fc:b2:9d:35:d2:c1:c4:31:
5c:3d:89:b3:81:01:7a:11:bb:5d:b5:7b:c9:84:bc:
7b:dc:a0:a0:16:3f:71:42:38:67:bc:c4:85:e8:e9:
07:a3:c6:fc:d3:a0:44:71:0b:1a:6c:d0:f0:38:70:
7d:97:58:53:f3:5e:70:99:41:88:98:79:f1:a0:41:
89:35:12:24:e8:9c:fa:b0:b5:31:64:ba:e4:78:a3:
3d:02:24:83:d6:da:27:46:35:84:2e:ae:cc:02:af:
45:a8:06:a4:b1:ce:70:44:1c:04:26:51:de:c2:ff:
64:42:fe:1c:73:d7:19:b5:dd:0f:23:cf:56:d4:70:
85:d3:3b:17:ce:1e:72:f7:e2:94:c9:f3:f1:0a:bc:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C6:C8:11:56:2E:87:F1:1E:3F:81:07:60:0B:6B:A0:09:95:62:A7
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:29:5b:ea:6a:de:7f:a6:af:9b:b6:ce:09:bd:8b:91:fd:8c:
bb:ac:7e:bd:f9:d3:3d:a7:ae:2a:0b:65:55:96:79:82:22:f0:
bb:be:1c:2b:0c:5b:87:0d:bf:76:91:0b:8b:99:87:21:c9:20:
1b:c1:4a:97:da:c5:28:28:9d:06:ce:fa:55:6c:ce:4d:d6:95:
06:2a:d3:12:2c:c2:13:93:cc:22:b6:fe:c3:00:16:eb:2f:28:
bd:be:07:f6:41:d0:03:f5:bd:1c:57:1c:a7:74:82:39:d2:4b:
3e:1a:bb:e1:47:7d:bc:c1:bd:9a:02:82:42:5f:e4:a6:b3:1c:
5a:15:e8:58:f9:61:c1:16:43:f2:12:59:c5:97:92:0d:99:7b:
3f:e0:21:6a:bd:33:59:ca:e9:cf:a1:4a:2b:ce:f6:3f:8c:c1:
ac:1b:7e:ce:f9:df:a3:17:6e:bc:e9:fc:84:3d:42:5f:aa:05:
9d:2c:44:9f:fe:4c:a6:d7:24:46:e0:ff:70:67:21:98:2e:cc:
dc:38:9a:72:67:84:15:2e:49:4b:1a:20:8b:a2:2e:88:a1:b7:
a0:56:b2:6c:bb:ff:29:cf:8b:ab:85:b2:e4:58:e7:56:91:cf:
c6:5e:fa:b7:a5:d7:66:34:c8:91:c3:06:64:5e:5f:72:27:4f:
10:30:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:37 2026 by rpki-client