Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier: Sl1mH8gurjkCmCj9oMdJ4EVUWdorjdWKdnyiedzHsco=
Subject key identifier: C7:F1:05:EA:3C:24:D6:4A:D4:6F:F6:BA:19:CD:C1:6B:C3:BE:F9:6D
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 019CAD597E1111DD31940AB877DFAE5072EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number: 0539
Signing time: Mon 02 Mar 2026 07:00:49 +0000
Manifest this update: Mon 02 Mar 2026 07:00:49 +0000
Manifest next update: Tue 03 Mar 2026 07:00:49 +0000
Files and hashes: 1: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: 1ldP6V1v/cc1TodqjXRC+H8jYddG4V5GwesO2I8mJ1A=)
2: TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa (hash: QmsaqQhRAEGLEdE3C26cYEAQUOOxk2PCRLum00KwaiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:7e:11:11:dd:31:94:0a:b8:77:df:ae:50:72:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Mar 2 07:00:49 2026 GMT
Not After : Mar 3 07:00:49 2026 GMT
Subject: CN=c7f105ea3c24d64ad46ff6ba19cdc16bc3bef96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:30:5c:8a:15:c6:6b:7c:4b:5e:1a:28:e5:
4b:a3:ae:94:fc:ec:d5:6c:38:3f:23:c7:e1:25:52:
c8:e2:61:50:02:44:cc:bd:58:7e:ef:61:7a:c3:13:
c9:53:26:85:78:7e:92:fb:29:f2:47:80:41:34:a6:
59:62:5b:c0:b4:bb:c1:e2:f0:2d:e7:e2:35:51:6e:
26:b3:bc:d1:a0:f9:7a:3d:99:7d:5e:72:14:0b:93:
2d:33:d3:07:88:1a:5c:df:06:37:fc:31:d0:90:98:
88:55:66:c9:cf:dd:5d:b3:57:33:90:bb:8a:90:fd:
e2:81:17:89:45:37:91:a6:3e:82:1d:12:22:9a:36:
d9:2c:95:3d:ef:ed:8f:c2:7d:3e:5d:9b:0e:77:25:
d8:d8:dd:e5:8c:c2:a7:3d:c9:bb:4a:46:62:b2:d2:
82:d5:7b:91:f9:38:02:d4:6b:f0:a2:31:be:a4:e3:
02:69:87:82:1d:d5:7c:ef:f9:63:44:90:ef:dc:51:
01:2f:1a:da:ac:af:57:fb:08:1b:74:a6:16:60:52:
2c:fb:fd:8f:fb:68:11:51:52:26:77:da:6b:c3:1d:
5d:0e:bb:a1:aa:11:b2:9a:3e:94:f6:b3:7a:28:7b:
2d:ca:b6:46:77:5c:b1:06:8b:99:c4:ab:98:f6:ae:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:05:EA:3C:24:D6:4A:D4:6F:F6:BA:19:CD:C1:6B:C3:BE:F9:6D
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9c:46:86:58:0c:c8:b4:d4:95:82:9c:a0:bf:14:bb:9c:f2:
fc:16:68:cd:c5:ae:ea:90:f3:4d:c7:12:e6:0f:6d:23:52:33:
4f:74:bd:05:66:a9:2a:49:97:4c:a6:67:da:39:56:c4:3b:52:
d8:4d:14:9c:9c:3a:0c:64:9a:12:90:e0:cc:f3:f2:1a:e8:99:
38:ef:01:58:40:a8:4e:af:ee:0a:b8:3b:e4:a5:70:8d:ab:c7:
5f:0f:50:eb:2a:e7:26:1a:6d:55:77:4d:c9:6e:67:72:ca:24:
3c:68:90:d9:d0:3d:2b:3e:6d:4c:36:b6:9b:13:d4:21:9c:2f:
d5:29:53:07:2e:3a:0f:d0:9f:f5:96:b2:d4:9e:53:90:6b:84:
cd:75:d7:67:0d:f9:66:0c:8f:2f:61:56:c4:86:63:a0:22:60:
c8:44:41:e7:ce:8b:b2:1c:59:da:20:8f:e1:b6:61:33:00:8a:
33:c8:dd:26:94:81:11:ba:22:0e:d8:43:bd:b4:ec:3f:f8:54:
54:b7:3a:f1:ce:ea:29:1a:0b:e7:99:28:96:ab:4d:90:aa:18:
1a:9e:41:4d:af:2a:31:6d:2f:a3:9e:37:dd:3b:97:61:0c:df:
4c:cc:8f:e5:10:a5:e3:e8:20:c4:b5:c8:45:82:4e:45:57:9e:
f9:32:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:03 2026 by rpki-client