Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json)
Hash identifier: gOv1r86mRSoktu33AVwNkQy0aQLdDmOfKubPkvg2JVY=
Subject key identifier: C9:23:C6:71:CA:82:B6:3F:77:E8:69:DE:22:C9:76:FD:DE:57:9E:CC
Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579
Certificate serial: 019CAA58DCA047FA6E2D35C4C1018DD7F873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
Manifest number: 05F1
Signing time: Sun 01 Mar 2026 17:01:16 +0000
Manifest this update: Sun 01 Mar 2026 17:01:16 +0000
Manifest next update: Mon 02 Mar 2026 17:01:16 +0000
Files and hashes: 1: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: xU7XnhWEBqt+5mR95s2I+FgbiqQu4i+Wx3ZZpZF9vbU=)
2: xUUV-CZdo9Ukf7sKRtxgVj_1MqU.roa (hash: jpUT41SLpbot+5R4BFOYYkdz+MS0rf+UNRgr8WOjpTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:dc:a0:47:fa:6e:2d:35:c4:c1:01:8d:d7:f8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419b379a246412810e8a8052a62a39688ca34579
Validity
Not Before: Mar 1 17:01:16 2026 GMT
Not After : Mar 2 17:01:16 2026 GMT
Subject: CN=c923c671ca82b63f77e869de22c976fdde579ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:1a:49:93:e2:e2:53:3f:c5:87:6b:a9:22:
08:9a:68:ef:f2:de:b6:ed:81:37:3c:6c:85:a3:2e:
81:b5:cb:80:95:b3:27:36:18:18:8d:11:04:1f:e5:
f6:99:20:f8:92:f0:06:92:33:d4:e5:54:a6:73:d9:
d8:a6:ba:20:4e:a2:c7:7a:ef:07:f2:35:c6:e7:67:
5a:5b:fa:19:28:91:11:bb:1a:fc:a5:9a:1b:43:05:
6b:be:3a:9a:f4:89:25:dc:e8:92:3d:c7:59:b0:de:
3e:f0:16:26:61:c1:16:fb:b6:ad:6f:60:68:1d:0b:
fb:f1:2f:a3:03:02:00:e9:31:c4:ff:99:9e:6b:7a:
e4:c6:3c:82:48:85:57:9e:d8:0a:f7:dc:b5:08:ed:
d2:e7:f7:31:4c:3a:07:83:8f:08:d8:14:05:b5:00:
ce:ac:77:56:70:90:7a:7e:58:ec:28:f4:1c:22:a6:
da:f1:40:24:1e:26:d2:ab:f0:4d:40:bd:07:d0:52:
d6:cb:60:d5:f0:b1:d1:b8:22:46:b7:04:db:5d:a1:
2f:55:75:5f:5e:e5:f4:75:2e:f3:0f:f0:c9:c2:f6:
e3:9d:dd:c9:14:aa:22:08:81:c8:0f:ac:c4:54:f1:
af:f9:0c:33:0d:9f:ea:ab:cb:82:29:d6:84:bd:cf:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:23:C6:71:CA:82:B6:3F:77:E8:69:DE:22:C9:76:FD:DE:57:9E:CC
X509v3 Authority Key Identifier:
keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:58:97:08:35:be:07:7b:fb:c5:a0:c9:8b:19:cf:74:2a:19:
b1:ed:5d:ad:37:05:43:4d:c1:9e:c3:11:e3:11:7b:b3:e9:02:
4a:4f:4a:98:ee:63:79:28:2d:91:1d:eb:d1:6c:3d:ad:97:94:
83:0a:63:6e:9b:d1:32:f1:21:54:2b:28:4d:61:16:c7:c6:a1:
ce:cf:94:9c:9a:a5:39:c6:df:05:41:4d:38:ac:d1:09:0d:f8:
e6:ce:6d:b3:81:0c:50:d3:4f:16:4c:d3:e8:d4:1d:0a:af:74:
99:5e:9c:c7:c9:49:fd:f2:ee:8a:3b:2d:e8:00:0f:b8:e3:e4:
75:4b:89:9e:ee:82:38:54:04:04:ef:fc:92:b0:34:c3:f9:2a:
11:13:9e:5a:30:82:15:54:dc:97:19:e0:f6:5c:e3:e3:8f:c2:
aa:92:40:09:40:37:c5:79:01:85:f3:ca:c3:bd:57:6f:44:13:
60:fe:f9:36:51:07:9c:de:6f:e5:49:af:32:d8:81:d4:09:72:
e1:a9:6b:d3:10:7e:aa:8d:0f:3c:4c:28:b7:b8:74:36:d1:79:
6b:8e:65:b1:bd:51:46:9a:97:a7:4d:a6:72:9c:2d:b6:98:75:
2b:6d:b6:79:5d:67:f6:56:20:fe:ac:69:02:e4:c7:5c:9d:1d:
e7:14:d4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:03 2026 by rpki-client