Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: 1I5WtLN1/Sih2lcXxu4Xg6OL+3MTjAUO57MqMo2FbSY=
Subject key identifier: F5:6E:46:F5:47:D6:52:10:E0:82:AD:5A:C2:3F:BB:6C:5C:A5:9E:2B
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 019CABA1FFA50D81765E12B244E04EC60D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 0E64
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: xsaKDBONAr7UqEY9xFZwODsKvxnfnC0hXDSYsyzeb1M=)
2: yaEEybz2NfCWEApyu2Dzx2yLpcI.roa (hash: j2pzI49xHsyv/Ol3MBefWz6almNV2xHEmt1n4qjR/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ff:a5:0d:81:76:5e:12:b2:44:e0:4e:c6:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=f56e46f547d65210e082ad5ac23fbb6c5ca59e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:8a:e8:c1:1f:8c:ba:16:1b:32:9b:08:af:
4c:51:20:06:1a:a8:a8:cc:4a:ec:66:e9:4c:d7:8e:
fd:2e:8e:a6:ab:42:dd:3f:1d:24:e2:88:e4:73:c7:
44:b9:c3:75:8e:51:3c:fa:e9:9f:81:1f:54:16:b4:
d3:ff:5c:4e:38:38:12:fc:51:0d:8b:39:0d:98:75:
82:f0:b3:de:8f:c5:54:ac:06:b5:ef:05:ef:b3:0f:
02:a6:6a:7a:be:00:60:9c:c9:88:7a:88:45:93:18:
bb:e7:74:7a:89:94:ef:f1:7d:8d:a6:3d:9a:69:40:
bc:95:30:d5:39:a7:29:c7:8f:7a:d6:3c:83:e1:54:
42:4c:87:7f:b1:f1:57:f9:62:5e:91:6e:3f:72:86:
03:0b:6d:fb:b0:4a:ee:6f:c7:99:3c:36:88:75:ab:
fd:0e:22:54:72:a7:61:ee:a8:04:48:2e:6b:c2:3d:
a4:6b:0d:5d:98:50:3f:fa:ae:47:1a:35:a0:6c:84:
6b:12:ac:b7:b0:dc:c7:ca:c1:1a:00:0d:57:d4:69:
92:84:b9:7d:b7:3b:0f:33:c6:5a:9e:32:61:d4:84:
5c:5c:bc:98:3c:ec:37:9e:cf:e0:d9:ef:09:8f:93:
5d:70:43:09:35:76:10:7a:95:0e:c1:16:7b:d1:c3:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:46:F5:47:D6:52:10:E0:82:AD:5A:C2:3F:BB:6C:5C:A5:9E:2B
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0a:b4:01:c4:22:cd:80:b8:a8:41:7c:21:44:ae:8a:fd:21:
e5:fe:37:82:97:ad:0b:53:44:9d:f2:6e:47:66:6e:1c:a2:9c:
a0:79:35:86:48:2a:d8:ac:cb:86:2a:4c:79:5e:a9:18:7f:cc:
cd:8d:78:08:0f:f7:98:22:80:a0:10:7d:8e:af:6a:91:7d:c4:
7b:7a:5b:70:d9:78:a0:39:b7:c0:0a:27:7d:9d:bf:d9:e9:54:
7e:44:91:27:8c:cf:9d:8c:86:c1:43:22:62:c1:35:02:02:30:
5f:29:c1:fd:31:ac:df:77:40:61:5d:32:2a:27:65:d0:70:73:
7c:c8:99:c2:5e:c3:7f:98:00:b9:96:64:49:5b:ec:0e:3a:93:
3b:20:8c:cc:cf:52:8d:81:b4:72:92:37:fc:62:06:11:12:d3:
e1:fe:08:e9:a4:45:56:3d:32:3d:dc:d0:c2:35:e3:07:1a:f5:
96:bc:30:7a:00:ea:a3:a4:2a:ef:35:db:0a:5f:40:0f:aa:3b:
9e:31:11:a0:60:78:3d:63:2e:6f:25:a5:34:ba:50:fc:97:de:
8e:d1:de:80:38:9e:34:f0:fb:91:7f:58:e0:99:96:89:d0:b5:
0c:0c:26:f2:29:f9:be:41:37:01:0b:81:96:d0:a3:aa:48:7f:
2b:01:14:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:06 2026 by rpki-client