Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: 1eEYR2/VpNuu78kTGafDWL6k0IBWrua08VqK/jfi4Ic=
Subject key identifier: 32:4A:96:00:D4:11:B3:7B:AA:FB:85:6B:DD:2E:68:3B:FB:61:3B:46
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 019CAB3434AAE119AB5092B11474897F6803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 1795
Signing time: Sun 01 Mar 2026 21:00:51 +0000
Manifest this update: Sun 01 Mar 2026 21:00:51 +0000
Manifest next update: Mon 02 Mar 2026 21:00:51 +0000
Files and hashes: 1: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: JuGZmy7FyuwQ0kgWvCDs+AhshSE7Y4X0dzZlAAMncAY=)
2: cQtlxVVPO7JQa_rTQPIvZ0L_JT0.roa (hash: wGTkJ7+XtXJZbWxqtu6wY+OG6HIKs93TJ8T7CJvY3Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:34:aa:e1:19:ab:50:92:b1:14:74:89:7f:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Mar 1 21:00:51 2026 GMT
Not After : Mar 2 21:00:51 2026 GMT
Subject: CN=324a9600d411b37baafb856bdd2e683bfb613b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:67:48:46:58:0b:4e:33:86:26:65:2c:e3:
e3:2e:4c:34:3a:49:30:71:a1:90:42:8b:3b:ad:e4:
66:42:3f:1c:c8:4f:37:4d:02:19:d0:6b:b9:96:e2:
fa:57:28:d1:c3:f1:b7:ca:d4:9e:0e:86:b7:44:61:
64:71:5f:75:fa:e1:05:75:c1:89:4c:4e:b8:00:59:
0f:d8:e8:54:ea:52:fb:c8:08:ac:3b:c4:e2:f8:b6:
dd:61:0c:5b:fb:c8:68:ba:54:ff:98:88:9c:cf:06:
08:c4:b5:c5:05:43:8a:cc:ed:62:fc:85:bd:3f:30:
90:c9:06:2e:ab:36:d4:cc:b0:95:9a:23:00:b6:03:
43:13:5f:ad:b3:a2:0a:5f:13:2d:82:08:87:00:ca:
6d:f9:9e:41:69:32:1f:4a:77:ef:0d:79:ff:d4:96:
6b:b7:5b:8a:29:79:44:51:bf:b4:05:40:0c:ba:f9:
77:f8:3b:44:b5:76:79:12:26:01:25:8a:05:02:fe:
74:9e:f7:83:00:7b:29:75:09:7a:df:44:aa:6c:21:
3f:58:f0:13:87:37:eb:d5:d7:a5:79:86:c2:e0:65:
37:ba:be:c1:db:87:f9:3d:83:2a:59:57:b0:c5:d0:
29:09:05:4e:67:df:d7:de:7a:f9:28:b3:de:8f:6b:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4A:96:00:D4:11:B3:7B:AA:FB:85:6B:DD:2E:68:3B:FB:61:3B:46
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:04:3b:86:25:2e:ad:04:10:72:b2:53:23:39:4b:01:b3:73:
62:04:d4:67:e8:a3:6d:5c:80:cd:b5:3b:7c:e9:52:02:f4:7c:
15:d2:bb:ff:ab:6f:83:d1:7d:7d:54:35:c5:56:4b:af:4b:76:
23:f6:bb:61:0c:33:33:f0:ea:bb:d2:99:4a:e9:17:eb:97:fa:
c7:89:37:8f:d8:75:77:a6:b1:52:d7:0d:59:4e:75:ad:47:3e:
66:29:09:c6:1b:f4:c7:03:b3:17:63:6c:13:48:2e:ab:56:e8:
be:3b:39:0e:f2:46:cf:fe:ae:3d:19:5b:4a:27:f6:82:99:4e:
c1:16:11:1e:0a:2d:f0:63:fd:b6:5c:bd:3c:a6:62:82:8b:99:
8a:c9:20:73:5b:38:50:89:f2:e6:aa:df:17:7c:a8:dc:82:94:
1d:ea:9e:26:9f:4b:46:81:4c:b6:c4:d5:a9:f3:da:a1:75:71:
af:28:ad:ad:2d:ad:2d:9d:15:58:b0:e8:4e:6b:a7:62:58:ba:
a4:7d:21:30:11:89:7c:47:78:ae:23:31:29:26:3e:c6:05:e5:
c6:18:26:1d:c3:37:ce:49:0a:f1:d8:f2:35:9e:81:86:6c:f4:
c6:88:10:73:47:20:48:3a:24:74:d3:3e:5f:3f:b5:6f:83:34:
87:56:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:38 2026 by rpki-client