Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier: Tqsw7FDkM5DhWOZsbRmMzVpdhjVb5uXAfWUmBYQPws0=
Subject key identifier: 33:E4:D1:42:79:19:8B:9E:FF:8A:A7:8E:54:B0:FB:C2:57:94:79:22
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial: 019CADFEC24357EAF072A56DFEBD46FA8799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number: 131D
Signing time: Mon 02 Mar 2026 10:01:20 +0000
Manifest this update: Mon 02 Mar 2026 10:01:20 +0000
Manifest next update: Tue 03 Mar 2026 10:01:20 +0000
Files and hashes: 1: LaPWaYnRdzPOHVggeMAoRuWpL4k.roa (hash: CbyTkBWUaIRYJheYloFSm5P53K+AiwdJChkgXRTNeqo=)
2: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: O0+wfhFnTE4F3EYjhrglPc1kVzUsuKF2U48eFJuCM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:c2:43:57:ea:f0:72:a5:6d:fe:bd:46:fa:87:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
Validity
Not Before: Mar 2 10:01:20 2026 GMT
Not After : Mar 3 10:01:20 2026 GMT
Subject: CN=33e4d14279198b9eff8aa78e54b0fbc257947922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:04:cc:37:4d:6e:f3:68:09:4a:cd:85:b0:
6d:8e:88:6a:5e:3e:41:ad:d9:8c:0d:9c:fe:24:ad:
0a:ab:84:d0:bb:4f:f4:74:87:d5:a2:98:dc:7a:72:
ef:05:58:a7:07:2b:0f:0f:a1:0f:8c:22:4f:7c:06:
f7:9f:0d:d8:40:33:35:da:a4:f4:36:91:31:30:43:
e4:c9:17:11:9b:9a:23:ee:9d:1b:fe:1a:77:f7:59:
f5:80:62:7c:65:8b:07:7c:db:56:fc:0f:14:91:38:
1c:ea:b5:a0:7b:c7:e9:12:33:24:bf:17:8e:29:8c:
0c:fc:81:ab:a7:f2:c1:b8:2f:60:25:c0:08:bf:cd:
e3:7d:a8:06:20:71:a1:91:d8:6e:55:71:3c:1e:b9:
ac:22:0f:27:2b:35:2e:62:7a:9d:fe:24:68:4c:09:
05:6f:c2:fc:e5:8b:f1:d2:81:a0:2b:0a:9a:dd:bd:
a9:61:f1:2f:aa:d9:e8:7f:d8:73:d9:0e:9b:96:8f:
02:b8:27:d2:ee:54:53:64:31:e4:d7:cf:16:64:50:
de:59:4c:4b:6f:5f:cd:e3:83:58:82:f1:59:46:2b:
9a:62:21:7a:2e:01:81:c5:1c:1c:ec:91:5e:cb:9a:
9d:e6:bd:66:c7:d5:f2:35:9d:4d:2e:f8:c3:cf:b4:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:D1:42:79:19:8B:9E:FF:8A:A7:8E:54:B0:FB:C2:57:94:79:22
X509v3 Authority Key Identifier:
keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2d:44:ec:37:56:20:a5:62:17:a0:84:73:9b:27:d8:b6:8e:
f1:08:ae:25:c0:c1:d0:eb:cc:da:88:4a:84:a3:a7:39:d0:8a:
b7:9a:c4:23:4c:35:09:95:08:81:e7:3a:da:33:d9:3a:e2:63:
0b:38:44:c3:05:45:e5:4e:1c:71:2d:7a:67:21:f8:2d:9c:40:
48:59:8d:2e:bb:a2:b2:37:08:f3:3f:6a:89:a6:36:b1:1a:b8:
3a:fa:ce:61:26:0c:d4:0a:8f:f9:5d:de:a2:fb:4a:0c:28:28:
9d:89:97:0c:77:a2:0c:96:07:a7:a6:b5:84:ac:c8:30:e2:3c:
5c:0a:59:f4:20:87:ce:dd:31:a5:0c:79:6f:ee:62:83:8c:cd:
17:b0:e0:e5:c2:94:6b:64:31:0e:f2:e0:2d:2d:fe:a2:d0:69:
df:72:62:4b:71:80:d6:80:57:02:58:71:ba:12:c0:ca:1c:b0:
30:97:2c:68:91:a8:54:89:b2:9b:59:8c:24:09:ff:af:be:3c:
46:11:83:59:92:c4:73:c3:4f:f4:66:e2:33:aa:25:bc:2b:68:
f8:1b:17:97:ec:b1:02:30:a0:89:ec:f3:8d:20:b7:de:8b:04:
97:b2:52:1d:56:31:8d:e8:5e:57:da:25:3c:07:df:17:6d:54:
6b:08:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:34 2026 by rpki-client