Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: UsZQPC1D3WEslUHBHFDuk0rtK7L/tLYzdxG8Gi92XnU=
Subject key identifier: C0:06:5A:3B:60:52:CB:DB:0A:79:09:79:9A:3B:62:81:A1:75:F8:DC
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 019CAAC644C6473C57ED2E25E355D7FF6526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: 04CE
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: ZqZdOvZLsHdLHfqtUjdv9lukW4qZLjLiloPwfkHZM2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:44:c6:47:3c:57:ed:2e:25:e3:55:d7:ff:65:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=c0065a3b6052cbdb0a7909799a3b6281a175f8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:74:6c:c7:fd:b3:0d:90:5c:b9:47:da:99:
4b:16:82:de:98:15:57:ff:24:ba:e7:89:82:4f:88:
d7:1f:cf:e4:1b:66:43:1b:ba:6a:48:41:4d:26:88:
02:b6:09:a9:ca:c1:7f:70:3e:50:a4:f5:62:cb:22:
53:1c:52:b6:58:df:55:d9:08:18:a3:af:db:d7:4a:
46:4f:a3:ff:aa:e0:04:07:a7:12:b4:85:6d:ff:87:
41:4a:53:86:14:3c:c1:61:96:77:fe:3c:f4:28:1f:
76:bb:2f:e4:d1:0e:58:f6:11:43:5e:22:15:2a:cb:
b1:b5:60:31:fc:6b:e4:37:42:56:54:b4:0a:75:4c:
c8:a2:fc:b2:64:a6:f0:1f:3b:86:5b:20:7c:ec:bb:
d6:b3:80:10:71:4a:9a:1e:bb:37:bd:a5:cc:4b:fc:
52:c6:65:c6:6e:b9:7b:8f:72:c9:1a:bf:42:a0:e5:
4d:c5:9b:44:9b:ce:e0:f1:06:3f:f8:51:a2:31:4e:
bf:f9:cd:bf:e4:b5:6d:3e:d0:c9:42:1b:c3:ca:d6:
2d:6b:79:11:75:15:08:e6:3e:5a:5d:5d:39:17:8b:
49:0f:b4:1d:c6:91:e5:66:90:6b:63:8f:fa:fb:e9:
12:e2:57:98:f1:5b:7f:e2:d5:e6:d8:ec:12:d9:f2:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:06:5A:3B:60:52:CB:DB:0A:79:09:79:9A:3B:62:81:A1:75:F8:DC
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:92:1b:f1:e2:bf:d2:82:2e:a5:9b:3e:c4:66:62:af:b0:16:
69:f4:4d:3b:0d:d4:38:96:ab:c3:b7:7d:8c:7d:37:a7:5c:42:
1c:02:4e:c0:42:79:40:e2:a4:52:2f:5d:70:d0:f0:c1:82:09:
3d:a3:28:e5:45:25:ac:8f:12:8b:8d:02:fd:43:ca:7d:36:31:
10:30:57:87:6f:ad:75:ea:11:dc:69:52:88:3a:5f:37:c3:3a:
ef:02:4c:d9:30:fb:1b:88:5d:3f:38:7b:f2:56:65:7e:e7:91:
67:d0:f8:e6:29:1e:e2:62:66:aa:49:73:0d:20:6d:53:b2:8a:
19:fb:1f:50:a1:28:c2:c2:c8:e7:ad:8a:a2:93:8a:d1:14:19:
72:ac:87:a5:f5:63:23:d2:d3:20:43:7c:50:25:2e:b4:a7:5f:
0d:f5:df:a6:37:4d:1f:c6:df:a7:03:9b:82:d3:89:1f:a0:f9:
11:14:bf:92:e9:62:1b:86:56:72:3e:8d:57:ce:63:44:5d:1c:
db:8d:eb:4c:21:91:aa:dd:da:95:04:8b:00:e6:bd:9a:85:89:
c5:3a:68:f4:9f:5e:28:6f:56:1f:ba:13:62:64:aa:d6:45:2a:
36:d2:11:0f:21:37:04:50:d6:55:77:ca:b7:5e:a3:66:f8:84:
42:04:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:28 2026 by rpki-client