Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier: wmdZF15k9AOsPah8rvt29juaM1Ayd/JEAJFwIvjC5c0=
Subject key identifier: B8:C3:C7:E4:62:17:F2:31:32:16:E0:D0:81:A0:BE:1F:B9:EB:77:F4
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial: 019CAC7E0B62FC28E9B030AEEEF915A9EFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number: 179A
Signing time: Mon 02 Mar 2026 03:01:07 +0000
Manifest this update: Mon 02 Mar 2026 03:01:07 +0000
Manifest next update: Tue 03 Mar 2026 03:01:07 +0000
Files and hashes: 1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=)
2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: l6YAa7PPWFr7ieVOYfVz+Bu15uLaMsrVDgMiS64cR98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0b:62:fc:28:e9:b0:30:ae:ee:f9:15:a9:ef:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Validity
Not Before: Mar 2 03:01:07 2026 GMT
Not After : Mar 3 03:01:07 2026 GMT
Subject: CN=b8c3c7e46217f2313216e0d081a0be1fb9eb77f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bf:bc:ee:c4:0a:b3:27:40:26:63:a2:17:e6:
c3:5d:4b:e8:44:c8:88:5f:05:69:16:66:2f:11:35:
0a:34:14:e7:8c:a4:9c:f1:0e:94:98:f6:e4:d8:33:
b2:16:d9:d7:e6:7a:29:ec:19:e5:c1:e7:77:b3:65:
fa:8b:b7:b3:5a:e3:f7:08:09:22:4f:8c:c4:63:5e:
4c:54:d3:69:e8:cf:f7:1a:f8:19:42:f0:d0:44:f1:
77:52:59:2e:e2:4d:c9:bc:ac:1a:77:3e:72:d9:1f:
a1:e7:e3:f8:af:2b:18:db:c2:64:99:c5:f6:f5:e1:
24:a2:6a:4a:76:f6:db:f2:6c:dd:0b:f5:63:b4:e1:
66:d1:c9:57:06:6f:b8:3a:a0:f2:1a:a6:9f:87:23:
a4:bf:9d:25:65:b4:96:83:b2:e2:34:9c:a6:a8:d0:
88:4f:20:43:17:c0:c7:68:8c:5a:96:58:f6:a9:32:
2d:b5:4a:b2:9d:59:36:7a:e3:4b:44:dd:f8:cd:3f:
c8:c3:23:45:5b:a0:39:ab:08:81:39:c2:58:8b:86:
b6:1e:ef:92:17:c5:59:6b:11:46:d0:a0:7a:04:7b:
f5:ab:56:f8:db:34:f7:dc:fa:75:7c:ce:af:ed:32:
af:0b:8c:70:b5:27:12:ad:bd:71:2c:03:39:db:a6:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C3:C7:E4:62:17:F2:31:32:16:E0:D0:81:A0:BE:1F:B9:EB:77:F4
X509v3 Authority Key Identifier:
keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4e:9f:94:6c:d5:e6:6d:43:d9:3b:1f:94:65:d8:bc:a1:db:
ca:bb:68:31:ba:72:8f:19:2b:85:61:a2:6d:c8:e4:3e:9c:f2:
9b:5e:b9:10:b0:28:d6:6c:ad:70:7c:ab:c1:22:e6:74:4b:b6:
18:c3:a2:cf:e7:9d:78:6e:2b:1d:ac:57:8a:9c:9c:af:f6:2c:
ee:cd:0c:41:83:4b:9b:ea:4b:d5:e8:f8:89:03:90:40:5d:f4:
82:7e:a5:f9:45:d4:7d:6e:51:e7:ea:c6:b4:6c:91:c4:46:ac:
50:1a:32:d7:2d:5e:96:15:b1:67:9e:be:f6:91:4c:e6:79:2b:
c3:3e:62:eb:e5:df:b0:a2:71:b8:76:ea:a8:7c:33:31:4a:63:
7c:cc:12:30:a7:9c:28:c2:9a:ca:e3:a1:06:da:4d:81:e2:c2:
53:dc:f5:d2:18:da:36:fe:37:ee:b6:08:45:5f:2e:c0:d3:ec:
54:dc:87:71:ca:21:d5:c6:e2:2a:1a:77:a0:98:b1:8d:eb:7b:
76:85:19:53:46:e6:13:27:2b:6f:6d:06:65:ac:06:40:e5:bb:
52:50:8c:c6:66:49:3a:92:bf:81:58:3c:c4:36:be:e4:f6:f9:
24:9c:d2:bd:3d:90:b8:7f:5d:0a:0f:5a:e3:a9:0c:74:bb:20:
c8:fd:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:18 2026 by rpki-client