Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File: QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier: oFqQDFL2bIrkgWqhY5/5sPhAAYZOw2zplJJDI41fWPQ=
Subject key identifier: A2:2E:43:16:ED:74:E1:79:1C:24:A0:3B:B5:07:8C:D8:4A:F5:F1:12
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial: 019CAAFCF4B6A03606C0F8EB1A788D3B68CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number: 0BEA
Signing time: Sun 01 Mar 2026 20:00:30 +0000
Manifest this update: Sun 01 Mar 2026 20:00:30 +0000
Manifest next update: Mon 02 Mar 2026 20:00:30 +0000
Files and hashes: 1: 2f-P4fDHiKWUADrK-tktjHqGw6s.roa (hash: zVsJo2j3kxjfhqS1ysVureSptf/JpUq/fXy1LYaHfRY=)
2: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: X9B+RHgalTgS35ocH0W2gveWml/NFysaKluQf0/ezzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f4:b6:a0:36:06:c0:f8:eb:1a:78:8d:3b:68:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Validity
Not Before: Mar 1 20:00:30 2026 GMT
Not After : Mar 2 20:00:30 2026 GMT
Subject: CN=a22e4316ed74e1791c24a03bb5078cd84af5f112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:62:ce:36:7f:6a:12:65:3b:0d:aa:49:02:
a8:f3:91:02:bd:d9:28:39:ef:49:3c:fc:17:6f:b6:
e2:54:2b:df:53:67:45:d8:cc:c6:68:90:e5:e8:fb:
26:3e:1b:e1:a7:fa:3d:a6:f4:41:fe:cd:14:f3:ea:
eb:70:ec:fc:21:b5:9a:35:44:a7:9d:95:84:34:cb:
00:1d:7f:ac:d4:ae:a7:8a:a9:8d:ac:92:8c:33:b6:
84:81:c4:81:9f:02:e2:85:b1:c0:fc:1b:42:09:68:
65:9b:a3:b5:af:b6:53:c8:23:6c:97:37:28:51:59:
45:ba:a3:f5:c3:fc:24:12:05:7d:8f:e1:d6:13:06:
d4:e6:03:84:2e:f9:dc:9e:6f:e9:aa:e9:fc:70:06:
d5:07:f2:07:e1:cf:6e:6a:85:0a:95:fb:71:a2:d1:
cc:60:a4:5e:bb:eb:eb:0a:61:b8:81:48:3f:cb:93:
21:c2:89:0c:ce:03:8a:69:30:ff:a5:75:1d:d5:41:
b8:1c:87:a3:9f:21:dd:69:11:17:76:ae:38:6a:66:
15:f5:1b:43:66:88:dc:53:d4:08:4f:5f:f3:e7:2a:
16:ab:fa:5a:84:2e:41:7d:4d:2d:e7:f1:7f:96:58:
7a:be:8d:be:3d:62:4c:29:60:29:3c:82:7d:35:a9:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:43:16:ED:74:E1:79:1C:24:A0:3B:B5:07:8C:D8:4A:F5:F1:12
X509v3 Authority Key Identifier:
keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:48:bd:23:e9:31:07:58:c3:a2:b0:06:1f:85:b1:95:7f:b5:
ac:89:db:d5:81:f4:65:e6:db:f7:9c:6b:4f:57:d5:e6:95:07:
5b:66:79:66:55:70:e4:78:44:42:f6:a3:3c:ab:ef:9b:50:44:
18:39:58:da:c1:2b:0f:23:82:bf:a9:97:7a:21:ad:0d:e6:ec:
19:73:21:af:72:98:43:02:f0:ea:11:4c:18:b5:13:07:69:3e:
fd:da:e0:55:e1:29:55:e4:8a:a8:69:73:98:84:02:56:57:9f:
69:ee:7b:a4:0f:43:04:80:2a:c2:11:0f:d2:80:67:36:a4:a5:
9c:d9:e5:de:14:5b:65:d7:0c:ac:a9:f1:dc:cd:15:c6:a9:be:
97:3f:9c:3a:e6:6a:e5:0c:1d:ef:83:60:fc:23:f4:2b:eb:2c:
17:9c:7c:af:09:6c:03:99:be:4c:93:d2:78:ba:76:55:82:35:
5d:6e:07:3a:d8:10:ba:ea:5f:3f:ba:64:f7:e8:af:1f:87:b2:
45:de:45:58:59:45:b9:3a:b8:43:b1:e9:fa:10:52:3d:0a:8c:
32:01:54:bd:12:84:b6:b6:05:1d:b0:98:e9:a1:8c:51:53:da:
23:36:ed:18:3f:9b:1b:1c:39:b3:ba:9e:75:8c:06:f1:22:0d:
44:d4:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:21 2026 by rpki-client