Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: Pss7AFO/FpzIfGPGQ/wtgyjwPDefRAoENeiAuSpvzz0=
Subject key identifier: 6F:3D:97:95:36:4E:AE:C8:31:BA:C2:92:82:9E:AC:91:FF:D9:B3:F5
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 019CABD9D68B48F59BABE2E90FC9368A40B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 1362
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: Ya8ebjvCeICd2oalcqSNMi/30bPnMFiIr/z6xVL5scs=)
2: VcfqWg7FbQqb-Uja1uMxHMYRwIk.roa (hash: Lj+UoxvlbBzpt+4S58JMbON1coh0nlAf0RSoB4fN3M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d6:8b:48:f5:9b:ab:e2:e9:0f:c9:36:8a:40:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=6f3d9795364eaec831bac292829eac91ffd9b3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:b3:87:bb:b6:61:43:b2:7c:b3:9a:ce:49:
66:24:e2:fd:53:03:c7:a1:c1:1b:1a:17:6a:28:cd:
55:a9:89:7e:69:d4:5e:98:f6:d0:5d:43:70:f4:6d:
a0:22:66:8a:e6:d2:7c:c3:52:71:b2:42:98:b7:9f:
e0:95:72:7e:ba:f2:32:14:d7:43:96:8d:f2:2e:b7:
6c:af:a9:af:9b:1b:56:4b:fa:5e:67:af:ec:f0:20:
07:16:73:8c:cd:44:da:1a:f8:38:bc:77:dd:e7:56:
b7:eb:23:ce:1f:52:4f:c7:e1:d2:ba:06:d4:43:41:
4a:41:ce:85:f7:0a:86:27:fb:05:97:97:3a:18:af:
f7:be:ea:fc:79:36:dd:7d:4a:b3:f6:a7:ca:71:3e:
c4:92:b6:fd:f8:a1:c6:01:94:ae:83:f7:42:84:f6:
9a:de:5d:db:4c:79:8b:b4:5a:f3:ed:bb:4f:4a:27:
f7:c3:d9:d6:50:97:09:58:dd:75:89:ae:e6:35:bf:
ee:5d:05:55:fa:1a:9d:0f:a0:18:d4:7e:36:0b:a9:
39:9f:95:04:c0:9f:1b:19:69:f9:63:6a:28:3a:f0:
3c:93:ba:3e:b0:2d:d3:88:c6:8b:da:32:06:ff:4b:
08:da:8a:c1:24:ed:39:b6:4c:20:9f:27:85:fa:63:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3D:97:95:36:4E:AE:C8:31:BA:C2:92:82:9E:AC:91:FF:D9:B3:F5
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:94:83:0d:4a:b2:87:fd:de:a8:01:48:21:dc:92:96:f3:92:
00:43:16:5e:e9:b9:be:d4:10:f4:bc:6a:83:ea:a1:1e:95:b0:
58:a8:22:00:7e:52:90:d1:7a:c2:8f:5a:e1:65:d8:ce:30:78:
f7:37:2c:91:33:75:d6:79:39:b3:2b:19:92:01:64:96:50:86:
ed:10:ff:27:be:df:84:83:46:3d:41:75:fd:c7:e5:7c:60:0c:
0e:29:c7:0a:19:9f:e4:cc:f3:97:0d:ea:fe:3d:01:10:10:02:
c3:2e:d7:a7:df:54:52:df:89:0e:75:70:a9:8f:cf:9f:9c:4f:
f7:0b:ce:22:30:1d:22:8e:d4:bc:2d:60:b6:73:86:17:28:9d:
33:36:04:4a:ac:c0:21:f0:a9:11:c5:3c:5e:c7:2d:9a:4a:cc:
6b:35:b2:6c:4a:5a:53:5b:c1:08:95:f2:27:f0:df:be:f3:7d:
e6:61:33:22:ef:b1:36:ca:4a:e0:35:e8:bd:d6:18:7e:86:eb:
ca:61:c9:f1:df:73:73:58:a8:e8:f7:4d:b4:16:c6:6f:8d:97:
6e:78:a0:fa:2c:e3:0d:1c:7c:62:71:54:1d:13:48:82:a1:ea:
a6:60:83:a7:f6:73:38:e4:aa:4c:eb:ad:3b:56:61:c3:7a:7b:
80:c2:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:33 2026 by rpki-client