Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: iJQHIHspHJr15PT9BnyLxeQpIkRiCUNHaNt6aTNvbIo=
Subject key identifier: 6E:00:A9:BC:91:FD:E1:A4:24:26:AC:9D:16:E8:34:CF:3F:F9:6C:10
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 019CAAC6F24AED982128141801BB9D00729F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 074B
Signing time: Sun 01 Mar 2026 19:01:30 +0000
Manifest this update: Sun 01 Mar 2026 19:01:30 +0000
Manifest next update: Mon 02 Mar 2026 19:01:30 +0000
Files and hashes: 1: 1-rBgyQgcZXkEd224n-2FZQ79R90.roa (hash: lXuaNOk5Bgob5HontELFPkVtHeAXizyQRbe4xoEKAQ8=)
2: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: xluAM+9ORE8VAQaOCNputw7pV2On8OIdIjrj5buw4Yw=)
3: XInE7IhwLiH6cAbeJDA47vC4HFw.roa (hash: yvUw4Yhj3EW/lyYnrpik/JIwVjQtM07vuuoIeWKjTz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f2:4a:ed:98:21:28:14:18:01:bb:9d:00:72:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Mar 1 19:01:30 2026 GMT
Not After : Mar 2 19:01:30 2026 GMT
Subject: CN=6e00a9bc91fde1a42426ac9d16e834cf3ff96c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:fb:f4:a7:5a:ec:17:fd:f7:42:c9:98:cf:
f8:41:2c:e9:db:a3:d9:1c:9a:99:5d:0a:48:bd:d9:
e3:da:61:8b:92:07:c1:a4:c5:ea:ad:ab:67:8c:fb:
fc:f8:ae:07:99:14:51:3e:33:d9:c2:fe:0c:e8:8f:
0c:b4:69:98:82:2e:dc:ec:c3:bf:cc:07:31:fe:23:
f7:41:0e:d9:50:8d:27:79:ee:c2:4e:ee:5b:0c:9d:
e4:53:a1:ac:10:ed:8f:68:1a:31:02:3c:a2:c0:a2:
6c:42:f6:12:fa:98:b9:b1:18:5e:fe:0b:bf:4d:1d:
0b:eb:6b:c2:11:95:1b:db:1a:ae:5b:c0:ee:64:26:
0d:30:cb:34:56:25:72:bc:12:ce:13:00:e9:73:24:
98:be:a2:38:55:b3:54:28:14:2d:41:a0:44:3d:35:
79:6e:03:a4:fd:9a:e4:a6:bc:dd:2a:9a:ac:58:36:
53:6b:73:4b:6d:22:8d:ef:d7:2f:b0:79:88:5e:5f:
aa:a3:26:41:11:6c:88:bb:d6:21:b4:77:72:0f:65:
05:ad:a4:4b:39:56:74:e3:3e:ed:18:dd:59:5e:19:
6e:34:a9:97:d5:61:a8:08:7b:8a:ba:35:a3:5e:7f:
b5:e0:7f:37:26:59:14:ec:54:e8:43:4e:e0:7a:79:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:A9:BC:91:FD:E1:A4:24:26:AC:9D:16:E8:34:CF:3F:F9:6C:10
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:04:ab:46:88:07:a4:82:eb:31:89:6f:66:ca:31:f2:9e:00:
49:bd:a7:75:57:19:eb:00:bc:13:b0:02:03:74:86:7b:48:d7:
67:a8:7a:de:a9:64:12:ed:1c:54:5d:67:56:2f:86:f3:25:7b:
92:c5:fe:f8:ed:3d:8d:2d:9e:98:84:50:c1:6c:19:0a:fc:d9:
47:0b:3a:53:2f:34:73:17:ed:5f:b9:f5:14:9d:a0:47:f8:cc:
7b:0e:30:61:dd:a1:4d:7c:1b:83:1d:de:4f:9d:8d:cb:04:0c:
73:d1:2d:a0:4b:27:52:5d:73:24:86:23:d2:de:d4:ef:6e:6e:
5f:4a:df:94:1c:45:7a:07:b5:a4:8b:e3:72:cb:2c:2f:56:66:
62:22:32:65:56:a3:16:cd:32:1f:5a:22:a1:78:dd:c1:34:c8:
ff:ff:ee:f4:50:1f:f5:96:0d:c3:39:e4:3b:d1:24:fd:97:20:
ba:75:91:6c:f5:34:9d:46:e6:88:9b:d4:ef:a2:f0:94:f8:51:
92:0a:9e:c1:ab:bf:c5:c1:7b:ab:8c:5c:a4:40:f9:d3:d8:73:
ae:4e:0f:f7:7d:b2:c8:56:9c:d0:be:7a:b8:c5:16:f4:54:a0:
d9:c7:b5:66:1c:3e:6a:80:47:32:43:9a:f5:04:09:ad:5b:c2:
2b:1d:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:07 2026 by rpki-client