Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: UjAo5RRdn5PHpIj0Ne+4WQ/KSeJsUItoa4PJAr7PG98=
Subject key identifier: 81:20:C1:27:00:0D:39:68:A5:25:D0:D7:43:D9:0F:B2:6C:8A:FC:18
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 019CACB4DECF47DA52B96B9DE680CE002458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 10AB
Signing time: Mon 02 Mar 2026 04:01:00 +0000
Manifest this update: Mon 02 Mar 2026 04:01:00 +0000
Manifest next update: Tue 03 Mar 2026 04:01:00 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: FUqVg/M1iFOe+3Shx2O3HHm4A9r5E799QGdg+g1aYg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:de:cf:47:da:52:b9:6b:9d:e6:80:ce:00:24:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: Mar 2 04:01:00 2026 GMT
Not After : Mar 3 04:01:00 2026 GMT
Subject: CN=8120c127000d3968a525d0d743d90fb26c8afc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ba:1b:e7:82:79:22:c9:49:ac:da:73:e7:f6:
ba:be:6c:de:57:92:17:b1:16:8d:ae:34:3b:24:92:
90:1b:fb:c1:4d:09:b8:fb:19:0e:e6:31:72:65:f0:
d4:e1:6e:e1:8d:bd:8a:b3:af:e7:06:3d:13:44:4a:
de:25:c6:08:78:93:ae:f5:9f:01:5b:30:2b:7e:3e:
d8:6e:45:44:f0:f0:37:c6:f2:cb:ec:5d:e7:75:02:
52:b7:4b:c1:6f:25:ec:be:53:9a:68:85:36:fa:2c:
c7:cd:a8:3a:ae:f9:cf:34:c3:cb:3f:a1:a8:4a:76:
4b:04:ed:44:19:79:28:4d:ce:ba:89:f3:a6:a0:72:
c5:20:f3:6d:e2:8c:ab:3b:d2:c9:d9:ae:a6:f2:80:
6e:d1:cd:13:8f:7c:0a:28:4e:02:83:a8:71:af:b4:
90:18:da:8c:81:2c:60:a2:7d:5e:d0:95:f2:82:09:
10:79:1b:fc:7c:48:93:4b:86:d0:a1:99:b2:ec:e8:
b2:1d:e0:50:2f:ab:2a:21:de:85:98:02:54:8d:23:
52:04:73:b3:58:dc:6c:ba:ee:d9:32:53:da:68:48:
10:8c:7b:13:32:87:77:f1:0f:63:27:ef:7f:3b:8e:
eb:28:6f:9c:f3:f4:54:12:b0:f7:c4:3f:30:40:7b:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:C1:27:00:0D:39:68:A5:25:D0:D7:43:D9:0F:B2:6C:8A:FC:18
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e3:3c:be:6a:7f:dd:dc:33:c6:28:fe:ce:a1:28:16:c9:81:
1c:0d:e0:9f:2b:d0:8c:3f:a9:26:db:f5:9a:aa:a8:d5:b8:14:
67:37:4a:94:02:59:12:73:28:54:14:16:00:13:4f:97:ae:ff:
95:10:a8:fb:76:5a:b3:54:6e:dd:83:77:3b:52:93:cc:9a:46:
fa:a5:34:e4:42:4f:9e:f8:1a:bb:67:c0:3e:32:de:71:ef:31:
c6:f3:e4:a9:51:5a:6c:56:ce:6d:d6:99:04:b2:32:2e:19:ed:
d8:46:30:25:cb:99:96:5b:8e:51:80:4e:b2:ec:27:b4:c4:8f:
62:48:3b:6b:07:51:20:24:3e:2d:50:40:ef:bc:63:72:e2:d7:
31:38:f2:63:e2:a3:aa:21:cc:1e:5a:1f:63:10:65:f4:5f:bb:
d7:98:ec:76:5d:6b:23:9f:f0:86:e3:48:f7:79:bc:a4:f5:e1:
37:fb:86:ba:53:0d:2d:ac:c7:8c:ba:2c:19:58:08:31:82:21:
22:6e:91:ea:f3:a1:f7:4b:54:f6:75:83:cf:5c:a0:d6:d6:84:
64:6d:5b:be:52:8b:f4:60:a5:98:27:87:3e:11:f2:5b:5e:28:
63:ac:1b:f3:49:51:b9:e9:13:39:4d:c8:9d:93:fe:17:6a:7d:
88:e0:26:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:46 2026 by rpki-client