Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: rOaVwqFcXv15WqHFh8JB7d+Suumr32T7Oeve80nWEk0=
Subject key identifier: CE:7D:34:B2:C0:F7:CA:37:36:A8:F4:EB:29:08:3D:1A:B7:03:FE:8F
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019CABA230CBC1FD0A12FFCA513D8F2728AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 23:00:59 +0000
Manifest this update: Sun 01 Mar 2026 23:00:59 +0000
Manifest next update: Mon 02 Mar 2026 23:00:59 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: mRK4SXAxCzfjQ/YzHfJDTWVTzy7h9tMsK9h7fPJ8SfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:30:cb:c1:fd:0a:12:ff:ca:51:3d:8f:27:28:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Mar 1 23:00:59 2026 GMT
Not After : Mar 2 23:00:59 2026 GMT
Subject: CN=ce7d34b2c0f7ca3736a8f4eb29083d1ab703fe8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:c7:f3:6c:44:dc:c8:91:4e:24:43:63:59:
66:ce:1f:65:95:cc:1a:64:d2:89:00:c5:f6:2f:6c:
04:79:43:75:7a:fb:13:47:f9:45:6b:61:03:2e:60:
cf:df:b1:10:67:fb:36:db:05:76:b0:e7:a1:7f:e0:
4c:ac:ec:86:05:b1:9e:f0:02:cb:b7:66:c3:6d:22:
83:aa:f4:d3:80:dd:61:90:6a:59:7b:d9:a5:9a:ae:
54:c3:b3:11:b0:0d:11:70:b0:2e:c0:d2:9e:bf:f2:
42:f2:d1:00:a3:8f:f0:9d:23:f2:cb:a5:b0:a2:7f:
dd:58:eb:66:84:c3:94:44:2b:ac:e3:7e:31:e0:86:
eb:9c:ce:27:43:e5:b0:6a:03:aa:0a:db:51:9f:af:
15:7c:66:15:5d:94:21:a6:19:cd:30:30:77:b6:a1:
a1:56:a4:e9:1d:62:74:c7:eb:89:59:c9:31:f7:f3:
0e:4a:2a:1d:9b:4b:d4:4c:73:bc:ed:bd:b7:f0:93:
a7:a9:81:07:07:4e:f2:78:93:f7:4f:cf:4d:4f:9a:
24:41:11:bd:ae:68:d0:82:c8:4a:99:cd:8a:61:70:
7f:79:ca:49:67:4f:cd:bf:d7:47:b2:6b:ed:69:dc:
f8:0b:19:88:9f:9d:0d:1f:c2:67:5b:73:f2:1a:2e:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7D:34:B2:C0:F7:CA:37:36:A8:F4:EB:29:08:3D:1A:B7:03:FE:8F
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e3:99:69:17:32:f1:af:39:e1:e6:ab:16:9d:7d:28:ab:d0:
92:f6:ae:2d:4a:c3:5a:3e:cc:0f:2f:75:a4:53:7a:25:34:25:
91:28:ef:15:6d:8b:b5:bb:91:d6:fb:36:1c:1f:89:8d:e4:02:
b5:7b:31:2c:52:58:aa:4e:fc:f2:20:35:16:f1:61:e9:c0:7d:
65:c0:14:b3:2d:d6:ce:5a:99:31:1c:8c:1d:09:d6:62:9d:49:
1c:3c:ca:79:24:e0:97:d3:f6:bf:0d:05:bb:8b:e5:1d:47:01:
6f:c1:9f:30:25:b8:41:f5:a0:b4:8b:05:6b:18:8c:0f:e3:a7:
ba:74:5c:be:8f:34:ef:7c:e1:80:61:c6:e6:4b:17:b6:73:69:
36:1f:25:f3:ae:ff:e0:d5:d0:51:d9:ef:73:40:1e:af:ce:76:
d2:a6:79:3c:04:64:3f:44:9f:11:31:ca:a7:8c:48:af:ad:e4:
0e:03:6d:8e:b8:66:96:46:b4:88:a5:3a:7e:64:2c:77:04:ea:
21:3d:91:7b:79:76:fc:63:de:57:e3:f2:92:88:3b:ad:77:30:
eb:39:96:3c:98:ca:b8:66:a5:0c:9a:d8:46:ac:71:c1:75:15:
b4:08:7e:41:fe:8b:a7:29:bb:a2:49:9b:13:13:32:74:54:e8:
29:ff:d3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:36 2026 by rpki-client