Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: ctxMXNQDAVDJYiM3Ih/wdiia5YT4NnINDuVEV+O1G5s=
Subject key identifier: CE:E4:F4:C2:13:CB:F3:CD:69:7A:D2:59:F1:FB:92:89:F1:89:19:E1
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 019CAF48144E4C466E992D1426CF73AD1225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 04A5
Signing time: Mon 02 Mar 2026 16:01:02 +0000
Manifest this update: Mon 02 Mar 2026 16:01:02 +0000
Manifest next update: Tue 03 Mar 2026 16:01:02 +0000
Files and hashes: 1: 2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa (hash: VPm4JxETY4pUG2qbLQfLY9WMJOpVuE0GwkXWlkKqHlA=)
2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: +pJFI43PManqEGq3tUV1cmoafWq8vVEooOty74ffgYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:14:4e:4c:46:6e:99:2d:14:26:cf:73:ad:12:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Mar 2 16:01:02 2026 GMT
Not After : Mar 3 16:01:02 2026 GMT
Subject: CN=cee4f4c213cbf3cd697ad259f1fb9289f18919e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:98:04:04:74:ac:fb:17:36:6d:c9:17:f4:bc:
c1:6d:b6:e7:b5:60:37:dc:ea:86:05:dc:8a:b0:0d:
f7:c7:99:17:2c:28:5d:53:d9:78:5f:ca:bc:1f:a5:
d7:61:df:3d:0e:84:5e:5e:71:0f:cd:c0:ae:33:b4:
b6:5c:11:bf:d2:ff:d6:3f:8c:b6:95:09:98:c5:db:
43:97:ee:c9:60:8a:f3:15:0a:78:91:02:3c:57:ee:
e1:48:09:e1:d1:1c:c3:b5:c9:b4:d6:6c:cb:39:d2:
34:ce:14:34:62:3c:da:c9:06:da:b1:b2:ec:71:76:
c2:2b:c1:48:c3:1d:09:1b:eb:1d:8b:06:48:14:e0:
e1:8c:a2:64:4e:96:b0:0c:96:d5:c7:71:74:0e:af:
d8:d1:ae:c0:42:80:c2:ca:72:79:3f:2d:ea:eb:5d:
d4:7c:45:9a:0e:8e:fb:e2:46:4c:d9:ce:87:f3:d0:
8f:74:20:02:4e:05:cd:b5:f4:81:93:14:d6:3f:a8:
75:31:22:a1:00:40:f1:3e:49:76:29:9b:28:ce:f7:
88:1f:b2:f8:c2:2f:aa:0d:4e:1e:76:1e:c6:0c:4e:
56:af:ef:8c:3a:2b:90:95:9f:85:23:25:98:4c:cc:
fe:b2:c6:07:7f:8f:ee:ac:fb:a9:36:b4:cb:39:3d:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:F4:C2:13:CB:F3:CD:69:7A:D2:59:F1:FB:92:89:F1:89:19:E1
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:40:4c:de:06:93:14:bb:77:70:a7:70:27:d2:d1:0e:c9:18:
f2:77:73:95:5d:f7:0b:b2:f7:a1:85:04:18:5e:15:9e:07:ec:
48:f4:f5:ec:bd:9d:db:00:55:40:3b:c7:04:d5:f3:43:fe:43:
16:96:26:33:7d:42:b1:13:94:b8:e3:ad:4d:63:45:cb:c1:36:
bc:87:c0:e5:7d:8d:c1:77:1c:19:d1:53:c7:7b:5f:b0:bd:c0:
e5:d4:cd:5b:fb:0b:94:45:b1:3b:33:9d:a6:a6:3c:6f:c5:5f:
92:12:63:eb:fa:eb:11:2c:27:c3:0f:71:02:ff:d1:7d:20:ad:
fe:6f:27:ef:72:57:f0:5d:ee:bc:a7:49:38:8a:d9:36:af:72:
d3:fb:0c:ce:c4:34:0b:63:3f:ee:96:c7:34:4b:80:28:48:23:
4b:e1:42:f9:e0:d0:8f:4a:fc:07:88:e7:d6:10:49:e7:b5:0b:
e9:9d:58:38:39:10:c5:a5:8e:c8:e8:8b:5f:98:c4:d1:3c:44:
15:cb:13:46:7d:65:0b:e3:f9:a4:e8:5b:99:db:4f:01:df:70:
dd:53:6e:4a:35:b6:80:16:88:43:d5:93:10:86:65:86:db:8d:
0b:d6:fe:6b:f2:cf:85:29:09:54:49:7c:00:d8:e9:52:d0:99:
fa:86:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:22 2026 by rpki-client