Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier: mXaWszGyh5OCMM3s6ur9+cBdfl/FBG93WzUr4HgG7ek=
Subject key identifier: 3D:CD:2C:67:D2:B7:41:BA:D0:74:1E:EE:D0:99:15:DC:EA:85:20:61
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 019CAD904EFBA35B956864B5D246A1392C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number: 0EF1
Signing time: Mon 02 Mar 2026 08:00:41 +0000
Manifest this update: Mon 02 Mar 2026 08:00:41 +0000
Manifest next update: Tue 03 Mar 2026 08:00:41 +0000
Files and hashes: 1: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: c7dToDnuhm0zO7nwFjDRxWYkMEq1RNxaG72coLAXICI=)
2: cXrbKTXhSK7ki4TmnfmJOJqU_kQ.roa (hash: wGt3eC7XgUqAIQ3KH0Xjs1sf60C7d5hlU+BmNSn3D5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:4e:fb:a3:5b:95:68:64:b5:d2:46:a1:39:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: Mar 2 08:00:41 2026 GMT
Not After : Mar 3 08:00:41 2026 GMT
Subject: CN=3dcd2c67d2b741bad0741eeed09915dcea852061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:af:b4:b4:db:ca:a1:ca:42:32:b6:79:1a:
d0:b0:3c:ce:46:58:67:b9:a7:1d:dd:ca:f5:df:7e:
f7:f9:c4:cd:aa:15:03:45:e4:82:68:c3:35:43:e7:
f5:55:89:f2:06:a8:c4:a9:03:80:e6:bc:9a:15:cb:
38:78:e9:e8:b9:91:f7:cd:97:12:54:37:3e:a3:22:
28:e8:b4:fd:01:eb:db:02:14:01:81:36:1d:16:55:
ff:37:f6:af:be:b3:4d:47:77:d1:5e:ff:75:b9:8f:
f8:f9:29:79:89:33:c4:81:19:77:e9:da:d3:52:44:
af:9d:12:38:9b:05:9d:c0:b6:dd:34:14:42:17:5b:
c3:9a:0a:8e:a2:0f:57:fa:3c:be:c6:0b:f6:09:9c:
33:24:5c:30:a8:4b:4e:ce:06:fe:97:14:5e:7c:a3:
8c:3f:31:7b:a3:10:9b:d2:e8:a4:41:7d:d2:21:6a:
56:6f:a4:4a:5d:e4:1d:02:89:5c:dc:b0:62:ad:da:
3d:cc:3b:dc:06:04:5b:4d:34:fd:ad:4d:76:af:20:
8c:4a:66:7a:b0:8f:22:08:fd:21:61:83:d2:a2:08:
31:46:0a:54:3c:71:52:ff:56:a0:3a:27:eb:2c:e8:
70:6c:15:1a:10:59:5e:ed:40:6a:ad:d3:ed:38:fc:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:2C:67:D2:B7:41:BA:D0:74:1E:EE:D0:99:15:DC:EA:85:20:61
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b0:92:11:a7:f1:6f:70:ca:2a:01:ce:d4:c7:26:37:c8:19:
72:d2:a0:e9:43:c6:46:98:fd:38:1d:7a:8f:4a:c2:37:10:12:
0a:5e:a4:4c:a4:e9:26:68:7e:24:89:94:8a:8f:9d:58:eb:55:
40:94:5e:47:47:bb:e4:eb:9f:af:49:64:78:e4:a7:08:cb:3b:
da:0f:76:f6:ba:9f:c5:e6:47:0a:5b:fb:d6:0b:2b:9e:31:b6:
6d:85:3b:24:84:b6:f1:67:73:1c:95:d9:8a:d4:fe:eb:4d:01:
e7:08:75:c2:99:e3:d6:51:fc:f5:75:bb:8a:04:98:0f:72:dd:
07:2b:44:3c:02:1d:d2:51:05:72:5c:7c:6f:1c:53:67:f1:12:
40:dc:c8:ef:f6:9c:0a:73:fc:a3:ae:57:b2:80:cb:59:a3:3a:
b9:56:a8:f5:e7:f1:a3:ee:40:dd:23:25:62:12:95:26:ff:c7:
57:72:26:78:73:48:ce:21:0a:c0:4f:e7:a9:ef:b2:e4:69:3b:
22:ed:0a:48:b0:2e:b5:31:f6:99:03:4a:47:47:e2:02:54:85:
49:2d:48:06:75:ce:10:6b:9e:4f:a0:1e:d1:48:27:85:4b:fb:
1a:b7:6f:b0:2b:44:23:3f:42:ad:68:a0:0e:ab:7a:6c:3e:a5:
c0:14:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:48 2026 by rpki-client