Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: iPvOlcnsxmKuSNZIc5iZOUyd4oILT4T3kuORvP1iM3I=
Subject key identifier: A7:57:00:51:8D:BE:B8:E2:B3:A2:A4:A9:F1:50:A6:AF:5F:27:49:1E
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 019CA9B36868AD106534579B9CE6305334DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:00:32 +0000
Manifest this update: Sun 01 Mar 2026 14:00:32 +0000
Manifest next update: Mon 02 Mar 2026 14:00:32 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: 9N9XN5ndtijHGtUZ8r6DcxxBjdNC2ZLRZdYGPSgaYPU=)
2: QJ1CsNmZtrMfqsM-LahkitaRmoc.roa (hash: 16917vIR1cAkmi46t8D1rEf6dQGk7zBSOY9QqyvHf5E=)
3: ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa (hash: DDgrDiLhVwMu1oS2zAdeQKa6HlRGjZ92/REsC3Si5kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:68:68:ad:10:65:34:57:9b:9c:e6:30:53:34:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Mar 1 14:00:32 2026 GMT
Not After : Mar 2 14:00:32 2026 GMT
Subject: CN=a75700518dbeb8e2b3a2a4a9f150a6af5f27491e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:4f:ba:89:99:4b:da:9c:d0:e7:43:54:88:
a6:c5:f0:49:9a:ad:ce:5d:45:ad:05:10:9b:33:3b:
7b:19:6a:95:f4:8f:76:54:30:36:a2:76:af:65:3b:
62:9e:05:e1:4a:e6:7c:30:5f:1b:1d:8c:63:1b:77:
fc:d3:b6:07:48:9c:dc:a6:66:c3:73:55:5c:32:e8:
3a:f4:44:37:02:5d:2e:cb:58:da:8d:4e:92:0a:9e:
62:66:5d:ac:2d:b6:84:5f:e8:2d:0c:2e:df:d2:5f:
da:d0:48:e8:a5:70:31:0f:4d:a0:27:d7:6b:7a:67:
6a:44:ec:d7:d3:eb:f0:37:b5:0e:67:38:e0:23:c3:
fd:76:07:a0:29:81:2a:b1:98:5c:f9:0e:b0:f9:04:
73:02:bd:6d:cd:3e:57:d3:0d:44:e2:a6:b2:32:b0:
cf:a2:a4:50:9a:c3:3f:b5:03:c8:d0:f5:bc:c8:18:
9b:0a:89:87:de:4c:de:5e:85:83:00:77:95:36:d4:
9e:3d:1f:15:3a:54:63:84:09:e4:5a:57:f2:58:75:
11:d3:e4:ef:8c:d0:07:28:8f:ed:d1:a9:bd:9e:cc:
c3:de:65:e6:1e:fb:87:34:fb:0d:db:43:99:ac:b1:
9f:9f:57:0b:51:56:1d:04:85:88:ca:0e:b2:ae:1a:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:00:51:8D:BE:B8:E2:B3:A2:A4:A9:F1:50:A6:AF:5F:27:49:1E
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:27:aa:7c:c0:72:68:67:1c:9b:9a:b9:a7:2b:34:d6:12:00:
f7:9f:47:08:be:9c:3f:12:06:ff:14:1a:38:93:29:96:d5:87:
de:55:5f:fc:7c:10:db:d8:22:b0:da:07:3c:1b:f0:e3:3e:fe:
60:af:5f:1e:91:39:94:21:8f:a9:54:2b:98:73:76:80:06:4e:
2c:87:62:4c:32:c3:94:84:47:ac:49:36:5f:bb:68:64:d8:47:
76:64:03:1e:19:1b:f2:1a:ea:53:c1:7e:98:85:c9:68:17:8b:
96:b7:0c:a6:b6:dc:ef:80:f4:8a:bb:af:b5:01:5f:b7:75:ea:
ab:4f:6d:73:77:9d:ff:86:74:c4:f6:47:7c:3e:e9:e1:05:b1:
0f:b9:ec:81:5b:5a:d8:b8:34:e5:b1:b1:c9:37:65:6c:e4:3d:
f5:d4:d8:54:5c:df:bb:f4:5e:fe:fe:0f:e9:5a:f8:a8:1c:2a:
76:c5:fa:46:a9:36:11:b0:5f:10:0f:06:c1:5e:fe:c0:20:ce:
34:a1:45:70:36:d7:b1:6b:0e:40:6c:d8:06:5c:25:21:0c:d8:
10:35:30:d1:5b:07:8c:89:b2:d1:d9:6b:7d:ed:dd:64:e5:1d:
a3:3a:16:98:5b:2f:f4:06:86:0d:ae:5a:71:7c:63:ac:7f:99:
c4:c1:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:31 2026 by rpki-client