Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: uPaslruhq5Eca3WbU4XLj2B/FoKIEZXdNONET+spBlo=
Subject key identifier: AD:09:34:13:D1:30:E7:73:3C:44:48:DB:1A:82:60:9F:5D:CE:E6:6D
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 019CAC0F9F88B2C9F4F532C5CFB44C9A364F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:30 +0000
Manifest this update: Mon 02 Mar 2026 01:00:30 +0000
Manifest next update: Tue 03 Mar 2026 01:00:30 +0000
Files and hashes: 1: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: kE4lMPTOsusxGBno4ThV3m6EIMyz/5fXzpu/dI2ywHA=)
2: hGGdrn8Q-dhLWfi_gTkJoK3l29E.roa (hash: 9MCdA6GuzpZs6FZt15tnmy+ZE9OMe0TMy0YGpKngBio=)
3: iNjCT_BLZd9vl0rv4dLzCKK08gs.roa (hash: mlyMniHzelFP8RaHqU3fioWDlio2eP7RJTE7Lvl+uWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:9f:88:b2:c9:f4:f5:32:c5:cf:b4:4c:9a:36:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Mar 2 01:00:30 2026 GMT
Not After : Mar 3 01:00:30 2026 GMT
Subject: CN=ad093413d130e7733c4448db1a82609f5dcee66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:2f:61:c8:29:0e:5c:f5:79:09:a8:f4:6f:
1c:24:aa:89:fe:56:a3:ed:30:2a:6d:d4:ce:bf:81:
30:c6:c3:26:95:17:2f:93:e7:81:4b:be:0b:41:5e:
23:a7:20:e4:3a:ea:91:ea:6c:7f:43:57:4e:07:35:
5f:14:28:95:f2:f5:28:1d:3d:1b:4a:28:73:d6:e3:
9d:85:d7:ff:33:a6:d0:f0:39:23:be:89:41:a0:9c:
f5:66:fd:f3:40:cf:72:83:bd:11:bd:72:ab:38:89:
c6:cd:7a:18:1c:d2:ee:4d:68:82:e4:a9:51:da:ac:
6c:14:af:1a:3c:fe:2f:3f:22:19:c9:a1:cf:ef:55:
05:cb:e2:3c:bf:26:1f:33:cb:cb:18:b5:eb:09:f9:
9a:24:26:0d:b3:00:2d:9f:91:75:5f:eb:de:58:2b:
56:f9:03:dc:76:bf:c8:4d:0a:3c:7f:db:f9:38:6c:
11:f3:47:4e:09:7e:90:19:d3:3e:ea:20:73:d7:11:
a3:62:61:d1:0b:5a:51:be:bf:e9:f0:f7:10:30:c9:
a7:27:8b:59:4e:68:5f:7f:0a:a9:21:e0:d7:b8:69:
f1:67:8d:44:3a:35:a9:38:95:e1:f7:8f:0b:9f:02:
66:4f:f6:79:d4:55:55:2f:10:dc:c8:f9:53:16:d2:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:34:13:D1:30:E7:73:3C:44:48:DB:1A:82:60:9F:5D:CE:E6:6D
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:6a:0d:bf:22:21:15:f1:df:b8:56:50:b2:85:61:23:ac:
b1:83:7f:1f:20:76:48:5e:3f:13:87:b7:c7:15:6f:4c:98:83:
cc:ec:03:5c:69:e7:e5:f4:e9:90:c7:3b:a9:b6:16:2e:79:fc:
a2:62:75:b5:a2:61:75:ad:f1:b3:e8:e2:62:54:04:97:51:3e:
62:97:b0:4e:b9:7b:47:67:8b:9d:4f:84:5c:af:db:da:e7:f9:
04:05:aa:09:33:c3:3d:02:1a:40:87:4d:3a:7a:5a:4e:09:c1:
be:72:3e:c8:10:e5:cb:fe:b7:e1:74:cb:00:0b:b0:76:03:e7:
28:7c:f9:4b:58:35:50:3d:c5:3c:63:3c:61:41:11:75:84:ab:
da:2d:6a:4a:b4:5e:2c:89:e9:a3:44:ed:b6:cb:6a:1e:c0:f1:
f7:40:aa:1b:98:9e:73:8d:79:d2:bb:69:f2:04:81:f1:7f:f5:
17:11:6c:03:26:50:c7:2c:e5:04:88:3f:2b:9d:f8:2c:71:9c:
79:2e:8b:85:9b:a0:98:be:35:e0:79:dd:ff:5d:11:ed:e2:7d:
f5:d8:b6:6c:25:ac:69:04:ce:c9:49:5e:4b:17:62:1c:21:0b:
80:70:4a:5c:7c:f9:36:2b:51:20:e1:47:f0:46:cb:b7:e1:41:
e8:af:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:23 2026 by rpki-client