Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: X1H80r8xn/bMuKDx+2fh93Ye7DBInboWTBndyEtIzWo=
Subject key identifier: 9E:A4:0F:14:40:DB:94:48:10:2A:46:4F:C0:87:72:7C:30:D2:5D:B9
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 019CAC101E2544ED603592EC0B09F37475D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0DA4
Signing time: Mon 02 Mar 2026 01:01:03 +0000
Manifest this update: Mon 02 Mar 2026 01:01:03 +0000
Manifest next update: Tue 03 Mar 2026 01:01:03 +0000
Files and hashes: 1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: /zFvvWNmlG4R04FWaSlvjysraQjybERs3BitjLopu1U=)
3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:1e:25:44:ed:60:35:92:ec:0b:09:f3:74:75:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Mar 2 01:01:03 2026 GMT
Not After : Mar 3 01:01:03 2026 GMT
Subject: CN=9ea40f1440db9448102a464fc087727c30d25db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:65:0b:b2:fc:2c:01:f5:a4:49:ad:04:f3:
14:01:f6:e4:a5:e2:60:d4:46:5c:81:cc:ff:9d:7c:
12:5e:ff:2b:be:06:52:dc:01:3d:8b:c0:1f:b6:7a:
e7:bb:1b:b1:7a:73:e7:96:a9:28:da:10:fc:3e:a1:
49:c0:ef:4a:2a:dc:7a:8a:9f:31:9a:c5:60:d9:58:
4c:86:74:ee:3f:bd:bf:f7:4d:b1:17:6a:08:98:f7:
f1:66:01:68:97:a3:92:a4:1c:96:62:ce:fd:28:25:
d6:41:fe:75:b6:a2:0e:72:ce:6e:c8:22:95:df:0b:
36:d6:c2:3a:f2:66:09:07:a8:34:06:8a:58:f3:fb:
62:e6:da:fb:8f:5b:bb:df:47:aa:1f:3a:1b:ad:ea:
cb:ec:02:e9:ab:f1:6f:81:1e:6c:7e:e7:d8:42:16:
5d:bc:62:8b:f0:59:94:22:bd:11:e6:99:39:ea:44:
12:fb:8d:a3:f0:49:32:7f:52:44:99:5a:c2:e4:f5:
c4:04:9c:e4:f5:49:fc:6b:ff:56:ff:6b:f8:09:75:
f4:d0:9c:a1:4b:20:68:d5:25:e1:b9:8e:2f:07:93:
01:87:cf:e8:39:17:2b:28:fe:5c:8d:5e:0b:05:29:
dd:c0:2c:ef:19:b7:03:ac:4f:d5:c6:40:c6:bf:cc:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A4:0F:14:40:DB:94:48:10:2A:46:4F:C0:87:72:7C:30:D2:5D:B9
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:bd:e6:c6:7b:2c:15:2f:05:a9:6f:c6:68:04:18:40:09:
e2:d9:36:a0:cd:7b:af:9c:98:21:30:38:49:00:20:56:18:35:
2c:c4:b9:ef:6d:66:04:19:c2:94:af:f6:d8:be:e6:8b:4c:98:
03:9d:b3:6f:59:0b:3d:86:6a:10:9c:a7:66:4c:cf:50:98:44:
a5:ec:42:b4:19:2c:5b:fc:e9:a3:78:bb:ef:7e:99:6c:fe:10:
d5:75:4f:0a:53:af:24:64:60:1c:7d:0b:5b:fc:6c:34:85:30:
1b:49:56:d5:77:35:8b:bc:c9:67:de:33:d9:f4:79:eb:6d:75:
07:c8:57:7b:96:99:21:29:0a:c7:54:5e:7b:2f:e3:11:ef:d2:
fa:09:8b:ba:3b:b7:6e:d2:2c:c3:fc:c5:48:49:17:a9:62:94:
26:f4:d7:b2:b0:e9:1b:48:b4:3f:6c:30:de:56:03:b4:b8:f0:
00:9c:13:19:71:77:79:1b:fa:85:d7:26:a4:1e:f5:e6:35:10:
db:3c:b1:ba:62:31:82:ad:56:2c:b2:50:f7:f6:e3:e6:95:7a:
86:82:43:d1:66:aa:6f:66:2e:92:4b:49:20:25:51:b6:b9:9f:
b5:9f:af:26:12:86:84:66:b7:5d:c4:48:07:51:93:5b:92:ec:
a8:a0:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:48:04 2026 by rpki-client