Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: k6CiqlqUHu6wkPvJ4osOYEvkhQ9dCEMI0I4uM6IKhwA=
Subject key identifier: 00:4E:CF:A0:4C:8C:61:70:7A:0F:7F:23:8F:FC:75:48:B8:34:98:FD
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019CADC82F14EAA320E3D1FD9D6A0E9F1F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0B29
Signing time: Mon 02 Mar 2026 09:01:43 +0000
Manifest this update: Mon 02 Mar 2026 09:01:43 +0000
Manifest next update: Tue 03 Mar 2026 09:01:43 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: r3dapIxHVJoXDSi2A8R+iGL/8nkY0KyydoBrSmw1IHo=)
2: jS-v8sE_nNDS2wE29fkwjQ61v88.roa (hash: Flk+FfCfxIzDWzTQRWNpdyzzfWx1artWupYvhrPXQYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:2f:14:ea:a3:20:e3:d1:fd:9d:6a:0e:9f:1f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Mar 2 09:01:43 2026 GMT
Not After : Mar 3 09:01:43 2026 GMT
Subject: CN=004ecfa04c8c61707a0f7f238ffc7548b83498fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:e1:24:6a:d8:06:ff:20:1d:a1:74:1e:29:
80:39:4e:c2:53:d2:7d:1d:97:78:95:90:d9:9c:49:
4e:0a:3a:39:41:5a:90:0f:f3:ab:bc:91:7f:fc:2a:
73:c2:58:d7:a2:e7:1d:e5:4a:14:38:e2:95:0f:cb:
c6:f5:89:9c:ae:a4:5b:7b:55:f6:c4:38:ce:21:80:
80:e5:20:32:d9:ce:ab:8a:c8:14:7c:88:1a:9f:48:
2c:dd:27:43:d7:a8:10:2a:39:3c:e6:e0:34:82:ce:
87:19:0a:63:fd:b5:92:33:f3:8f:bf:a2:5d:78:49:
5e:f9:f8:a7:bc:3c:32:0c:5a:88:5a:b9:b7:5e:bf:
ce:c3:c5:16:c8:43:6f:fb:6f:e4:fa:fb:5d:13:21:
f8:79:10:f1:71:13:4b:30:47:66:02:28:fe:a5:9e:
ab:67:68:89:ee:a3:7f:7e:bf:05:bb:53:bb:53:cd:
01:31:db:a3:d8:9a:51:16:05:7f:c7:6f:97:d2:32:
04:ac:88:85:91:96:eb:b5:29:2e:d2:00:5b:83:62:
96:3b:3f:8d:ae:26:4c:9c:4c:38:c4:af:d0:02:15:
14:fb:6e:84:2c:0d:eb:b2:2c:2a:84:02:ff:b7:b3:
62:53:55:fc:ec:40:0a:ae:4a:0d:5f:6f:01:66:b2:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:CF:A0:4C:8C:61:70:7A:0F:7F:23:8F:FC:75:48:B8:34:98:FD
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0c:65:b5:e9:ee:0c:6f:da:de:95:59:05:3c:7a:68:7a:21:
6b:29:4d:28:96:e9:6a:ce:a3:c8:a9:0d:24:8f:cf:36:d8:fe:
b2:a4:45:7b:28:d1:ed:f7:d4:29:70:f2:77:71:07:7c:16:c8:
71:25:34:0d:d4:84:bf:05:9e:d4:17:65:f7:fa:2f:e6:c7:95:
f5:42:94:53:0f:4b:23:c4:0c:ee:88:d6:07:c9:cb:b8:55:ee:
6c:bb:17:85:7e:08:09:10:68:a5:97:98:6c:aa:1d:53:d4:41:
ed:b1:18:93:85:6e:d2:a7:06:31:fe:f8:c7:fb:25:44:81:1b:
6c:49:bb:38:06:36:ed:55:a1:17:83:a6:d8:4e:34:a7:52:f4:
22:77:ca:3d:01:e1:fd:99:83:f7:6d:b4:d5:a6:d4:f1:b4:d0:
28:25:77:54:c2:41:7f:d2:ed:ce:33:0b:e4:0f:d1:39:8f:5d:
6d:f3:ab:d5:e6:60:65:52:e7:72:cf:24:7c:fb:50:cc:a5:37:
7a:75:50:13:1f:08:18:32:e4:e0:6e:9a:0c:90:a6:f4:c2:2d:
b7:c6:50:8e:d5:0d:cb:2c:1a:c6:78:b2:55:89:9d:a6:75:72:
cf:c9:92:ab:85:7d:18:dc:61:e1:53:fd:52:7c:22:d9:48:d4:
79:a6:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:25 2026 by rpki-client