Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File: QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier: itEFG50Hocyz3t53HASYZGzW5wPBQHQmAnr5OGDrpFo=
Subject key identifier: 23:F8:88:2D:6E:D4:32:44:C9:4F:06:3F:A1:4B:EA:C7:2C:12:56:C7
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial: 019D9A749708E9D5C1BB2573B4334DD7D6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number: 0C66
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: 2f-P4fDHiKWUADrK-tktjHqGw6s.roa (hash: zVsJo2j3kxjfhqS1ysVureSptf/JpUq/fXy1LYaHfRY=)
2: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: BnKMJMXWJpPGA6AC6HxMh2osJfqQgJIt8CrF0Xz0oKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:97:08:e9:d5:c1:bb:25:73:b4:33:4d:d7:d6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=23f8882d6ed43244c94f063fa14beac72c1256c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:6e:72:ea:e7:80:2c:9e:74:ae:a5:12:9b:
90:f8:0b:0d:ac:a0:b8:27:12:5f:a4:cc:97:ba:ba:
5f:d3:75:41:5d:b9:8d:8c:13:a1:f3:a8:96:0f:02:
46:ef:78:9c:21:59:72:d5:21:52:ec:2d:d6:f5:83:
c9:4e:c0:df:08:bc:ee:6b:5c:38:c3:31:91:d1:8f:
3f:67:ea:b6:16:92:2b:a2:d1:98:81:fd:25:49:7d:
32:23:92:3e:38:67:1e:1f:ba:bc:0a:56:33:34:23:
61:bb:d1:79:3d:74:fb:06:0a:f6:54:af:c1:fd:07:
5e:e5:68:20:e3:ca:d1:2e:06:e3:3a:0d:06:07:b8:
9b:f6:a7:b0:7b:23:7d:43:da:ac:2b:33:23:69:f7:
a8:9f:96:69:45:2d:dd:66:e8:60:b9:b5:3e:8e:0e:
51:ad:48:6a:8a:01:76:65:bc:1e:40:50:d7:90:3d:
bf:30:5e:3b:4c:48:82:71:7b:07:8c:e8:83:6a:fb:
b3:c6:96:7b:6e:73:b4:6a:ab:fa:ce:cf:cb:f1:33:
20:4a:d1:53:01:b0:24:4e:ab:d7:06:eb:e5:d8:20:
09:85:c4:5c:29:2c:2d:1a:0d:85:08:53:08:d6:6a:
dd:6d:03:68:6d:d2:9a:5a:d3:3c:4c:ba:b1:77:e2:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F8:88:2D:6E:D4:32:44:C9:4F:06:3F:A1:4B:EA:C7:2C:12:56:C7
X509v3 Authority Key Identifier:
keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:70:6c:cc:3b:34:35:b2:35:38:fa:fd:46:fd:1a:c7:12:7f:
b8:2c:b6:c7:f2:55:36:9a:1d:1f:64:57:a0:d7:dc:ff:4b:e8:
5b:14:62:7d:74:63:91:1b:20:ab:4e:2b:2a:d3:d4:5d:03:41:
99:f2:dd:08:65:d2:eb:4c:e8:8e:27:64:84:7c:7b:31:8f:64:
43:10:b0:a7:c1:6d:7c:ad:7c:90:73:c7:0a:03:cd:44:db:fa:
3a:1f:05:b9:0d:44:cf:31:d4:f3:9c:c5:44:cf:70:a5:76:bc:
64:eb:2d:35:33:4f:c9:c6:c6:2e:35:bf:27:9a:10:1e:3d:82:
5c:3b:20:ac:33:a3:a0:9a:9b:16:cd:1c:aa:0f:81:2f:71:9d:
52:35:bc:d0:5e:b5:c5:15:fc:9d:cf:f6:bb:9f:c9:46:aa:f8:
ee:16:ab:6c:5c:46:f6:de:32:08:ea:3f:a0:67:6a:95:65:63:
d7:d4:b5:34:19:d4:ed:b9:7c:82:be:0d:58:1c:59:67:72:22:
84:d1:be:98:44:fd:2f:02:31:10:3a:87:bd:12:f3:40:45:26:
dd:9c:16:8e:72:76:ac:7f:9f:89:76:b5:71:22:ef:f7:11:3a:
c0:d4:fe:0e:60:6c:4c:63:b2:2c:ce:80:55:e0:90:17:74:b9:
7c:39:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:58 2026 by rpki-client