Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier: xCt2hiGMRsPc5viHMVpD1a0UP0yIVTaChERZAoHibpg=
Subject key identifier: 4A:E0:A9:82:D2:32:D3:13:1B:1E:C0:13:8D:F2:B4:4E:8F:E4:27:CA
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 019CABD9E056F2F95C42684F0D2A9FEA2AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number: 16CF
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: 6E7-9daevK2MkkP9J_irNaIbJPM.roa (hash: nqBQWE4qRj5lWqiwp2QfZYIRYl9NsKmCq2MDZGildvE=)
2: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: 3VxiKYAmIQN132FuwEp3lih4IsYjqsX7ikIMwY0EoMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e0:56:f2:f9:5c:42:68:4f:0d:2a:9f:ea:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=4ae0a982d232d3131b1ec0138df2b44e8fe427ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:2c:f0:01:f3:a0:d3:59:d4:08:5d:28:71:
e4:01:17:d2:5b:5c:4a:e3:d9:0a:88:f4:36:c0:53:
c9:97:17:d4:23:4b:9e:1f:ce:8b:ae:2f:cc:9f:45:
78:d9:5c:ee:cf:d3:19:88:d7:a7:30:b9:8f:10:2c:
9c:a8:67:9d:2d:4e:95:ab:83:45:56:d1:38:b7:a0:
78:16:47:5b:ba:88:48:a8:d9:95:34:83:17:bb:11:
1b:86:68:c4:70:6d:43:43:55:fd:e8:3f:93:88:1f:
87:89:25:49:8a:4f:3f:0e:f8:86:96:9e:97:77:61:
d7:52:b8:a7:02:20:59:be:77:51:47:92:0b:90:db:
f7:c1:da:f7:3b:97:fe:03:35:38:cb:2b:e9:0c:0c:
92:93:68:67:51:28:42:de:d5:2d:0e:ec:da:0f:71:
b7:04:95:b6:69:5a:ad:f7:92:65:3a:5a:59:9f:d3:
44:36:08:ca:83:30:06:d7:46:33:b6:84:03:bc:36:
47:ee:d6:46:e2:88:3e:60:cb:c0:80:76:82:32:c6:
13:7f:12:01:f7:39:d4:28:5a:45:96:b5:95:33:ce:
c7:86:39:38:88:79:a5:7f:a4:cc:08:28:7d:36:e1:
df:79:a2:c8:15:9d:96:b8:88:0d:9c:0f:c8:c7:86:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E0:A9:82:D2:32:D3:13:1B:1E:C0:13:8D:F2:B4:4E:8F:E4:27:CA
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d1:3a:49:7d:51:f2:10:b4:ea:39:5d:12:bd:15:95:3d:4c:
ec:cd:4b:aa:6f:5d:c2:6d:9e:f4:bd:07:bd:65:c6:80:4b:28:
fc:2e:03:ad:2d:46:18:82:78:c2:4a:7a:4c:66:f4:b7:a6:bf:
bd:f0:aa:5d:ee:65:94:cf:19:9e:42:a6:e5:ec:e0:8e:06:f2:
6d:70:33:70:5b:1b:c4:cd:91:51:c1:d3:57:70:f0:7c:6b:4d:
1c:f4:01:1e:87:ab:a2:cc:71:87:ad:50:07:9e:1d:47:2c:b2:
8d:1f:04:a5:b9:73:73:aa:39:16:8e:1c:5d:ce:1e:85:0f:97:
60:14:c6:bd:ec:1b:66:81:8e:79:de:62:51:99:57:c1:d0:e5:
e3:66:55:93:24:25:e7:da:4c:7b:b6:8d:da:6e:22:33:a0:66:
65:43:91:b6:7b:bd:9a:0a:3e:5e:a8:0b:be:00:a6:77:f2:5b:
31:ef:53:41:52:aa:36:5f:b1:43:cc:79:8d:37:62:3b:2a:87:
71:fd:90:8f:8a:3e:a0:89:72:fa:01:55:cd:43:27:5f:65:e1:
3a:a9:54:c3:7d:bd:7d:ee:9a:90:79:f6:75:c3:16:35:2c:df:
f6:e1:8c:80:40:3b:72:ca:dd:d5:b3:2d:ec:a6:db:02:26:bf:
f9:b3:ea:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:48:51 2026 by rpki-client