Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
File: QVHWtEHT9XdiwDL4-tIXYIoi96E.mft (raw, json)
Hash identifier: dO3FDn+CdDCi7oExuMpuInXfOLA8aKtf53KOlaPM7Kk=
Subject key identifier: C2:90:43:F4:BD:DE:79:D3:74:41:3C:07:C8:C8:FD:B8:27:73:AB:CA
Authority key identifier: 41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
Certificate issuer: /CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Certificate serial: 019CAC46B06DBE8E612699A92960AD8B49E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 02:00:39 +0000
Manifest this update: Mon 02 Mar 2026 02:00:39 +0000
Manifest next update: Tue 03 Mar 2026 02:00:39 +0000
Files and hashes: 1: 5ryFhi9ZcM4ZXUi-AstHZtjweAE.roa (hash: 2qM0IhOL1SBTen6Ye0bZXnOAWOFNUbuFBAheUHcm2J0=)
2: QVHWtEHT9XdiwDL4-tIXYIoi96E.crl (hash: E84nENCaSK02DXKRY6GruhlNBJM8dvBIukq9H7jT9C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b0:6d:be:8e:61:26:99:a9:29:60:ad:8b:49:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Validity
Not Before: Mar 2 02:00:39 2026 GMT
Not After : Mar 3 02:00:39 2026 GMT
Subject: CN=c29043f4bdde79d374413c07c8c8fdb82773abca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:c7:4a:1c:36:87:3f:30:6b:66:de:f5:68:
c0:2d:44:52:8c:21:f3:67:d3:e3:8b:22:e8:1a:bd:
eb:45:88:ba:d2:d2:be:89:d2:a3:fd:2a:6e:e3:1c:
8b:da:b2:7e:96:61:52:b2:5b:32:9e:96:b8:a2:75:
9c:cf:a9:f1:bd:5a:fe:2d:d3:a4:66:39:29:d0:ed:
13:74:8f:c9:0f:e0:95:19:d5:d5:6e:cb:7d:61:ef:
1c:a5:3b:40:12:ea:e4:14:34:1a:64:9b:8b:9d:3a:
64:ea:64:86:9b:3a:d7:66:8d:0d:15:8c:ff:17:e8:
d4:70:b6:52:08:a5:d0:6c:94:47:cd:ad:3f:e9:7d:
ff:ba:db:73:15:0c:e7:76:62:20:e1:ae:80:1b:4c:
9d:e9:3a:55:51:5d:b3:37:12:a4:e8:93:4c:85:7a:
64:8e:bd:05:b9:90:e0:92:fb:27:75:7a:8a:2c:e9:
4d:a1:c5:dd:c8:b6:a3:ca:14:6c:d5:3b:43:ea:94:
fa:09:21:c4:c4:9b:1f:97:27:86:31:43:82:4c:a4:
2e:ff:2c:0d:90:16:7a:2b:a8:4e:7a:c7:7d:9b:b4:
be:21:d5:4e:5e:32:ae:c3:69:94:39:48:bc:84:7d:
47:28:e7:09:71:4d:4f:bb:69:fa:22:13:fa:f5:70:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:90:43:F4:BD:DE:79:D3:74:41:3C:07:C8:C8:FD:B8:27:73:AB:CA
X509v3 Authority Key Identifier:
keyid:41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:24:76:5d:85:04:78:8a:fa:d5:4e:34:6b:9e:57:ec:b8:ab:
84:65:73:30:ba:ae:ad:4a:15:61:06:72:b5:19:f9:1d:13:16:
19:85:25:52:cf:64:59:c2:9d:de:8d:e3:6f:8d:a3:6e:24:93:
bf:39:db:7e:72:f3:30:55:b1:a1:c0:33:b4:13:2b:5d:db:91:
fd:7c:c9:44:f8:66:79:63:a2:40:06:25:c5:33:cb:78:95:bf:
90:fa:e0:ef:2e:eb:6f:65:24:78:71:f2:18:ee:84:ef:1e:6f:
c9:f6:36:1b:9b:cc:39:7b:a0:2e:27:79:33:9d:3d:f0:67:47:
eb:03:09:94:85:4b:80:88:01:a9:f4:6b:40:fb:98:94:58:5b:
2f:1e:84:25:49:ae:b6:01:ff:7e:c1:cc:be:25:84:c4:bf:73:
3a:25:27:5d:0b:19:11:fe:28:14:b8:9e:cb:7d:82:f0:d5:1d:
57:41:d6:79:f9:98:69:4f:cf:fd:4b:e2:10:cb:a4:ca:56:cc:
d3:d5:c6:74:a5:18:5a:85:72:bf:5b:85:66:9e:40:cb:57:70:
98:dc:20:6c:4b:5e:d9:e1:d0:41:e1:ed:d7:f7:c4:ac:6d:d3:
f0:a8:0c:a3:01:69:99:da:a8:c8:af:92:29:ca:47:38:d6:1c:
d8:9e:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:06 2026 by rpki-client