Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
File: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json)
Hash identifier: 2uo0AtRMGWXahJw35zLDqUAczFW5s0oRhZaISGb2rm0=
Subject key identifier: 01:E0:4A:39:2F:7B:12:F5:B3:42:BF:A4:BA:8A:47:59:74:0D:03:79
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Certificate issuer: /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial: 019CA8A0D8D0529DD7E74B98EE057AA8C902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
Manifest number: 0B0E
Signing time: Sun 01 Mar 2026 09:00:39 +0000
Manifest this update: Sun 01 Mar 2026 09:00:39 +0000
Manifest next update: Mon 02 Mar 2026 09:00:39 +0000
Files and hashes: 1: M2qWTH73NkMquwfzQJVxK2FVK8I.roa (hash: 5PswSRa1E9ITddc7NsFeNUg4nkAmj5HsnCX0ziwfNao=)
2: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: GVy4VOOuk+2rYLaxTHnwRK7DbxuaNYHAG+vaZr3SG4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:d8:d0:52:9d:d7:e7:4b:98:ee:05:7a:a8:c9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Validity
Not Before: Mar 1 09:00:39 2026 GMT
Not After : Mar 2 09:00:39 2026 GMT
Subject: CN=01e04a392f7b12f5b342bfa4ba8a4759740d0379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:a7:62:13:55:82:63:4e:60:6d:59:5f:db:
5a:89:81:88:08:02:5f:f4:b8:55:41:b8:b2:16:be:
88:e2:97:f0:8d:06:22:bb:c9:4c:0f:69:12:16:03:
0a:f0:b0:2c:82:73:cf:83:6d:28:d5:f1:c9:eb:46:
01:1f:b7:27:4e:79:3f:8c:ed:71:6c:6c:e2:e4:29:
5f:97:50:71:d6:7b:8e:05:e3:8f:9d:b5:6d:68:e3:
b1:9a:a6:df:35:4e:85:3e:fc:d6:06:36:95:a6:d7:
88:11:f3:61:56:fd:08:d0:2b:9e:52:58:47:4d:fd:
e0:77:ed:4b:ff:4f:c2:e7:aa:17:79:bf:27:38:38:
4c:6d:66:a8:c8:01:ac:9e:5e:47:d6:c7:62:bc:02:
6e:24:e8:1a:48:7a:5c:09:3c:d2:27:6f:6c:54:f2:
bc:3c:2a:49:0f:66:38:51:25:45:b7:29:2f:81:42:
d1:de:f8:1d:67:ec:94:bd:c4:48:a1:51:cb:5a:6c:
c0:3b:7a:52:95:1c:2d:fa:bc:00:df:eb:12:92:a7:
c6:56:b0:c0:c5:7e:62:91:dd:f5:79:ca:f2:5d:40:
06:f6:7e:a9:1f:01:ea:94:b8:5d:72:b1:44:0d:af:
f6:ad:55:02:00:82:74:e3:01:98:ce:29:9d:8c:69:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E0:4A:39:2F:7B:12:F5:B3:42:BF:A4:BA:8A:47:59:74:0D:03:79
X509v3 Authority Key Identifier:
keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5e:84:4b:ca:95:24:91:ee:73:2d:57:29:18:4e:15:58:64:
0e:4c:2c:54:ff:93:a4:fb:b7:64:33:31:7c:19:89:7d:22:45:
1c:d3:ef:4d:6b:0d:20:01:58:99:a3:9f:8f:c0:8c:04:fe:19:
b1:c9:1d:2b:bc:70:92:a4:df:e7:19:ba:54:de:52:45:f7:ed:
b9:43:8d:fb:70:89:22:1e:a2:08:53:12:a6:29:a8:c4:7c:8b:
7f:a6:99:1a:a1:54:e7:75:c7:69:11:e0:a3:82:c1:5f:de:22:
f1:c7:5d:00:3b:fd:30:00:60:9c:fa:67:00:a5:15:a1:38:4d:
79:08:7c:2e:75:7f:8b:47:6a:59:3c:14:b6:e8:00:b4:bf:e1:
6c:18:da:17:29:f8:0d:26:38:89:a3:a6:95:4f:aa:f6:50:c8:
6b:a5:02:c1:5d:4a:cc:f2:68:9d:ce:b7:e6:a7:e5:b8:23:fb:
07:23:e9:ef:6d:c5:27:97:6f:07:f4:fa:40:1c:18:17:c8:a3:
da:93:66:1f:95:f9:26:e4:f3:ba:ed:53:1a:92:5e:0e:f7:e2:
d4:26:99:06:74:c6:65:91:a1:20:4e:b6:22:14:51:da:81:0a:
d3:a6:1a:a8:23:08:ec:97:00:ff:b6:18:64:4b:9f:45:c0:ac:
1c:79:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:11 2026 by rpki-client