Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: rCP+gZaSfwz0r2YKzqH59HiuSe83L5Gp7WI5Tp5rgmE=
Subject key identifier: C3:99:CB:A4:5F:B6:2F:52:97:EC:DB:FE:9C:D2:EF:BE:5C:1A:2C:C3
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 019CAC4747FDE093BBA1C832F2C140949E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0C54
Signing time: Mon 02 Mar 2026 02:01:18 +0000
Manifest this update: Mon 02 Mar 2026 02:01:18 +0000
Manifest next update: Tue 03 Mar 2026 02:01:18 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: PRa/m7a/WaKR666L/RE0vpSFyJRUzj7oiGVO49rz+Ig=)
2: y8jTWT9EJ8pkTtgwIGRTqM5h54U.roa (hash: K3I6cMPL0u+o1+6/3zyPMYD1BTrTNGIZvyZgHqN7zYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:47:fd:e0:93:bb:a1:c8:32:f2:c1:40:94:9e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Mar 2 02:01:18 2026 GMT
Not After : Mar 3 02:01:18 2026 GMT
Subject: CN=c399cba45fb62f5297ecdbfe9cd2efbe5c1a2cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:bc:3c:04:bf:ca:49:d2:dc:6b:4a:7e:3c:
1f:23:36:89:08:f7:84:6e:0d:42:71:e5:c5:63:6e:
97:59:21:74:81:0d:ec:37:a6:64:f9:cd:2f:19:ac:
82:0e:ed:f2:a7:34:79:9a:0e:fc:37:49:8b:49:c1:
5f:61:ce:62:a1:9e:eb:4d:c5:36:93:2e:ff:96:86:
da:e8:ee:07:38:80:39:fc:54:ac:03:c8:67:35:5b:
3a:7c:37:34:fa:48:93:5f:37:cf:f5:04:40:4a:4d:
23:22:a7:32:a6:35:e6:4c:6c:35:5c:53:28:3f:e8:
16:0b:ed:48:1a:28:8d:11:01:2d:08:c2:5d:63:cf:
f8:c8:81:17:b8:b8:8e:86:38:ca:6d:ca:f1:02:d4:
e4:fa:8d:4b:53:95:ac:c8:30:b0:59:20:86:85:52:
1d:0b:ee:a0:54:bf:e5:da:c9:4e:f6:9f:08:a7:05:
cf:15:e0:de:8f:10:aa:0a:2b:19:8c:c5:49:ad:d6:
d5:24:5c:8f:38:98:48:c9:8a:bb:b7:37:8c:43:a5:
9e:d0:d6:a2:b6:43:f5:2d:30:e3:f3:66:3a:6b:29:
4d:35:ec:6c:c9:14:e0:3c:56:99:95:0c:17:83:ef:
42:12:1e:72:e6:16:49:21:70:b7:be:fa:06:69:59:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:CB:A4:5F:B6:2F:52:97:EC:DB:FE:9C:D2:EF:BE:5C:1A:2C:C3
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:17:6c:2e:1f:7e:91:71:e5:5a:e1:af:8a:d4:5d:1d:7f:65:
f2:fd:4c:3b:ec:c7:4b:e1:68:8b:fa:d9:1f:6c:c1:c8:bb:5d:
45:32:c6:37:6d:4c:8c:b8:ee:36:3f:d7:ff:bd:9b:ba:d0:41:
b8:fa:d7:cb:b2:1d:0e:c8:24:05:46:a5:78:09:26:fd:7a:ad:
c4:99:0c:ee:7c:18:a7:9b:41:d4:7c:ac:58:e5:1a:82:bc:fe:
96:56:94:ae:c2:f9:24:85:89:a9:1f:a5:f1:11:06:14:84:fd:
7c:e2:26:b7:75:8e:33:bb:cd:34:a0:3b:d2:4b:77:f5:91:8c:
9f:5c:f6:d3:0f:6d:86:b9:a0:bd:07:6a:93:82:8d:9b:3b:c0:
8a:26:f4:f7:c6:65:42:89:d4:02:62:35:4f:b7:d2:b2:69:79:
31:58:9e:28:af:bd:82:a3:99:07:3f:6f:20:93:69:ea:69:89:
e3:a8:8f:c3:b1:20:dd:58:25:d3:e0:c9:ed:7d:e0:5f:a8:a9:
fe:63:7f:70:8f:6b:4d:70:4c:33:d3:1d:fe:41:2e:24:80:a3:
e5:c8:83:e4:6d:24:54:13:ca:28:9c:20:2e:55:81:a3:e5:54:
4f:93:46:eb:32:a0:66:48:cc:33:e5:d3:89:e9:c8:08:45:64:
57:78:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:53 2026 by rpki-client