Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: RjWFgkOHsaTd/KzB9AgdQ1DtLl7IaMoEF1s1fIS17AI=
Subject key identifier: 8D:72:C4:51:33:41:FC:AE:FD:2A:EE:FD:ED:AA:29:35:CE:F1:C5:5A
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019CAA21CE94B7E30200FD14EB385A28342B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 1854
Signing time: Sun 01 Mar 2026 16:01:08 +0000
Manifest this update: Sun 01 Mar 2026 16:01:08 +0000
Manifest next update: Mon 02 Mar 2026 16:01:08 +0000
Files and hashes: 1: JQ-BG16GBmiKTRtWlx0jbggGDzY.roa (hash: Rybx78lS/tFD5mooAKxD5CnTfaalNbrJsTnAOJa1SbI=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: b5/0U7isrm03adeVGb/Suyw41SPD/o0YmudeXuXcT9Y=)
3: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ce:94:b7:e3:02:00:fd:14:eb:38:5a:28:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Mar 1 16:01:08 2026 GMT
Not After : Mar 2 16:01:08 2026 GMT
Subject: CN=8d72c4513341fcaefd2aeefdedaa2935cef1c55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:10:40:e7:44:b9:af:ff:8e:e3:32:83:7a:
be:07:f4:24:9a:27:37:2c:4d:f5:3b:e9:0f:35:bb:
d5:b7:2a:cb:61:00:80:cf:3e:04:e4:90:ee:0d:5d:
dd:fc:8e:b7:2b:92:4d:6b:24:7d:ca:30:83:42:9d:
bf:14:01:dd:4f:45:e7:45:e0:60:a7:26:80:e1:db:
97:a0:0c:e8:fb:7d:e2:25:ef:b4:35:7f:bd:5e:b1:
14:96:a0:53:07:39:4c:69:37:8b:00:a6:0e:41:b9:
19:81:ca:23:9e:6b:ee:87:b5:f7:f4:22:7c:ff:ea:
e5:72:52:c6:57:59:25:0a:f8:0d:4c:79:be:04:f9:
dc:f5:7f:f2:d8:ce:cc:c8:a8:21:ea:e9:5c:b3:3a:
74:55:5d:58:2a:ae:a3:21:98:91:95:f7:18:eb:73:
fa:e6:bb:22:f1:08:11:22:03:84:c5:a0:ec:0b:79:
ab:de:c0:38:d8:42:29:d3:8c:64:4c:9b:81:56:37:
e5:3f:d3:f7:94:bf:f3:7e:36:6e:c2:c1:e8:de:0e:
22:85:3b:be:5c:4d:bd:70:d8:da:d0:d9:01:bf:3c:
f8:02:10:54:ac:17:2e:99:25:ee:c1:26:33:8a:dc:
00:97:9b:d3:4e:09:71:44:03:73:2a:9b:43:75:11:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:C4:51:33:41:FC:AE:FD:2A:EE:FD:ED:AA:29:35:CE:F1:C5:5A
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7c:f4:80:65:f7:4f:ad:51:64:57:a0:04:95:8b:34:67:18:
7d:ec:a5:2d:d3:1f:18:73:33:86:a9:1d:c1:cb:39:0a:31:3f:
42:af:b7:2b:59:f8:2d:0f:e9:e4:21:0e:24:62:b8:65:49:c2:
3f:e9:0e:bd:4c:82:2b:a6:37:f0:dd:eb:9d:15:30:06:5f:d4:
2c:65:4f:57:4d:53:fa:89:96:9b:b1:67:29:2a:10:dd:c7:27:
63:a4:bf:0a:bd:45:a9:00:0e:4f:66:4d:97:3f:e9:72:33:81:
60:b7:c1:8d:3e:4f:61:30:c5:c6:0a:70:28:15:00:aa:70:be:
54:f2:35:98:6e:25:bb:86:b3:a4:ef:93:76:95:7b:d5:7e:5c:
ae:4e:2f:5c:fb:3c:d0:bc:96:4c:85:cd:a8:81:0f:b4:12:fc:
dd:cd:a8:20:c1:47:5d:21:ab:53:47:b8:d1:29:d8:80:4f:ea:
60:47:51:a8:ef:5d:09:16:dd:6d:31:b5:ea:f9:19:83:90:7c:
78:8c:f8:3e:bc:ec:5b:eb:54:01:cd:fd:36:50:06:9d:33:20:
a3:79:d2:3b:51:d1:4b:7a:e2:b7:81:b8:1b:08:86:cf:23:ac:
f4:51:34:ac:3e:ce:61:a5:48:b1:82:07:92:75:5b:10:cf:21:
22:c6:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:54 2026 by rpki-client