Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: jWlzeyOAth86t0HPjCpxtdcfrqCNu/LT6G2adyCw6AE=
Subject key identifier: C0:6D:74:E4:DA:78:FB:A3:8C:0C:81:81:AE:98:D0:72:E8:F5:0D:46
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019CABA1C4EB3A9CD18C4BF23EC9AC8343CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:31 +0000
Manifest this update: Sun 01 Mar 2026 23:00:31 +0000
Manifest next update: Mon 02 Mar 2026 23:00:31 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: DO9F5vrPN1+qRDDQAXyd1b2TLZJZZz11eN3CXUpmGbU=)
2: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
3: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c4:eb:3a:9c:d1:8c:4b:f2:3e:c9:ac:83:43:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Mar 1 23:00:31 2026 GMT
Not After : Mar 2 23:00:31 2026 GMT
Subject: CN=c06d74e4da78fba38c0c8181ae98d072e8f50d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:61:87:23:dc:6b:6f:d1:50:d1:5c:e2:6b:
0d:0a:20:4f:a3:ec:f8:45:94:ea:8d:bb:92:7c:c1:
2e:c1:26:17:d2:a8:b5:f4:45:01:f2:e2:41:92:95:
ab:6e:22:9f:93:7e:ea:8d:78:e0:db:e7:37:71:90:
0f:2f:db:87:d6:4c:be:bc:80:9c:1f:d7:cd:23:ee:
ea:d8:09:92:dd:26:e8:1f:ac:f1:b3:56:c7:73:be:
7c:2f:22:db:72:21:e8:b7:c1:de:eb:1d:6c:12:62:
08:44:13:06:56:2e:87:f5:58:b3:75:91:0b:9c:7d:
3d:95:02:5d:84:9d:99:4e:94:e7:bc:23:b9:f9:e4:
eb:26:4d:f6:ca:48:66:65:cf:e2:85:9a:f0:05:6a:
01:e1:7b:d5:a9:47:c5:aa:d1:46:48:62:9d:78:d8:
49:14:35:50:d6:50:c9:c1:f9:31:2d:be:6d:4c:fa:
56:88:be:51:23:28:33:f9:fb:49:d9:fd:1f:0e:95:
9b:50:10:c6:16:b0:63:ae:52:08:2e:ce:e6:cb:d9:
2a:d2:fc:12:fe:b0:47:e5:6b:7b:0f:3e:f5:53:d5:
02:b8:91:94:78:96:5a:1e:c6:3c:7f:e7:04:e0:4f:
7c:8a:f0:dc:e2:52:b5:3b:ab:3c:4d:0c:9d:c0:47:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:74:E4:DA:78:FB:A3:8C:0C:81:81:AE:98:D0:72:E8:F5:0D:46
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fb:51:0c:5e:d3:00:d9:ec:44:bb:58:72:72:ee:bb:b3:a6:
c5:a8:c4:29:66:9e:f1:54:ca:91:eb:8a:2a:2d:b2:5f:70:ac:
a3:40:5a:90:f6:94:e7:a7:b1:ff:b7:9b:f3:1e:11:1f:6b:24:
e5:d7:ac:5d:9b:ee:c7:4b:35:3d:4f:48:eb:30:3c:df:39:13:
c5:88:da:67:44:60:2e:b1:6f:f0:08:90:81:ce:1d:2b:3a:e7:
55:c8:f7:68:8c:4e:82:97:91:dc:89:23:4d:fe:27:c4:03:86:
c4:8c:d1:e9:60:09:45:f0:75:26:01:67:26:53:ff:c7:d0:16:
37:ff:48:3e:05:75:4c:7e:9f:75:c5:a8:ad:7c:fc:eb:3d:67:
df:6d:3a:12:eb:50:1e:08:e5:cf:26:9f:02:1d:8e:a3:fb:b5:
08:34:58:50:d6:e6:96:74:d6:4e:6a:0a:9a:af:24:ee:71:25:
96:84:a3:8d:79:71:44:e1:75:e6:99:55:41:cd:4a:ab:68:64:
58:74:29:4c:f2:37:d4:95:b3:94:a2:4c:a3:fe:2f:0f:56:c3:
fc:24:43:9c:bc:f1:74:19:8c:82:ed:3a:32:94:a2:4d:5a:0f:
5c:df:b9:95:35:60:a3:e8:09:79:35:7d:8b:ac:e2:87:e2:a0:
09:d5:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:34 2026 by rpki-client