Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: W/siwj8TZwnrEKB5c979iQk0lU6uNUbq3AZVfqi7T7o=
Subject key identifier: FA:CA:11:9B:E7:C7:16:CA:E0:0D:9A:37:71:86:3C:1A:AA:23:BF:6C
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 019CAC100381B68984B3718D58EB86F4F58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1852
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: Yy8h3VYyoqxJ/SIhhvVttCj5G5KTCexo0PyeT2Muqi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:03:81:b6:89:84:b3:71:8d:58:eb:86:f4:f5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=faca119be7c716cae00d9a3771863c1aaa23bf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:b3:da:18:01:b8:11:ce:54:ae:f8:ef:4d:
2e:d4:e0:5d:93:aa:9d:99:f1:d9:cf:30:bd:12:67:
2c:f2:62:9c:9c:96:3f:78:37:4f:9e:df:92:2b:0b:
d4:9d:f5:d5:1c:e1:c8:9a:f7:32:85:26:b4:8d:25:
6a:54:8c:23:5f:06:10:65:0a:47:97:28:d3:18:41:
b8:a9:6a:f5:44:0e:0a:67:b5:5b:73:39:86:45:84:
4b:c0:94:28:49:28:31:40:6b:13:81:c6:2a:45:a7:
1c:d4:72:86:de:e9:6b:a7:81:ac:74:69:c9:d3:19:
3f:f1:42:e3:89:c5:79:49:d8:de:9c:bd:66:58:bb:
6f:44:2e:93:ef:41:47:59:81:b6:f6:06:25:1e:93:
36:76:53:df:36:12:d0:ee:50:a4:85:30:3b:b6:e7:
8c:7a:8e:e9:d1:bb:a9:8a:53:df:af:39:97:d3:e4:
df:10:fd:4b:99:7a:1d:ad:b5:2f:6b:0e:bd:9d:33:
f8:64:4d:11:e9:5e:f3:3a:7b:3a:4a:2f:b0:34:3c:
c1:39:6f:90:9c:e9:79:c3:c9:37:7e:f2:3c:b7:76:
94:93:2b:47:f7:6a:9b:9d:8b:4a:a2:5a:36:a6:ad:
04:06:08:a5:54:5f:2a:69:0e:14:7d:1a:86:fd:85:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CA:11:9B:E7:C7:16:CA:E0:0D:9A:37:71:86:3C:1A:AA:23:BF:6C
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:ca:eb:4a:29:04:b9:02:03:91:bf:7d:d0:25:15:23:dc:
c2:77:a6:19:df:fc:a6:21:d8:cd:10:62:ca:c0:fd:cf:0a:93:
eb:82:bf:6a:e3:8e:9e:02:30:32:2e:c4:ce:fa:6f:09:9f:da:
fa:63:9f:18:5f:3f:36:5c:5e:a0:69:44:52:ae:42:13:2d:8d:
55:28:55:de:54:3d:0d:3b:70:85:3a:e6:fd:11:4f:94:91:89:
b5:df:11:7f:57:52:f6:8e:bf:df:af:cd:2c:67:ec:97:76:54:
4f:3f:e8:10:d1:bf:5e:9d:93:dc:ec:60:da:e6:9e:4c:e8:5a:
4f:5d:f1:04:05:31:99:27:91:42:bf:9b:0c:20:9f:6b:0f:55:
74:5a:d4:2a:9a:06:96:35:e6:48:3b:3a:56:13:eb:19:3f:5d:
e7:90:ac:26:54:f1:24:63:7d:e3:b5:c4:3d:50:54:44:5b:11:
22:b9:59:c9:45:61:ae:82:b1:28:2e:32:89:58:27:0b:9f:27:
ee:88:57:0e:8b:0e:22:e1:5c:ac:ad:f8:41:d6:0e:b4:6d:0f:
a2:a1:e1:1f:a9:37:b6:88:2c:26:70:94:70:e1:03:c4:12:59:
68:88:da:51:13:a6:24:fe:70:38:e0:7d:60:b0:44:de:48:7a:
a6:d8:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:01 2026 by rpki-client