Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: 1ae1JvZ8wHSaBobIquqNCptcHIOQj9Cd8QvSdU/vTGU=
Subject key identifier: 51:FF:EB:FF:DE:24:59:EA:C9:A5:51:03:B1:0E:61:0D:F6:0E:86:6C
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 019CAA5897A33ACBB26FE906D7CF2F123C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1495
Signing time: Sun 01 Mar 2026 17:00:58 +0000
Manifest this update: Sun 01 Mar 2026 17:00:58 +0000
Manifest next update: Mon 02 Mar 2026 17:00:58 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: Uz1Ukt8M6RxY/k9Sc5OiuRQ1/crvXSF2Sji8kAvYuzI=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:97:a3:3a:cb:b2:6f:e9:06:d7:cf:2f:12:3c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Mar 1 17:00:58 2026 GMT
Not After : Mar 2 17:00:58 2026 GMT
Subject: CN=51ffebffde2459eac9a55103b10e610df60e866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:eb:0b:4d:30:1b:92:9b:cf:60:36:c0:5e:
35:c9:a7:c5:fe:23:29:87:f3:8f:43:14:90:80:f8:
bf:11:5a:c7:3b:b6:04:b4:f1:32:9b:a4:e8:6a:55:
3c:47:6d:83:9b:62:52:75:5e:98:5d:f7:08:2e:8d:
9a:70:d5:2a:25:4e:59:1a:97:ad:b2:41:8b:f7:57:
0b:cd:fd:9b:0c:2d:ba:78:78:03:b4:95:af:88:14:
df:21:c7:1c:ce:1f:ba:08:84:b7:38:b9:27:d2:be:
9e:1c:85:7e:e9:ea:c6:37:44:6a:ac:a2:ad:2d:74:
6c:e9:f9:66:1f:f3:32:96:22:57:b8:f3:3c:82:c9:
8b:06:65:f8:ec:c2:9a:e1:c0:21:45:37:07:61:b4:
32:58:ff:ec:70:17:af:07:1e:d3:16:c7:21:75:9a:
e4:a4:a1:fd:e4:5f:55:09:a4:4e:e9:81:8a:bf:04:
be:a8:04:dd:0c:ad:40:df:7d:94:b8:f7:e1:5c:19:
c0:88:2a:7e:99:a8:dc:8c:0b:69:6b:6d:de:00:02:
95:99:20:19:c7:d3:98:79:b8:00:89:ce:d9:b2:ed:
0c:70:73:b5:7d:a4:35:bf:92:12:62:71:c1:99:64:
4e:10:a2:4e:eb:09:96:3e:ec:09:ea:55:a4:a5:dd:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:EB:FF:DE:24:59:EA:C9:A5:51:03:B1:0E:61:0D:F6:0E:86:6C
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:17:b9:d3:30:9f:1b:20:15:ab:f4:03:1f:f1:4f:2e:2c:47:
0f:64:8c:f8:da:9b:62:95:01:dd:d0:30:89:21:8c:cc:05:9a:
ac:37:5d:35:6c:e6:eb:50:5d:86:86:cf:cd:d5:a7:f5:94:db:
2e:87:a0:06:53:3d:8d:d3:93:b0:35:85:d8:7a:cb:da:94:ba:
c6:0e:07:b0:9e:c1:65:cb:12:76:f6:71:4e:80:5c:b8:cb:07:
ff:71:05:45:24:06:7a:0b:ef:fd:ed:5e:6f:53:31:80:44:74:
85:a7:8f:f9:d2:f0:f2:b2:b3:b2:eb:3a:aa:80:98:47:46:29:
b8:09:1b:85:cf:e7:60:fa:0a:a8:bc:89:0f:53:7e:84:f0:05:
74:10:b9:cf:e9:84:df:04:64:7d:60:50:9b:09:ce:b9:89:b9:
17:15:8b:99:6d:0d:0c:a0:1f:3e:8f:da:b2:b3:e0:5f:6a:20:
c9:ed:97:ed:00:b0:b3:6a:1e:87:7d:c1:95:bd:fc:ed:2e:30:
6d:4e:fd:f7:d5:30:8b:27:1d:27:00:1c:fe:b4:28:14:29:ac:
2e:da:55:fa:04:49:cc:e5:1b:48:b1:3b:41:a7:fb:2b:12:6c:
35:28:77:ba:27:e0:12:e3:5d:2a:39:fa:54:ca:e8:a3:e2:2d:
d5:38:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:23:08 2026 by rpki-client