Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: 1/9Z+pjupazM3fpLtXmH3HA+2fgmDVSgTxljDbe7lf4=
Subject key identifier: 09:36:78:0B:CD:94:A0:57:59:8C:54:3C:8F:A4:71:36:AA:59:90:B2
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019CAB34B04AE8F25249BC15F6A04B232A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1521
Signing time: Sun 01 Mar 2026 21:01:22 +0000
Manifest this update: Sun 01 Mar 2026 21:01:22 +0000
Manifest next update: Mon 02 Mar 2026 21:01:22 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: iwowqqHeD9j0+lqiey6HpwGKiQgVPzEc9aYPFk9xVuQ=)
2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:b0:4a:e8:f2:52:49:bc:15:f6:a0:4b:23:2a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Mar 1 21:01:22 2026 GMT
Not After : Mar 2 21:01:22 2026 GMT
Subject: CN=0936780bcd94a057598c543c8fa47136aa5990b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:7e:7a:6c:9d:bd:98:3a:a7:ef:9f:3a:69:
63:a8:8a:9a:cb:1a:cd:85:df:c4:cc:3c:47:8f:a7:
33:cf:38:fa:f3:7a:b1:39:15:5e:c1:3c:b9:95:4b:
a0:4a:de:70:7f:12:c9:dd:f8:6a:1d:90:54:20:97:
9b:a2:2f:58:b5:b7:b3:26:f5:c2:70:91:9b:da:1f:
f2:5f:49:95:3c:b5:36:f4:fe:b5:d6:96:3b:6f:20:
37:0c:41:c0:71:4f:9a:54:20:6f:41:c1:54:39:0e:
3d:6b:16:33:34:ad:67:eb:ac:29:94:f0:ee:8c:cc:
cc:aa:3e:dc:7a:b9:54:c6:99:dd:68:68:19:08:d8:
d0:96:da:cb:b8:f9:8c:31:0d:97:5a:a3:d4:8f:2f:
20:04:5f:40:35:e9:e0:54:e2:bc:ec:aa:68:e5:50:
ca:ac:d4:53:85:c1:9a:4d:f2:1f:ee:a3:3d:cd:ba:
a4:10:cb:5b:29:2e:01:d3:79:20:29:c5:ac:47:e6:
49:65:6b:bb:16:a7:5a:6f:85:cb:ca:cb:e0:f5:60:
5c:0e:1c:ea:64:ea:fe:71:8b:b1:d6:49:67:b2:0a:
6e:cc:be:6c:9e:e7:cd:fb:59:2a:e0:29:ad:52:52:
39:80:a3:4b:d6:3a:8c:bf:63:39:55:69:01:f8:6c:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:36:78:0B:CD:94:A0:57:59:8C:54:3C:8F:A4:71:36:AA:59:90:B2
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:6c:67:c8:d6:47:ff:1b:f9:35:78:5f:bd:bc:ec:9d:e5:
ff:5a:28:bc:bd:f0:2f:ad:7c:fd:97:f0:1f:b5:c0:57:21:74:
ec:f4:ea:ba:6a:88:00:e4:ba:88:08:8b:8e:3f:18:dd:87:1e:
97:4a:e5:c7:6e:ed:09:a8:2f:da:cb:e2:b7:dc:e2:f9:05:c7:
fe:9e:90:8c:97:28:7c:aa:2e:d9:a5:d4:0a:3d:f9:a9:58:1c:
15:15:6b:6a:88:b5:39:86:f1:3a:f1:70:2e:45:dc:40:d4:90:
77:43:3a:43:d4:f3:5b:1f:8b:c9:e7:56:ee:63:8f:82:19:72:
58:f0:71:7d:5b:7a:a1:50:22:d6:c8:7d:80:7c:62:3e:20:7b:
b7:f3:f1:92:d0:68:6f:e2:07:4b:86:0c:00:eb:46:e5:15:b1:
18:eb:94:d7:22:10:a0:3e:82:5d:b2:57:17:83:05:1d:0c:f2:
45:70:8d:12:4d:f4:69:1f:1d:4f:2e:ac:c9:3c:05:6b:07:ca:
85:87:ab:16:51:30:8f:1a:bd:07:28:a5:d6:cc:e8:4d:73:36:
10:9b:99:fb:15:c1:7b:5c:ff:f0:c8:fb:47:1c:5a:96:23:63:
e6:ad:a7:5c:87:04:3b:5b:ff:dd:c3:ad:b5:3d:9f:f0:f0:24:
ed:42:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:12 2026 by rpki-client