Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: 2EeYB7GsnSPQlOma2IscTeR/PGwXvJeQ9S8eEnLb5uE=
Subject key identifier: ED:78:9E:67:12:82:D9:3F:C6:2D:40:B4:90:D3:F5:41:DF:85:93:55
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019CABD9417DA5690CFF18D4352F1224918D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 15DB
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: hiDPkwErPprM5EVFs/D24qX88pnpFQdqTRACaEKmVEg=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:41:7d:a5:69:0c:ff:18:d4:35:2f:12:24:91:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=ed789e671282d93fc62d40b490d3f541df859355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:3d:e3:9b:c1:42:19:e9:01:45:35:3a:f9:
da:ef:41:53:d1:2e:67:f9:73:b4:78:b3:5a:34:25:
8c:69:16:de:be:84:d8:1f:36:03:4c:77:5c:3c:4f:
f5:21:ba:7e:bd:72:2d:ac:71:5b:fa:35:1b:93:5a:
1a:91:05:0f:6e:8e:8b:06:8c:63:4d:c2:7f:43:95:
8c:fe:04:5b:8e:41:5f:b8:9e:d3:7c:d5:01:a8:11:
13:c7:31:85:51:df:52:8f:8a:5a:34:59:b2:4c:75:
70:ab:c6:c2:9b:74:bb:e3:6f:c9:af:03:5c:9e:c2:
b9:69:a5:7c:00:4b:69:fb:b2:9b:b0:6a:32:7b:6d:
82:97:c6:31:2f:fe:52:07:d0:a3:75:22:2f:68:35:
9a:95:c0:bb:13:54:16:da:8b:10:03:44:49:fa:8e:
08:22:41:99:66:dd:3b:87:62:63:bf:42:50:7b:bf:
fe:6a:db:9d:3a:97:9d:40:31:3a:cc:dc:b9:0a:fa:
aa:66:5d:80:92:cf:b6:33:82:b9:64:43:2c:13:80:
2f:44:aa:1a:14:fc:dc:65:96:7f:0c:57:d7:37:bd:
a4:a3:cd:5a:a9:a8:dd:dd:96:a7:9f:98:dd:64:a2:
55:44:c9:15:6c:9b:a5:e6:f1:f2:78:ce:28:fb:22:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:78:9E:67:12:82:D9:3F:C6:2D:40:B4:90:D3:F5:41:DF:85:93:55
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b2:02:fb:14:8c:4c:95:b8:52:c7:69:7d:f6:55:2a:5c:2a:
59:f0:59:48:1b:90:cd:3a:68:36:95:10:fc:49:0a:84:db:a5:
c1:9b:aa:34:f5:25:a0:2e:57:25:3f:2d:70:23:b6:63:8c:fb:
ad:9e:8a:15:56:74:23:5b:bc:24:a7:ef:ba:33:6a:30:45:f3:
7a:0c:93:8c:12:98:33:0d:f2:3b:9e:73:64:de:fa:21:96:22:
f5:98:77:86:8c:28:03:b5:79:93:15:31:87:51:6a:90:6b:14:
a6:21:0e:16:57:ef:5d:4f:85:c4:ac:0e:79:82:a3:f3:3d:a7:
8a:7b:43:1f:35:de:de:f9:58:ec:2f:a7:bc:76:29:0e:07:23:
62:34:69:05:4e:0c:54:93:5e:45:c6:c1:d8:f4:10:de:f7:44:
9e:72:05:62:73:15:81:99:13:91:89:13:1b:cc:d5:94:e5:f0:
26:c1:42:1e:0b:4d:a5:2a:b5:ec:53:51:f1:ad:e7:39:0d:45:
3d:26:a0:05:8f:0c:25:36:ee:50:fb:5b:e2:3e:b9:49:32:b2:
d3:6e:ee:fc:d7:ec:bf:4b:a2:10:6a:80:58:b2:ad:dd:11:bc:
7a:70:47:b8:02:44:05:06:64:69:d0:ea:b7:51:cf:c9:d6:ac:
df:5c:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:15 2026 by rpki-client