Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: Is3V9xTT+0eY2fobdv0jl8hKKUh3Ds+HpyjwbZiWtDA=
Subject key identifier: CF:26:77:75:CD:DE:7A:B5:18:BE:20:D1:76:C3:8F:92:3A:28:44:34
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 019CAD596E742797DC69442CEB44616F6DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:00:45 +0000
Manifest this update: Mon 02 Mar 2026 07:00:45 +0000
Manifest next update: Tue 03 Mar 2026 07:00:45 +0000
Files and hashes: 1: KVd8UU1QCGLbelU8FBZ3BjTJf_M.roa (hash: e0wcDwUSIAfCnaYto4Jivp2KjPS/q2XzRg7RSdokzyQ=)
2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: sO4AhnwMk4riCphhk3spb/n/E8ID9MsXTY1zGDHM3Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:6e:74:27:97:dc:69:44:2c:eb:44:61:6f:6d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Mar 2 07:00:45 2026 GMT
Not After : Mar 3 07:00:45 2026 GMT
Subject: CN=cf267775cdde7ab518be20d176c38f923a284434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:ca:73:08:30:73:ea:75:a4:a7:b8:b6:03:
5e:fa:d6:1f:bf:50:dc:a0:94:a5:78:32:f6:0f:0f:
c3:be:b7:48:71:47:34:7d:17:86:c2:e7:c9:cd:34:
5a:da:64:9b:78:70:0c:f4:54:3d:82:4e:46:3e:92:
51:10:b5:ce:2a:cc:64:f6:09:4f:b4:a6:52:6c:f3:
3b:d1:ad:7d:23:6f:3c:48:d4:48:2e:89:d6:1d:cd:
79:13:35:15:f3:32:9e:20:64:f7:53:7f:af:27:3d:
d4:e8:b8:a0:43:2c:78:22:1a:b4:74:b8:2a:ed:6b:
f9:79:ba:3c:89:bd:eb:31:b6:e8:a9:7c:c8:8b:de:
95:ad:0a:4b:09:20:2e:d3:88:4c:1e:7b:f5:b8:f4:
e6:6f:a4:51:a3:fa:ad:3f:a0:46:0c:27:9a:fa:e6:
f7:86:6d:ca:29:d6:54:ff:67:00:dd:d2:8a:3f:cb:
18:31:28:a5:98:58:c8:56:e9:83:3a:00:2c:2a:d1:
c3:d5:a9:d7:55:be:03:9c:91:ad:00:31:0e:7d:bb:
f7:ba:44:22:2c:f5:e3:3e:ed:b3:d0:07:ff:f5:35:
83:ee:02:d5:7b:2e:bd:f4:ae:90:9c:63:da:95:f0:
a3:9a:a0:73:11:f8:a1:bd:81:cf:29:b2:17:6a:c2:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:26:77:75:CD:DE:7A:B5:18:BE:20:D1:76:C3:8F:92:3A:28:44:34
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:34:7d:4d:82:71:6d:b9:5d:6d:08:4e:2c:3d:3a:3e:30:c6:
55:9d:16:1c:02:b7:55:d1:ee:13:c7:07:f0:44:37:e8:59:d7:
04:ec:f6:82:cb:e8:13:06:5f:0d:f5:2e:80:8c:1f:02:2b:da:
be:d7:e2:9d:cf:c7:87:96:8e:07:23:8a:1c:ef:fc:c4:4e:5c:
2f:7e:63:2a:93:1b:d1:2c:18:3f:07:36:fc:e5:d4:59:38:de:
d6:e7:78:d2:97:f2:e2:74:99:2e:bc:e2:ec:4a:45:3c:38:72:
1d:e3:20:74:fe:e8:c2:d3:ae:7d:b6:b3:ed:e6:7b:8d:e8:61:
60:24:4b:fb:e7:a8:64:67:f6:0f:4d:f0:91:13:5e:a5:60:97:
fe:9b:57:b7:e0:ed:5a:4a:d8:a8:48:2e:66:22:15:73:a7:cb:
7e:37:a8:c5:35:60:bc:f8:31:02:f4:60:d2:45:a3:a1:f9:83:
3c:67:0e:1b:9e:ed:21:d4:a9:f1:3a:a1:af:4b:a9:e2:f3:8c:
91:cf:b2:a7:16:fd:f3:e8:3a:5b:b1:29:67:64:7b:5b:ba:da:
6a:4d:8c:b8:42:0b:0d:64:a6:56:4d:8e:e8:8f:0f:7f:fb:eb:
18:ff:90:76:bb:11:e6:e0:8e:81:07:d7:7f:82:bb:85:33:ee:
ff:99:3e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:39 2026 by rpki-client