Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: 5K3JbJLuJKeeeYMRB6ULoeTw+qBO+n+OribHKD6lu6Y=
Subject key identifier: 15:41:6F:7D:66:84:A9:27:F2:F7:56:A4:AB:B0:81:6D:87:AB:02:D0
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 019CABD8F6B9BEEC8614A2264CB19DCD1348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 1619
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: APVxqKMvg7zk562Taso55LCZ43Y.roa (hash: K7kMK7uyiBjgsAZ37sxGRIvYHh9oEyISagZHLGa6SXw=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: gk4cCk11NaDLCJAeo8G2HmecjRPKarvq1dDO1N6+bw0=)
3: UuN7zLVfjwqep8H3gp4uYYBDSlA.roa (hash: c5uP03tTxyD1867dntdszqVBZixLRyo48/FXuLG4BU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f6:b9:be:ec:86:14:a2:26:4c:b1:9d:cd:13:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=15416f7d6684a927f2f756a4abb0816d87ab02d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:59:1e:08:9d:b7:d5:6e:ff:03:69:e1:b0:
04:e2:66:47:e9:b4:87:26:33:18:36:93:40:f9:dc:
0c:e8:65:16:1d:14:82:e9:73:a4:0e:3b:56:7b:bd:
f4:1e:7d:00:60:ba:96:5d:99:31:c4:94:fd:e3:df:
50:6e:ac:1d:43:54:69:ef:7d:a4:ac:3d:1e:24:77:
60:f6:ec:2d:1a:15:01:ba:63:2c:2e:5b:c5:65:64:
21:99:0b:12:b4:ac:d8:a5:c0:e7:f4:98:ba:0a:42:
1f:57:62:48:1b:f1:af:3b:50:40:3c:8c:e9:76:18:
17:99:fe:61:ea:af:88:8b:5b:74:ae:e4:0e:2d:00:
48:44:a8:0a:ed:bf:f4:d4:d2:23:99:75:0f:ec:60:
f8:bb:44:29:28:8e:34:ef:51:34:0e:01:12:c0:97:
ed:1c:2d:45:f6:fe:ac:95:04:27:8c:08:ac:3d:41:
fa:b0:37:41:e2:40:1b:fc:e4:c2:c7:92:87:b7:95:
b6:c5:0b:5b:f5:a1:56:27:c5:d4:2a:de:e3:85:84:
92:d0:af:b5:f2:7e:f2:1c:f5:b7:ec:7f:66:fe:90:
ba:e4:6b:12:7f:04:9c:87:9c:2a:46:b6:9f:09:2f:
ef:8e:f8:1e:52:e5:e7:fb:83:7f:80:86:04:13:93:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:6F:7D:66:84:A9:27:F2:F7:56:A4:AB:B0:81:6D:87:AB:02:D0
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:89:c0:e4:f2:fb:62:51:22:c6:a7:91:64:e9:0b:e8:ae:
46:df:d8:97:a8:94:e1:63:c9:b3:b2:c4:e8:aa:af:57:70:20:
95:0b:41:28:9f:41:19:91:c2:1c:3b:76:fd:4d:61:84:cf:7e:
db:8c:45:17:59:25:ff:0e:c7:1a:e2:b0:43:3a:cc:67:42:17:
96:2e:44:4c:3f:65:30:27:cd:ca:7b:b8:d4:e7:c0:76:57:03:
bf:3a:9d:d0:9d:a6:38:35:9a:51:95:72:fa:fa:ba:f6:ca:24:
60:97:32:39:26:59:d2:e9:6c:bb:7f:a9:01:31:5a:04:2f:a5:
c1:e6:c2:55:4f:a9:50:74:60:92:52:86:70:0d:97:51:20:67:
26:c9:cb:b1:9e:b2:46:9c:75:cc:ed:2a:bf:60:0b:24:00:17:
48:05:61:54:21:b1:b9:04:48:38:6f:a1:77:2e:8d:be:03:57:
fc:ee:6a:c9:70:49:3f:f7:a8:e0:70:47:c3:c9:f5:b8:78:15:
c2:05:20:85:0b:86:3b:ca:a1:ca:97:c4:81:8f:1a:c3:85:fd:
0b:c0:df:35:28:0b:7e:47:af:57:bb:fe:ba:48:4e:1a:5f:ac:
ae:75:24:b2:cb:fc:42:80:7d:86:0a:e4:8d:30:e8:db:a4:71:
80:10:e0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:37:44 2026 by rpki-client