Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
File: QPwHKZcRrfoiLiexKLdtHZdFBYI.mft (raw, json)
Hash identifier: S7Wy3xfUScvz7NtpK4wRTlOcHu65N8D8P0z44kNKaq0=
Subject key identifier: EE:C7:CD:73:4D:08:C0:26:DF:13:05:7D:7E:DF:26:BA:DC:DC:DA:9A
Authority key identifier: 40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
Certificate issuer: /CN=40fc07299711adfa222e27b128b76d1d97450582
Certificate serial: 019CAC7DF1AD961907DEC0C80475B6FE3FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
Manifest number: 14F5
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: QPwHKZcRrfoiLiexKLdtHZdFBYI.crl (hash: Axzea5RwSpF15p8pHz9na8Aiwnqve3I6psCv7pE3+Hc=)
2: n3unGkFIp8-n-TNUkOQRjOKqebU.roa (hash: CIWlXFkIaFdHtn2kvnhoUCJuy+xps7328gEToUVe6jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f1:ad:96:19:07:de:c0:c8:04:75:b6:fe:3f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fc07299711adfa222e27b128b76d1d97450582
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=eec7cd734d08c026df13057d7edf26badcdcda9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:5a:37:ae:3f:1d:22:79:cd:5b:03:6c:43:
11:cd:6a:2b:1d:ac:d6:6f:6e:47:b1:5a:90:00:88:
e2:af:64:6a:a8:0d:a0:bb:42:5c:ec:3b:58:be:26:
eb:4e:23:de:d5:14:87:cf:aa:63:1c:c0:9a:95:e7:
33:68:49:69:3d:79:da:54:fe:bf:03:42:2e:14:ae:
aa:9c:b5:c8:66:d6:fd:5f:3d:1b:14:42:c8:3e:99:
17:af:2c:03:2e:55:51:83:ca:5d:13:cf:fd:17:46:
8e:ec:61:98:2e:75:cf:cb:16:68:9b:e9:f7:dc:b1:
c6:12:4c:2e:7e:df:aa:13:e5:f4:fb:72:c9:af:08:
21:97:1d:34:5e:03:1c:22:f0:3e:b7:01:c8:45:9f:
20:c0:f8:d6:4e:ff:dc:1b:39:e0:92:6d:72:93:81:
d3:74:bf:60:e7:24:7c:f0:3e:4b:36:c7:83:66:fd:
00:da:53:0d:92:3b:25:ce:1e:76:41:e6:5a:ae:2e:
d8:4a:c7:ba:23:e0:5e:e9:81:a4:d0:33:ce:ec:22:
43:90:30:bd:95:fb:1d:d7:3d:96:41:50:ff:80:71:
fb:cb:cf:ce:82:a2:42:c6:65:96:e2:8a:09:e9:cd:
1b:5a:b2:8f:a0:22:bd:9a:e9:ca:fe:23:b3:6c:cd:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C7:CD:73:4D:08:C0:26:DF:13:05:7D:7E:DF:26:BA:DC:DC:DA:9A
X509v3 Authority Key Identifier:
keyid:40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:70:4f:cd:da:5c:43:e1:d4:1f:0b:39:21:d4:ca:d5:f7:80:
6d:09:6f:21:7f:be:b2:44:74:15:f7:40:d4:4f:80:5d:2b:a3:
20:1e:07:da:c7:73:df:db:0b:50:04:57:b2:ab:ec:6a:67:47:
7c:9b:71:1e:f9:ab:18:66:42:42:b1:eb:19:cb:e2:fd:e7:b1:
f8:39:1b:9a:e0:22:49:78:49:22:68:be:bd:77:a8:c5:8c:44:
66:9c:6f:e7:32:a5:83:87:13:ca:06:74:5c:19:26:73:90:99:
8f:a4:ef:f6:b2:dd:32:4e:24:7e:dc:4f:e6:93:97:f0:22:5d:
e5:38:f1:8c:43:9a:03:29:bb:4c:99:3d:58:f7:60:01:3f:ea:
ea:a2:a9:bf:23:05:01:42:80:45:c1:99:4d:b5:ef:cc:42:0c:
74:3f:e6:cb:7a:57:4b:73:eb:cc:1f:79:cd:43:f0:6e:8b:66:
bb:2d:a9:29:73:0d:d4:be:f7:55:c5:a9:b1:29:81:75:b7:ca:
ce:71:69:82:d8:f5:ba:9f:a3:dd:60:ff:9b:e2:80:dc:e0:d6:
5d:5c:6f:5f:89:34:b1:2b:35:db:9d:45:89:c3:c4:ed:02:9e:
a6:92:bb:d0:5a:45:4d:4c:58:12:a2:b0:ec:6f:86:25:e2:c8:
83:8f:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:44 2026 by rpki-client