Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: Wvs/ZOANpiHW8fDzg9/tO2jgwcHtcFre70D/RNRYoqc=
Subject key identifier: 7F:59:F7:06:93:BE:82:59:6A:EE:9A:DA:7F:DC:91:B1:EC:D3:FD:5D
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019CABD9CFDAC73E5FB259EA17C01E61C9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
2: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: gOidVTbslJkkh7VsAw0d84N5wCf+QIUgS8r9mb5S+Zg=)
3: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cf:da:c7:3e:5f:b2:59:ea:17:c0:1e:61:c9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=7f59f70693be82596aee9ada7fdc91b1ecd3fd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:da:0b:8b:3d:5e:cc:39:c9:bf:34:e4:50:
99:ba:35:9e:66:7e:87:9c:a0:96:25:fe:c9:22:e8:
45:fd:bd:bc:a0:b7:0e:b9:0e:a7:44:b7:22:fa:54:
1d:29:38:fb:fd:ed:bc:a3:02:eb:1f:4d:ea:03:eb:
4a:dc:d5:37:af:58:9e:2d:c4:82:a9:d7:06:b1:a2:
21:2c:13:a5:e3:62:b3:17:e0:47:17:24:89:d6:b3:
a1:d8:f4:98:8b:f1:b3:62:39:00:ce:15:9e:f0:d4:
c0:40:e3:f2:fd:4f:e6:3f:07:a1:dc:16:31:82:03:
89:00:bf:25:bf:28:75:b5:e8:c2:dd:a3:44:94:bb:
72:5c:61:bb:ca:f5:b8:19:81:76:a6:9c:19:21:66:
d2:aa:31:3e:2f:e4:b5:90:46:b4:58:97:e9:9c:5e:
c8:5e:2b:c7:2e:f4:32:cb:80:5a:0d:78:88:e7:ce:
ad:a4:88:19:c6:2d:4d:22:e9:f2:dd:16:5a:00:b7:
23:e6:fa:5d:87:46:b7:c3:27:5c:c8:56:78:31:eb:
74:ad:6c:a3:ac:ae:39:e3:4b:c2:d0:b1:c0:69:3c:
85:1c:02:10:7c:c8:0d:0c:b9:34:ac:84:b4:3e:da:
6e:14:44:85:10:47:0f:50:cc:51:64:e5:41:52:5c:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:59:F7:06:93:BE:82:59:6A:EE:9A:DA:7F:DC:91:B1:EC:D3:FD:5D
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4e:bc:d3:a6:cc:fd:b6:3e:36:94:92:19:12:0e:8e:15:87:
a1:1c:e7:48:31:b8:1c:20:5a:39:02:9d:69:cd:18:07:78:f3:
18:65:b0:ae:98:69:b2:31:68:a3:ba:52:b3:24:8d:f2:fe:71:
d8:4a:c2:9b:da:19:fa:ef:f6:d9:f5:36:39:76:5e:de:94:89:
2c:47:20:4d:50:cf:fa:3f:dc:af:0c:b8:a1:b1:de:fd:41:57:
5a:84:6d:e7:98:2f:80:8d:59:b0:50:4a:0d:c1:71:01:92:a3:
32:bb:c8:25:dc:8e:88:28:6b:98:7d:0a:10:81:08:9d:16:99:
f6:8c:76:1b:3f:a4:c4:5c:00:23:6b:de:d8:67:dc:45:48:ad:
ab:04:5c:90:1d:96:4b:71:3b:5e:02:4f:71:77:44:40:96:29:
80:c8:a2:c6:57:76:d9:24:86:b5:55:8b:3c:df:18:2e:1e:c4:
91:97:44:fb:7b:d8:75:ef:c6:f3:3e:e6:05:7c:7c:b1:56:29:
3f:e9:cf:87:28:d9:12:ac:8e:b6:f6:fd:c2:3a:e4:f9:98:9e:
cf:8b:b9:6f:c8:c0:5f:5a:e2:c4:ec:6d:80:4c:a2:95:e8:62:
64:1e:7b:6f:96:e5:c3:00:1c:21:3d:db:73:28:d6:6a:20:8a:
79:46:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:42 2026 by rpki-client