Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier: 4awcq9LpWN8m5I7ehVD5dqI1FORRMVjr4Dw901S9+mg=
Subject key identifier: 5C:7A:FE:5C:CB:51:8D:9D:FB:71:7D:6A:B5:F4:49:82:EE:18:ED:0F
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 019CAA58B3F4960E39ED69D206D30B4AB61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number: 0DDB
Signing time: Sun 01 Mar 2026 17:01:05 +0000
Manifest this update: Sun 01 Mar 2026 17:01:05 +0000
Manifest next update: Mon 02 Mar 2026 17:01:05 +0000
Files and hashes: 1: 2gL5kS5knkNfeejSTgCsY7lVOJg.roa (hash: M7tZEiNHhGn+2BXSnDrAoQUr1eF6UodCnHxeC7Oeok4=)
2: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: 2v1nl5meNNgCNQygKkwvbDUBiPzKjHQ8S2ennwVt7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b3:f4:96:0e:39:ed:69:d2:06:d3:0b:4a:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Mar 1 17:01:05 2026 GMT
Not After : Mar 2 17:01:05 2026 GMT
Subject: CN=5c7afe5ccb518d9dfb717d6ab5f44982ee18ed0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:88:e7:ad:ad:95:b3:84:82:b4:53:06:33:
87:ae:3c:68:11:90:c9:5f:9a:e1:96:69:d8:72:c0:
ab:7f:01:1d:1a:c0:12:97:fa:cc:19:fb:63:04:e5:
d0:6a:eb:31:ae:b3:96:8f:ca:e7:7c:86:52:20:c2:
b2:9c:3e:0f:eb:8b:b4:0a:c8:b0:cd:99:84:ba:73:
92:f6:0c:3d:1f:bc:53:27:10:f4:86:0e:65:06:61:
63:4f:64:f5:bd:7a:e1:d9:90:81:a1:3e:d9:df:0f:
a3:3c:50:21:d8:d6:98:98:c5:18:38:4c:f1:15:4f:
a9:b0:28:57:bc:ff:ee:51:2e:d7:f2:7d:e3:ce:3b:
2a:68:3d:07:f4:6e:33:e3:40:f9:0e:d7:7a:cc:65:
35:1a:0c:0e:e5:75:3c:9e:b8:f0:2d:ac:38:73:53:
f7:5b:40:3d:ff:f0:21:fc:17:8b:72:49:04:6d:1c:
12:0d:6e:0e:51:a0:10:8a:41:4a:22:eb:92:a3:ab:
27:ef:21:54:43:5b:ef:b9:82:03:09:08:61:d0:82:
ae:ba:cf:b7:d5:38:31:db:94:8d:f4:42:4b:32:ab:
92:fb:84:bb:56:29:b4:4f:a7:56:51:0c:95:ff:78:
3c:bc:50:81:00:99:67:22:b7:e5:ba:40:1c:31:d9:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7A:FE:5C:CB:51:8D:9D:FB:71:7D:6A:B5:F4:49:82:EE:18:ED:0F
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:78:3c:f9:ec:80:77:90:28:cb:e4:81:4b:24:3c:97:d6:bf:
34:46:c8:44:ea:8e:51:78:fb:8a:b9:e7:a5:03:6d:88:d5:21:
af:37:b9:f8:32:40:ae:29:3e:ee:29:5d:7c:93:9d:3d:1a:18:
96:bd:f8:05:da:b2:83:b3:a3:5d:ea:8e:67:a9:5c:67:66:32:
19:60:5a:71:fe:57:44:4c:0a:8a:98:0e:bd:53:78:07:ed:03:
7b:25:79:5f:9a:e7:69:f8:99:cc:f7:a9:04:6d:b8:61:cf:62:
03:8e:70:1f:51:85:c9:89:11:dd:fe:63:c2:8d:f8:9d:ae:1a:
34:03:c7:30:60:91:cc:d9:28:64:5f:71:ba:87:95:3d:38:72:
91:8b:50:3d:c7:82:29:51:36:41:fb:d5:31:f7:87:64:24:4e:
a3:b5:1b:b5:ec:aa:72:b6:a8:c8:72:8b:94:5d:c5:ac:c4:02:
a7:b4:dd:62:c1:25:b7:d2:3a:e9:67:5d:d5:40:1a:3e:0d:e1:
af:13:8f:c6:dd:47:4c:65:89:b6:9d:3e:d3:e4:84:f8:6b:95:
30:3c:7c:80:14:af:b0:07:35:1e:f0:7b:3f:22:53:64:f2:6d:
42:e5:31:98:91:19:b8:ac:34:cc:b1:48:9b:38:86:b3:41:59:
a4:7e:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:53 2026 by rpki-client