Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: hzlqOynlJjPOf/cYxHILRPIiTTO68uk5rvwpDfNpEMg=
Subject key identifier: B5:FD:8F:5C:E1:F0:D0:F9:32:4A:41:A2:B8:F3:79:E6:10:40:9D:BF
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 019CA86A29F95DDB51CAAB5BEBB865271B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 04CF
Signing time: Sun 01 Mar 2026 08:00:55 +0000
Manifest this update: Sun 01 Mar 2026 08:00:55 +0000
Manifest next update: Mon 02 Mar 2026 08:00:55 +0000
Files and hashes: 1: A06G0jKoVHkOoVsdJmlcMjUtuYg.roa (hash: /ucUBoWCtbDVXH8l3LkIjvANk7l2kl8IZAXTo8qEuVA=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: uyg4hkT9mAzcbeYdg9jgOPwK0qCj46mXIjR7mIovwn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:29:f9:5d:db:51:ca:ab:5b:eb:b8:65:27:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Mar 1 08:00:55 2026 GMT
Not After : Mar 2 08:00:55 2026 GMT
Subject: CN=b5fd8f5ce1f0d0f9324a41a2b8f379e610409dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:98:02:3f:e6:3b:6a:47:b5:cd:29:21:5b:91:
98:01:6e:d8:06:d3:7c:de:ef:fd:73:ce:7d:a1:10:
a6:56:f0:9a:e1:1c:04:d6:02:fb:8c:ae:32:56:e2:
7c:76:0b:79:38:35:25:ae:ec:d3:be:29:13:94:1f:
a7:26:9d:49:d0:28:27:ad:56:90:5f:04:bb:8f:38:
f5:3e:cf:df:89:68:58:98:17:36:f2:72:b9:e9:e1:
37:c6:cf:2e:77:a8:79:0d:5d:81:22:2e:46:0f:79:
79:25:fd:03:6a:52:be:6b:5a:a9:df:0e:9f:8b:61:
68:f6:cf:89:11:47:47:0d:a0:2a:79:41:6a:fc:e5:
11:6d:77:7c:b1:6a:c4:74:b8:da:d1:26:5a:79:d2:
8f:2f:2a:c9:50:6a:c5:50:82:8c:01:5e:e2:1c:85:
2e:ba:af:f2:80:1e:ed:9a:89:73:43:35:8b:81:82:
d4:29:23:ae:e9:d1:26:1e:1c:c9:f2:65:a1:27:d9:
3e:03:f1:73:4a:d9:d1:2a:d7:f0:90:d4:cc:74:be:
82:2e:ce:49:3c:17:ba:c3:23:db:9b:9b:94:9f:30:
97:2f:82:dd:c4:a5:9c:71:37:cb:4a:76:07:11:77:
91:46:82:15:7f:da:40:f3:d3:f7:6a:4a:5d:bf:63:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:8F:5C:E1:F0:D0:F9:32:4A:41:A2:B8:F3:79:E6:10:40:9D:BF
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:56:34:f2:f4:12:f1:52:4f:82:32:88:b5:6f:1a:9c:c5:97:
77:76:63:13:d6:2f:ea:5f:7d:cb:88:4f:bc:dc:c9:2f:a2:5e:
e7:53:bb:5f:65:ae:e8:32:ed:d1:95:88:31:28:9c:af:0f:60:
e0:9f:f7:eb:6b:ae:61:e8:6e:88:8e:c4:95:ed:6b:5c:46:c3:
9e:9d:77:5e:d8:f8:c4:1e:12:43:fb:f7:2f:f4:14:26:0b:68:
a4:b2:52:22:b1:28:1f:c4:1c:96:1a:b6:b5:95:13:4d:16:95:
56:ab:67:3f:75:a9:3f:25:da:20:5f:1f:7b:ae:85:fc:58:c0:
91:6a:9a:3c:20:fc:dd:54:41:e5:64:ee:16:0c:ae:22:52:4c:
f7:18:03:96:fd:49:5b:9e:5b:d7:75:de:ab:b5:cd:85:15:f4:
61:f2:ff:e0:73:35:0f:6c:d1:c4:dc:8d:fc:4b:56:53:68:79:
cb:74:4b:18:74:31:6c:f2:96:b0:7a:b9:b4:1b:3f:74:48:b5:
2b:8d:d2:c8:2a:47:2f:41:6e:14:b6:e2:66:b2:01:f0:42:ac:
d3:06:f1:78:6c:6f:8f:f5:b6:e1:72:2c:28:2c:85:c3:de:f9:
1d:ac:8f:cb:f3:9f:4b:8d:a3:a0:c4:d2:76:9d:e7:f8:83:f3:
26:4a:42:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:50 2026 by rpki-client