Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier: KzMyeMaQUqtQdBL6EXOtzwcpBDBGGR3FR5GNCBxTXBs=
Subject key identifier: AC:E4:71:8B:21:1B:FD:F2:DA:3B:A7:B6:F5:91:BC:86:56:53:04:4D
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial: 019CAAC6CB2C30C9245AE25A896E994B3479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number: 0424
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: Is0EtUEGPtj5iPMrI__B634d_Gg.roa (hash: UcnAE32bQjXyoFuSdzK7Ox1KjdWOO+CqE8BXmt6ncsQ=)
2: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: 8xKJz2UH4xooIMMtGa5Uq5c3ULumjyNFG3ZdX2VFuQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:cb:2c:30:c9:24:5a:e2:5a:89:6e:99:4b:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=ace4718b211bfdf2da3ba7b6f591bc865653044d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:e5:72:c0:c3:0e:b1:e4:ce:10:59:42:ed:
95:c0:b4:8b:d5:db:72:98:7b:e8:4c:76:05:f6:e1:
a0:00:8e:30:fe:98:02:44:63:ca:e1:e1:a9:ec:12:
4b:fd:1f:be:58:a3:8c:50:80:a3:ac:14:f2:c9:83:
7d:82:68:d5:2b:ad:6a:0a:30:4d:48:dc:17:1d:b1:
55:5a:f4:09:c4:b5:a9:d6:b3:68:20:ac:ef:f1:62:
55:3b:96:d4:d0:44:dc:18:61:1f:01:5c:b0:f8:69:
af:4a:ca:9e:87:49:6f:18:a8:1a:b6:58:d7:f1:32:
8d:b6:93:a0:9b:74:ec:ba:5d:db:8a:83:10:b4:16:
40:e3:76:d3:21:8c:a8:00:a1:9b:6c:7f:2d:ad:35:
8c:4f:36:3e:a4:f4:43:e5:06:65:28:a9:09:9e:1f:
ba:f7:56:08:34:e3:fd:33:8a:55:0d:44:4a:31:ee:
dc:53:4b:55:4c:00:2f:d2:ec:d6:55:1a:85:b1:64:
5d:b7:e1:16:6a:5b:43:14:48:6e:68:ea:43:f4:f3:
c4:d2:13:1a:c3:79:d7:82:3e:9d:4f:56:d3:85:02:
9e:f1:62:36:b4:73:3e:f4:7f:8e:1e:4e:1c:50:16:
c9:a2:33:34:e1:2a:49:ae:2a:b7:52:84:18:b7:2f:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E4:71:8B:21:1B:FD:F2:DA:3B:A7:B6:F5:91:BC:86:56:53:04:4D
X509v3 Authority Key Identifier:
keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:31:0a:f9:92:24:a8:46:30:2c:57:42:c3:33:5a:12:8a:b0:
22:69:0c:c2:e3:53:d9:17:58:0d:bd:5a:af:67:94:a4:5d:01:
0a:e2:ed:8f:be:26:23:1d:18:99:42:7b:46:db:7c:b7:b1:0e:
f6:c0:58:5e:5b:3a:29:81:e4:d3:32:15:b9:1c:eb:ff:17:be:
c1:7a:54:31:9d:23:19:bc:a1:fd:53:7e:e1:6c:3f:d3:3f:86:
54:92:a1:05:24:f2:3e:a1:c4:67:4a:a2:1b:a2:64:7d:96:81:
62:eb:30:29:3d:42:28:bc:53:c4:a4:de:11:be:31:53:80:41:
e5:6d:8a:d9:9e:38:0a:38:3a:f5:bc:13:ca:84:ce:87:2f:7f:
22:43:c5:d3:2c:df:49:e4:17:9c:89:89:1f:c7:46:3d:5d:b7:
f5:8e:a9:a6:44:09:2d:9f:6d:88:fc:ea:86:1d:ce:15:8e:8e:
9b:ec:62:3c:9d:9c:c0:66:8f:67:45:e7:f5:fb:7c:ba:cf:b5:
31:dc:5a:0a:51:83:d0:45:a7:76:56:af:6f:ec:24:9c:3e:b6:
58:45:f8:c1:4d:5e:e6:ea:27:85:92:3b:9b:de:bf:74:81:0d:
49:32:37:55:3a:17:5a:32:8b:40:56:7a:fb:65:64:b1:74:f4:
39:e1:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:23 2026 by rpki-client