Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: ttuIlbjpqEnLEBinioBobZ/yzL96a/ww1QDsLQGIfUM=
Subject key identifier: BF:9B:DF:B2:74:25:92:EB:66:E4:EA:6C:56:C3:BC:E9:8D:56:6E:A7
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 019CADFE4CAEA67BFC21E3D1B335F0B560F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 10:00:49 +0000
Manifest this update: Mon 02 Mar 2026 10:00:49 +0000
Manifest next update: Tue 03 Mar 2026 10:00:49 +0000
Files and hashes: 1: 38IcWrFWJbqE37FYpFMigdsHVdo.roa (hash: jTZcDNir5nH2T9oJuhPtVnEcZ5OgfBAR2idpIej2Fr4=)
2: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: A46bD0W+4LGl3fA2JeamA7v0W5Kf3VC+QeMVAudc7Kc=)
3: S9un40BglrRD8oUoRwpeEoCPKzQ.roa (hash: 63quj0FUggFB47Cme3ZNE0Mctu62nOnwW9NKWHljeOQ=)
4: nLIrARXN9dPSDCt_sdmjJM0dIgA.roa (hash: g+OtbxwAHIUNiByLd40WQVbq7MwXJk9aaDtEPJLR4Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:4c:ae:a6:7b:fc:21:e3:d1:b3:35:f0:b5:60:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Mar 2 10:00:49 2026 GMT
Not After : Mar 3 10:00:49 2026 GMT
Subject: CN=bf9bdfb2742592eb66e4ea6c56c3bce98d566ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:57:7b:6e:34:d6:4f:d5:d5:10:81:1e:e3:b5:
d8:51:e0:eb:35:30:8d:0e:a2:81:e1:3d:ac:6a:38:
40:47:fc:74:ce:4c:ba:2c:8b:75:2a:85:ef:2f:7d:
43:86:14:a2:55:52:b2:f7:be:8a:41:86:2b:27:f2:
55:73:9e:57:44:8a:0e:5b:68:8b:d4:83:93:7b:33:
1d:f6:88:1b:95:dd:59:09:98:d7:28:34:fa:ca:0c:
e8:bf:ce:f1:06:c2:a0:0a:d7:7f:77:c8:ae:0f:e1:
63:93:86:50:8b:bb:3b:65:38:98:a2:f1:01:a3:0e:
bb:18:bf:8b:b7:17:d7:85:bf:b8:9b:dd:bf:40:2f:
65:33:bf:02:71:74:22:72:99:c4:2a:95:e3:e7:6c:
d9:68:bb:ce:99:df:5b:6c:ee:2b:90:76:7e:a9:6e:
2c:74:a9:cb:a2:0f:6c:72:ae:44:86:de:2f:bc:63:
8a:9f:0c:4a:aa:7f:55:c6:d4:58:0c:1e:64:5f:b4:
96:b6:26:5c:44:d8:67:51:6a:db:73:16:84:38:5e:
87:de:6c:3a:d7:c0:da:ee:e5:44:b4:b7:ef:c2:b3:
c7:cc:40:32:d1:ed:78:d9:9f:0c:15:70:d3:7f:6d:
df:c8:35:b5:4e:9c:37:a0:94:71:a9:c9:bd:69:bf:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:DF:B2:74:25:92:EB:66:E4:EA:6C:56:C3:BC:E9:8D:56:6E:A7
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f4:fd:8f:1e:18:74:dc:d4:bd:12:d7:e3:2b:67:94:38:20:
41:b6:8c:f2:e3:ef:29:d7:dd:0a:57:70:b7:c5:a5:a9:68:26:
fd:93:22:93:ed:3c:e2:e9:c9:af:1e:34:d7:25:74:7c:08:5a:
d9:89:61:04:da:4a:0e:24:e3:96:0e:b3:e7:3b:56:51:6b:f1:
f7:d7:bb:b1:6a:20:bd:bd:8c:c0:3a:11:98:f2:f9:85:de:6d:
47:fb:11:63:1c:b0:fa:cb:48:99:c6:08:e6:e8:90:36:e6:99:
f1:d7:c4:c8:22:4d:a3:d3:61:18:cd:a9:3c:a2:e3:65:53:7b:
f2:70:19:d7:d5:98:39:c2:64:9b:b3:08:36:43:93:00:99:29:
8b:0b:b7:1b:54:22:15:8b:b4:29:43:90:95:5c:af:8a:d2:26:
53:ba:46:fe:36:d3:8e:1c:28:81:05:2d:b3:01:97:c7:ad:42:
30:97:e3:cb:9a:14:c6:a4:03:d9:03:3a:9d:9a:bd:29:cc:a4:
c2:36:2f:14:c3:68:db:fb:77:c9:cf:80:49:26:9e:82:c2:70:
60:72:73:8c:95:44:50:0f:14:4f:b6:b0:d0:29:55:16:81:c9:
07:b6:4e:81:1e:43:4b:40:dc:c3:08:7b:b4:88:04:29:65:d8:
65:0f:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:06 2026 by rpki-client