Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: Q53zvbPolibzZWJlZJ99yGjV+JTS0aRmZZR9EIZGuL8=
Subject key identifier: 75:AE:5A:E2:BF:25:67:E8:66:D3:20:11:3F:E1:3A:7D:F1:E5:35:89
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 019CACEB6C898083A6A69F95EB36561EE68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 149B
Signing time: Mon 02 Mar 2026 05:00:35 +0000
Manifest this update: Mon 02 Mar 2026 05:00:35 +0000
Manifest next update: Tue 03 Mar 2026 05:00:35 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: y6T2QTUfSh+AymTSb0s0xtJlz3Bm37u/1MF+mrH+ZIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:6c:89:80:83:a6:a6:9f:95:eb:36:56:1e:e6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Mar 2 05:00:35 2026 GMT
Not After : Mar 3 05:00:35 2026 GMT
Subject: CN=75ae5ae2bf2567e866d320113fe13a7df1e53589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:b2:d6:dd:00:be:e4:aa:cb:cd:76:b2:34:
5e:de:06:2c:f6:6e:1e:97:e6:3b:f0:b8:af:60:27:
7c:df:ba:37:a5:fc:94:69:12:e0:0d:41:35:2b:ea:
27:46:6c:6c:ca:f1:e3:12:f2:9b:30:cc:c2:48:f7:
41:14:53:0a:10:33:21:69:c6:7c:52:02:20:fa:3e:
76:3b:69:82:f8:1f:df:10:64:81:14:35:e8:52:a1:
44:9f:e9:0e:e5:75:62:6e:4c:23:05:d6:c8:97:91:
70:30:65:39:89:8b:9b:9c:4b:21:0f:d7:4c:cf:10:
b1:43:f5:f6:96:8e:e6:e8:89:59:08:a4:d5:6b:32:
26:67:96:29:57:20:34:0b:36:25:74:7d:ef:e1:38:
c9:a8:66:4a:cd:3d:51:2c:08:4e:36:ec:a5:32:d9:
f0:16:5b:81:a1:71:10:f6:f6:f6:59:0f:a5:a7:37:
af:06:cf:be:be:e8:8f:29:70:43:d8:29:ae:72:96:
0f:9b:f8:3c:01:96:4f:46:58:61:3b:86:87:42:38:
92:69:51:d0:e5:8f:91:a9:70:b1:cd:b2:ce:db:1c:
bc:02:56:23:fe:52:15:fc:2d:33:20:71:0f:24:37:
34:79:92:20:f5:97:ef:bf:72:c4:5f:02:28:b0:45:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:5A:E2:BF:25:67:E8:66:D3:20:11:3F:E1:3A:7D:F1:E5:35:89
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2c:a8:10:48:96:08:44:dd:7c:fd:33:db:81:c6:ad:6a:21:
c7:f5:af:5c:0e:71:d4:14:2e:80:09:ad:b8:69:0e:ee:18:c4:
59:62:57:e9:f0:07:99:85:64:f4:5c:96:a3:eb:36:91:7f:a2:
59:14:1c:09:e2:8c:ae:12:79:28:24:ff:59:c3:1c:d2:e3:fa:
49:cd:cc:38:00:9f:3d:70:02:01:fc:ca:ac:8e:c6:11:70:50:
d5:37:73:e9:bd:2d:90:28:5e:35:da:e7:09:68:e7:14:c2:0d:
4e:61:2f:32:ef:c9:73:e1:a3:09:22:88:a5:44:77:89:55:58:
f0:0d:2e:71:53:2a:d7:6a:dd:89:eb:c0:27:3a:60:e0:38:56:
18:e5:13:c4:72:c5:8d:6d:cb:07:39:c4:d6:35:07:95:84:92:
04:e6:06:7c:a3:f0:e8:31:2e:b6:ef:c6:42:e3:3a:c5:20:20:
02:81:ed:ee:64:dc:16:25:10:ef:8a:c6:78:7f:9d:28:26:13:
9e:5b:fe:fd:ca:bb:f2:ca:88:5f:0e:70:c8:12:cc:ef:d7:0a:
51:68:95:09:e6:ad:ee:2d:0e:88:93:2c:b5:f0:6c:1b:01:8c:
54:fe:a4:59:4c:05:6f:cb:a4:57:8d:ba:b5:1a:09:33:d7:8e:
27:05:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:05 2026 by rpki-client