Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: AIClxhdKvIBhAfuR0RVF8fQInjWxBb0IpW//LNUv+iM=
Subject key identifier: 03:8B:AF:DC:05:F6:4E:EB:0F:D7:3A:F9:46:A6:C7:82:A1:82:D8:7E
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 019DA41CC2CACFD770C3F8B55755FEEC9008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 151B
Signing time: Sun 19 Apr 2026 05:00:41 +0000
Manifest this update: Sun 19 Apr 2026 05:00:41 +0000
Manifest next update: Mon 20 Apr 2026 05:00:41 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: LSQjlY1lImFlFe0fvgni71hu9OAWBLwwM57MewHTh9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:c2:ca:cf:d7:70:c3:f8:b5:57:55:fe:ec:90:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Apr 19 05:00:41 2026 GMT
Not After : Apr 20 05:00:41 2026 GMT
Subject: CN=038bafdc05f64eeb0fd73af946a6c782a182d87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:c7:ff:d1:38:c8:dc:8d:3f:95:5a:88:31:
ce:05:13:a4:1f:0c:84:fe:d0:8e:0b:30:04:7f:bf:
1c:9f:9c:39:70:0c:ed:f3:c0:b0:8e:00:6d:8b:34:
f3:0d:d1:d2:eb:04:1d:3b:69:90:8c:88:58:20:c7:
f7:c3:30:ff:46:63:40:b2:3a:f2:49:d3:ed:e2:d7:
e0:93:01:c7:da:3a:d4:28:33:e4:22:92:9f:f6:0d:
66:d9:72:97:44:4f:20:0a:18:c4:71:8c:69:19:b2:
bf:06:cb:08:a2:d8:32:7d:a3:ba:b2:08:a6:99:f2:
40:d0:12:c4:f3:fb:68:5c:98:3c:70:28:39:2b:73:
75:67:f8:fc:af:d3:5f:cb:2e:b2:f5:be:15:bf:3b:
58:2f:2d:8c:bc:27:16:b2:45:e7:96:44:f6:05:be:
d0:b0:2a:a7:06:4d:a0:e7:ab:9d:e3:65:5c:b4:d2:
d4:1b:95:bd:69:d1:9f:d8:c2:ab:13:ff:e4:61:3c:
6f:c5:31:2c:73:7c:5e:6c:43:c3:5f:09:c5:50:42:
4f:11:11:20:65:0e:c3:4f:80:af:28:9c:94:18:17:
81:3d:e1:5a:8c:d4:98:a5:e1:79:1a:2c:40:bc:22:
48:2b:b0:a7:e9:72:15:77:43:fa:32:72:9d:d8:e4:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:AF:DC:05:F6:4E:EB:0F:D7:3A:F9:46:A6:C7:82:A1:82:D8:7E
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:74:d1:b5:82:06:85:1c:1c:25:08:ab:e6:0e:e6:0a:ea:c1:
9a:0f:e1:69:9d:fe:0b:a9:11:2a:41:c3:6a:3b:8a:7e:76:aa:
e5:79:41:ff:32:31:d1:8b:ff:6b:7e:89:21:3d:7c:72:45:3e:
76:9a:3e:c0:00:8d:3e:f1:28:3e:9e:8b:3b:20:76:a3:4b:f7:
b5:d7:be:6e:4a:05:4a:01:b2:78:43:5e:1d:59:de:12:27:86:
84:ab:cb:0d:26:c7:dd:a0:c2:90:ff:d2:2c:61:05:0b:a3:09:
e3:54:66:66:ca:f9:2b:b6:81:0d:10:ee:58:3e:9c:da:85:75:
b0:10:6b:2a:2b:bf:60:06:aa:44:73:09:0f:53:26:6d:bb:a1:
72:50:73:cf:42:fd:aa:df:8f:3c:db:2e:5f:31:25:a5:0c:d3:
49:29:04:5b:a9:8f:b1:4d:fc:91:72:3a:5f:5a:4f:ce:ad:2e:
42:3f:8e:88:ef:45:2f:52:3c:26:10:96:9e:e1:c4:42:d1:16:
58:0c:5c:88:8c:e1:f1:12:ae:1a:76:f7:67:dc:c1:8a:8c:77:
18:49:93:31:16:05:19:48:2c:57:42:40:5a:68:9b:c2:b1:4d:
0b:6e:cf:c0:4b:6c:6e:b0:97:23:a2:8b:40:26:73:20:24:78:
ae:e1:24:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:14 2026 by rpki-client