Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: dpJ1+C18N1KC4YORZ+iIKO437W2EQm0pNesD5rXHXto=
Subject key identifier: 70:AE:36:CB:A3:81:37:98:5A:B8:8A:C3:33:1A:19:DD:6F:1F:29:84
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 019CADC7E99003307D1EE6B3FABA29BFAA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:01:25 +0000
Manifest this update: Mon 02 Mar 2026 09:01:25 +0000
Manifest next update: Tue 03 Mar 2026 09:01:25 +0000
Files and hashes: 1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: O1TdRc8Wl0lkKql07vv17MRg+gjq6dSmD9tQVcRgeCI=)
2: muJold8C5TUMixIVaL6rH1BS38A.roa (hash: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:e9:90:03:30:7d:1e:e6:b3:fa:ba:29:bf:aa:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Mar 2 09:01:25 2026 GMT
Not After : Mar 3 09:01:25 2026 GMT
Subject: CN=70ae36cba38137985ab88ac3331a19dd6f1f2984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:1d:6d:71:67:ca:26:e4:b6:1c:b8:e7:ef:
8a:0e:6b:51:09:95:b1:f1:b1:a5:31:52:66:0a:c8:
9b:62:c4:c2:72:73:4b:a5:bc:c7:e6:bf:e0:36:48:
27:a5:cf:f9:17:69:01:7e:88:9a:c0:2a:f9:b1:d4:
92:de:d1:a5:bb:50:b3:71:4c:f3:48:ee:68:79:53:
4f:6e:18:c1:8a:91:b9:b1:0f:3d:44:c8:5f:e6:00:
2f:1d:2c:19:84:3a:d3:02:7d:b3:3f:90:11:6a:6c:
ed:3c:92:ce:90:4e:58:0f:73:5c:f9:de:54:a8:c6:
05:08:0e:d8:29:0f:ad:f9:72:7c:cc:05:f5:98:03:
cd:b8:09:9b:1e:4c:e7:10:94:95:81:11:ce:4d:e0:
f0:d7:6b:91:f1:87:05:7b:9e:4a:bb:d3:30:78:ba:
5e:34:d4:3f:4f:da:1b:f7:7d:40:79:41:d7:95:14:
7a:9e:4d:bf:a3:cd:1b:33:57:88:69:79:bd:e2:52:
f7:ac:db:5d:30:24:21:bd:56:48:b2:5d:63:ab:61:
12:9c:01:d6:03:74:1f:c2:67:1d:88:ca:33:d6:f4:
c7:8f:b9:15:6f:3f:66:72:ee:2f:67:7a:15:04:e7:
5a:84:65:2e:28:8d:ac:00:87:0c:44:bf:42:06:82:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AE:36:CB:A3:81:37:98:5A:B8:8A:C3:33:1A:19:DD:6F:1F:29:84
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e4:61:7f:d8:5a:25:d4:d9:2e:70:56:e9:9c:ff:28:3b:a5:
38:6a:2b:2f:df:af:aa:bd:79:96:f3:da:2e:25:7c:99:b4:ae:
a9:36:3f:62:df:a0:41:e3:0c:65:d6:b0:08:1a:ff:ae:e5:ab:
6d:2f:fe:33:e8:10:4f:f6:9d:b4:f4:c1:37:90:22:4a:9a:5a:
01:36:1e:85:b9:7b:99:2c:4e:f7:73:15:6c:57:b1:4c:5f:82:
c3:e4:c7:3e:44:27:6f:27:3c:80:31:5a:c7:3f:3e:33:ac:a4:
2b:5d:36:68:4e:3a:85:24:b4:b5:d0:03:99:e6:f9:a3:9b:27:
be:6b:89:63:d9:7d:f9:f4:f0:34:13:b1:08:e1:d8:5f:b2:d9:
ce:28:c0:0d:7b:e8:31:ec:2f:ef:6c:08:6e:86:99:75:83:bc:
28:cd:e4:2a:b1:c8:32:66:b3:df:fd:e2:57:cc:9e:6e:d5:30:
bd:bc:e9:7e:c3:d5:d8:4b:0d:aa:2e:43:31:e9:61:9e:2f:e3:
dd:4f:41:2a:6b:1f:99:70:cb:bc:1e:e7:ab:20:d7:87:b6:c4:
25:e4:33:6b:e4:8c:25:a5:6a:16:ac:7c:fa:ab:8e:6a:9b:94:
cb:41:7f:35:05:43:05:4a:f2:fa:cb:bb:2c:af:74:7c:7a:dc:
14:7f:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:13:13 2026 by rpki-client