Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: HpkM0HZpRrLmw7RZFzm/Oy6OICMRpWOwxP3DNavVkeo=
Subject key identifier: 32:33:69:90:81:82:89:05:19:B3:92:47:E4:AD:C1:56:42:1E:08:4F
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 019CAD5A4E8FA7F26A4FF5F3DB412B9DBCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 07:01:42 +0000
Manifest this update: Mon 02 Mar 2026 07:01:42 +0000
Manifest next update: Tue 03 Mar 2026 07:01:42 +0000
Files and hashes: 1: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: aEBYTlxEym7XpgKaputoMF/Xhh8M9gd11U86P5qcDro=)
2: TY-6wIosCGnW66OWe0_NroPMbeI.roa (hash: nXhbRc2aX8mNZLPnZ6EyWqXf/5jOIvwFHTTVaDOKJ7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:4e:8f:a7:f2:6a:4f:f5:f3:db:41:2b:9d:bc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Mar 2 07:01:42 2026 GMT
Not After : Mar 3 07:01:42 2026 GMT
Subject: CN=323369908182890519b39247e4adc156421e084f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:59:99:60:b0:47:4f:24:e0:60:2d:aa:45:
33:c9:04:54:fb:31:6e:6c:b6:99:3d:d5:91:1b:fc:
21:d5:aa:84:c7:55:ab:31:b8:70:5e:7f:c7:90:46:
56:82:11:90:1b:28:9e:98:e3:68:ad:11:00:61:2d:
8f:e9:0f:dd:ee:8f:7b:1c:b2:74:dc:99:8b:57:ea:
37:c6:fb:d8:37:df:99:64:89:3b:86:75:ec:64:c8:
0c:30:2a:fa:3b:d8:22:52:2e:d9:79:a6:5c:4c:32:
b7:05:83:52:49:8c:d0:48:a6:43:6b:d5:17:c5:40:
11:39:93:41:57:0a:0c:1d:6b:5e:aa:83:3d:9f:ef:
a9:be:35:b6:52:b4:5a:4c:e0:13:ec:41:6f:37:e3:
80:50:ed:ef:aa:6c:d3:6b:3f:c4:76:29:00:b5:97:
3a:c6:ae:12:e1:ea:df:d1:fb:42:e0:10:f9:6d:9c:
24:3a:fd:28:61:79:f4:2e:21:77:3e:86:5d:c4:50:
39:81:0c:0d:dd:a0:8e:3f:df:06:24:a2:a0:2a:93:
f2:c0:f5:a0:00:7b:75:27:8c:0b:e3:f5:f8:52:5d:
7f:d6:f1:41:a9:2e:c8:3b:dc:4f:fe:b0:28:a9:f4:
fd:9c:c5:b4:5c:ad:a9:a2:7a:02:8f:86:38:cc:10:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:33:69:90:81:82:89:05:19:B3:92:47:E4:AD:C1:56:42:1E:08:4F
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7a:3f:2b:30:82:8d:c0:00:a7:59:04:55:da:12:c0:ee:d3:
ad:8d:ce:f1:3e:17:d8:d8:69:8f:6b:69:90:e6:0d:c5:f7:89:
b2:45:7a:af:37:96:04:83:91:9e:14:42:46:0e:d0:2b:53:c2:
4a:28:61:26:3d:d7:b4:9b:b6:9d:42:f6:1c:b5:4a:eb:f5:3a:
c1:76:c4:84:f3:f1:27:6e:17:2a:0d:4b:c5:01:32:53:6d:04:
5e:8f:98:fd:8f:1d:19:09:6d:32:c2:a0:7f:23:1a:a4:a1:1c:
76:e8:69:7e:cf:66:7d:c2:b2:56:f2:e0:ef:01:28:cb:32:31:
4d:cc:54:b9:fb:e5:2a:35:93:b0:bf:13:9e:60:f0:52:05:a8:
99:77:8f:96:06:06:eb:dc:fa:f7:d6:ab:0a:65:7f:b1:2a:b7:
85:48:5a:fa:19:15:5b:11:86:5a:2f:c4:95:8d:6b:8d:5e:bb:
4f:f7:a5:27:b8:4c:46:6e:10:49:ff:5a:fc:c5:37:c7:98:a6:
14:fa:a3:60:c0:b0:b1:31:2a:b0:02:e7:5a:7c:e7:16:23:a0:
f0:6d:ea:65:16:c0:f0:27:4d:83:c2:88:86:99:3c:1e:d3:44:
3e:18:7f:27:fb:47:b6:40:9c:a4:69:79:34:d5:cc:33:0f:61:
ac:92:e9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:45 2026 by rpki-client