Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
File: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json)
Hash identifier: oRxxFgiWg3AjxFKwLt/azc7dRO/stNIVrLKxTrMeznk=
Subject key identifier: 4D:38:83:72:E1:26:BB:26:5F:8C:D7:6B:A1:6A:64:B8:8B:02:F6:07
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial: 019CAA8FEA21AC67B7F52377FBA688214232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
Manifest number: 0BDE
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: Ejqobf9ZGtWTRGZiSvfn9VNx1JDMp17JlUq5o8ZObxE=)
2: qY7Sk0rUw6xSZ-1HP9kbgPfOPbo.roa (hash: J+fyJwGEO1szX1qe5b1pPbWaNW8W/mP2Me/+6swBagg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ea:21:ac:67:b7:f5:23:77:fb:a6:88:21:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=4d388372e126bb265f8cd76ba16a64b88b02f607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:5f:fb:f7:d4:76:0b:af:fa:97:1b:48:9e:
42:2b:a3:da:7e:dd:46:ac:a6:e7:0e:48:ab:44:85:
0d:ee:4e:73:13:ed:a0:c9:28:f9:e1:cc:83:3e:92:
58:84:0f:4c:ee:7e:eb:ac:b0:e4:e8:97:c6:d4:20:
17:99:7e:de:16:c0:a5:39:99:65:3a:cc:01:35:9e:
fe:3d:2a:0c:4f:4e:4f:10:2d:8b:d6:c6:fd:41:1e:
70:d3:be:42:bb:7c:6d:b1:91:92:78:15:2f:7a:a5:
0e:3d:38:61:be:24:17:cf:d7:50:d1:df:d9:d5:5c:
fa:e2:8a:80:3b:e7:4a:29:dc:1f:2f:2f:80:28:97:
3c:45:fc:83:63:d4:e1:a6:8e:5b:ac:1f:df:84:73:
10:96:7b:30:51:af:c8:f0:54:ae:f6:b4:6e:fa:52:
bc:57:ba:20:b8:83:3a:41:ff:a6:5f:04:be:e4:a3:
2f:97:3a:63:79:c1:1b:04:8a:d9:86:9b:ad:88:04:
b1:e0:d7:2b:5a:5d:28:dd:f5:41:67:bc:18:fb:8a:
0f:1d:17:bf:a3:7f:32:34:cd:03:79:9e:1b:0f:8b:
22:a6:7a:70:2f:65:02:34:e1:c0:ed:01:ba:f0:0b:
68:77:8f:1b:93:34:80:85:04:9a:36:0a:f9:8c:25:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:38:83:72:E1:26:BB:26:5F:8C:D7:6B:A1:6A:64:B8:8B:02:F6:07
X509v3 Authority Key Identifier:
keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:61:68:8d:4d:ad:02:6b:2a:f0:c3:88:99:4e:78:ec:aa:84:
bd:69:d7:3f:57:11:84:1f:fc:7f:03:1b:5f:8b:8c:0e:c8:23:
37:37:b9:11:70:11:c5:ff:71:be:bb:80:da:fd:16:c1:50:cd:
56:70:9c:75:8d:01:51:9e:94:e9:a8:c7:a0:0f:0d:a5:3f:44:
1a:c5:e6:d7:9d:5b:34:f8:15:69:21:c9:ea:53:81:d0:8e:07:
fc:d8:7f:8a:cb:7d:20:3a:3c:59:7c:44:17:3e:12:c7:06:ab:
60:09:17:4a:73:2c:c0:f5:58:b8:9e:ae:94:12:6b:96:63:19:
8b:ec:25:87:87:b6:98:ec:c8:28:ab:e8:7b:72:c2:5f:2a:f0:
2c:32:e6:29:d8:d3:c8:f7:03:48:7c:97:c2:ba:aa:ce:b5:72:
fc:b0:c9:1c:01:db:a7:54:ea:6e:58:53:3b:7c:f1:1c:8b:3a:
57:a6:11:4f:38:cb:b3:e0:26:8f:23:d1:d7:b9:36:e8:a5:b1:
c0:d9:8d:27:14:d6:76:1b:34:e0:f1:4e:2a:c7:76:15:88:b9:
64:de:40:4a:0a:95:53:d0:4e:d3:c4:9f:b0:dd:32:8e:fe:e8:
4d:ef:5c:01:2c:4a:7c:50:6a:30:26:43:c7:4e:9e:ba:32:eb:
c3:ac:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:27 2026 by rpki-client