Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: 5TUEqqsIXqvpGU7hHsrd3zB6Dbm5xScxNj75WqxeVXM=
Subject key identifier: 58:47:0A:EF:83:A4:C3:EC:66:72:3D:2C:B1:88:D1:20:97:DB:5F:17
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 019CAD9079A7707BE3EF7873364B97FD1D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0F85
Signing time: Mon 02 Mar 2026 08:00:52 +0000
Manifest this update: Mon 02 Mar 2026 08:00:52 +0000
Manifest next update: Tue 03 Mar 2026 08:00:52 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: dMdCkbhWl6oU91HvZOl6JpAjRAjXOu6qsmjw9cGRQJs=)
2: gJFWXPA_JHXzvOKJ3yPP-FpXrIU.roa (hash: UejuYxPlvqYqOEh9OQ46XPeNSYssNDcfHiTgcJb7toI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:79:a7:70:7b:e3:ef:78:73:36:4b:97:fd:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Mar 2 08:00:52 2026 GMT
Not After : Mar 3 08:00:52 2026 GMT
Subject: CN=58470aef83a4c3ec66723d2cb188d12097db5f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:31:e4:ce:cc:1b:a0:21:22:60:41:9e:8f:
ce:db:50:b2:a2:51:bc:59:c5:05:b3:13:8d:91:fb:
82:c9:0f:b0:b6:cb:5a:a2:7f:ce:c5:e7:9d:3b:88:
79:0e:cb:7a:b7:93:df:61:69:61:c9:fe:62:6b:52:
ff:e7:93:92:fe:ee:78:0e:22:7a:32:c1:23:c2:99:
3d:7d:c6:2c:8a:04:04:e1:2e:97:a6:44:a3:b0:cc:
72:a4:0d:0a:3a:5c:16:fd:5b:7f:97:b6:da:78:d1:
b2:a9:c4:1f:58:1b:3b:18:6b:ea:d7:c1:c0:94:d4:
2f:9c:53:2b:b9:1c:66:ef:ae:43:f8:fd:6b:00:5a:
2d:e4:8a:43:5b:89:36:a8:69:f8:ea:0f:b4:05:30:
e4:83:1f:a6:cd:4d:13:0f:47:11:1a:f9:bc:b0:5c:
69:ed:ea:fe:56:f0:e0:8c:08:0d:e0:f4:60:68:df:
f5:55:74:1c:f9:86:3b:37:90:d0:50:3d:a0:36:b9:
9e:2d:4d:13:3c:e4:89:cf:48:fa:98:20:ff:75:36:
ec:bd:cd:14:fc:0b:f2:fc:7e:cb:70:d9:9a:96:1e:
93:46:1b:38:14:26:1b:d3:e6:a6:34:3d:81:73:01:
82:7b:98:4b:ad:7f:26:a2:38:5e:e3:9a:cb:f6:6b:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:0A:EF:83:A4:C3:EC:66:72:3D:2C:B1:88:D1:20:97:DB:5F:17
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:61:2b:30:ff:00:ad:ec:98:11:9d:40:8d:ea:a0:67:5c:b7:
e0:c7:d6:b9:78:8e:ac:ce:d0:a9:b2:15:e6:23:ce:b4:b0:46:
ce:a2:c7:68:67:97:d5:de:16:34:eb:ff:c5:5c:69:39:2b:61:
6f:7c:ea:d1:54:ce:da:93:c8:ba:22:68:ab:3d:c0:14:18:0e:
45:88:2e:fe:21:67:85:f6:87:d6:31:f8:4f:89:f7:48:ea:b3:
83:65:05:a3:4d:82:34:83:f9:87:40:b5:32:a5:1a:88:1f:a9:
12:ae:01:41:85:b4:55:e5:c1:69:7b:f8:9b:74:c7:2e:54:96:
a0:89:b7:90:94:93:45:29:08:9f:f6:2c:2a:7d:a7:c7:f7:98:
b5:fc:6f:e2:9d:a6:db:49:07:06:bb:b1:b9:99:0d:3f:9b:71:
b3:da:4c:e0:d2:b3:ae:b5:02:ba:66:00:49:97:d4:6f:78:75:
a4:b9:b1:cb:b7:cd:ea:82:ff:95:a5:e7:70:8f:c1:d9:59:3b:
c8:72:99:ce:96:17:bd:93:23:12:92:46:f4:28:3c:85:63:3f:
d8:17:32:99:8a:8d:c2:3d:ef:35:52:69:fb:b4:f1:39:1d:ba:
0e:e8:0e:a5:13:f1:4b:8f:0c:64:6c:aa:da:89:11:bb:35:bf:
ef:10:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:53 2026 by rpki-client