Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: Y70BvLskI8t5tDK80HJ5mRF8VDjN9cuoYAJFpGuzZjo=
Subject key identifier: B3:2C:1F:15:FE:49:09:59:A0:B2:C7:32:39:0B:91:B6:F4:C9:A4:83
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 019CAA8F63B6FF287D38BDBF208EF150DA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:00:49 +0000
Manifest this update: Sun 01 Mar 2026 18:00:49 +0000
Manifest next update: Mon 02 Mar 2026 18:00:49 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: TSyZQbowiu1302UwynTnylvFRuLWMyKQNfp4P7C2xGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:63:b6:ff:28:7d:38:bd:bf:20:8e:f1:50:da:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Mar 1 18:00:49 2026 GMT
Not After : Mar 2 18:00:49 2026 GMT
Subject: CN=b32c1f15fe490959a0b2c732390b91b6f4c9a483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:89:89:29:d1:4b:54:8b:d4:0c:eb:37:d4:
13:66:9a:76:8d:37:21:76:7a:b7:26:ea:fe:2a:a8:
5c:a0:74:f1:c6:d5:fa:e6:17:7b:63:c8:77:1f:1c:
6b:63:97:f5:a7:3d:61:c5:4a:25:7f:40:bb:da:56:
ee:90:19:25:d3:d9:30:b0:f1:06:13:81:f0:14:64:
cf:67:8e:3f:27:ed:48:8f:ef:6c:21:94:9e:33:6c:
db:0f:66:c9:b2:ec:ca:5e:6c:5f:bb:52:cb:23:fa:
aa:24:19:88:bd:16:b2:04:cb:14:81:25:7f:bc:99:
2a:bd:99:04:f1:23:78:e3:ae:b2:16:69:40:9a:bd:
7b:0d:04:46:30:b5:25:7e:a3:88:d1:00:91:ec:60:
f4:e7:74:d5:0d:dc:0b:e2:33:14:37:8e:3e:e6:cb:
74:7a:f2:94:70:36:a9:71:6a:51:b0:cd:79:e7:07:
f0:ea:49:70:e0:a7:60:39:0e:5e:ef:85:44:80:ca:
19:c1:e6:dc:62:a3:5e:ea:44:bf:00:a4:03:c4:2b:
60:b8:da:d3:68:e6:f6:f4:87:c6:12:86:9f:19:62:
6c:ca:dd:73:de:4f:59:b9:d4:f6:19:fd:e7:f4:52:
74:4d:75:0a:bb:0e:99:78:43:cb:a4:58:64:49:4e:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:1F:15:FE:49:09:59:A0:B2:C7:32:39:0B:91:B6:F4:C9:A4:83
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:19:b2:11:e0:5a:3f:70:ed:7f:29:2e:aa:61:1d:5e:b6:d5:
d2:75:18:2a:fd:56:fa:9c:79:87:0d:5a:df:cf:63:2e:bb:fd:
8a:29:57:cb:d0:55:99:ff:34:ad:4b:d9:f1:a1:6f:33:2f:61:
40:e2:38:75:07:20:21:51:d0:a8:fb:90:11:39:8a:3a:68:10:
dc:9c:ab:ec:d0:6a:82:d4:45:34:ab:d0:1a:e7:cd:b7:41:d2:
5f:f0:98:35:8b:4b:c7:e1:b2:8d:de:16:01:14:2b:4d:90:c6:
f1:ac:19:cd:7c:c3:f2:77:f0:cb:4a:86:70:2c:df:47:ce:fd:
b3:a7:f3:f0:55:a9:6f:c5:2b:df:68:57:c0:16:b0:63:d9:49:
84:d9:22:4a:17:96:a0:cd:c8:48:b1:ca:43:44:24:1d:01:6d:
f5:99:61:f9:72:cf:9b:56:04:a0:ce:f4:0d:b5:12:76:89:15:
6b:e1:58:27:46:7e:17:c8:b3:a2:b2:eb:b3:62:ab:33:95:70:
73:c2:73:96:6d:11:f4:a8:48:2b:56:66:ad:7e:14:18:8b:ea:
5d:34:36:e3:1f:ed:02:ec:cf:e6:2c:90:25:dd:0d:45:a8:1c:
34:79:f1:d5:ae:37:11:9a:d1:7e:4f:f2:90:62:51:e1:87:59:
9d:7a:e1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:16 2026 by rpki-client