Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File: QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier: 2bC/AkXp9xhZ9y/oM9V+RGYAPFwNlF0pfaquxThajM0=
Subject key identifier: 90:E4:E9:42:E3:11:1E:CA:CC:8D:B0:20:3E:D5:E4:7D:35:C3:AB:08
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019CABD92A0DC1F494040FDFCCB09FB0E04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number: 185E
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: 1Cl0aMxYJUQofTs8jhJi8Z3tcrI.roa (hash: jZVvi8ZT1AvnHScx7k4KswKgUZ3UXUEyUbpLzBDmLbE=)
2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: 71dKVgP53oiquVZELidl50Vk+zexdaHAVxbd0DYBmlE=)
3: YXLIHJqG-SjnWz2mCVVJ_ezTKSs.roa (hash: Mhnp5e3BJ7gjsyOPcctRIJrsmbal4VQexixZEqreufU=)
4: oJ7mg0Skc1TPbaAf8JVEuf2GmxY.roa (hash: Kcp7e66VbgmjHJFlZwdRCM4aHhG4oTWDRzXk2Vy002s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2a:0d:c1:f4:94:04:0f:df:cc:b0:9f:b0:e0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=90e4e942e3111ecacc8db0203ed5e47d35c3ab08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:cb:77:ae:d2:2e:2f:71:87:d1:44:9c:2d:
27:14:08:e8:bf:66:71:77:07:26:6c:67:ca:87:bf:
5f:da:36:9a:94:49:35:50:39:11:c4:6d:3b:2b:50:
82:37:c7:e5:f8:4c:15:46:53:c1:30:17:17:ad:41:
9a:21:f5:da:ed:c7:de:a9:ef:5f:09:84:a4:e8:60:
8d:05:3e:cd:26:85:89:54:56:2c:70:2b:3f:54:a1:
c3:d7:06:2c:5c:90:32:b1:29:dc:96:53:3a:b4:b4:
f8:72:7f:bb:a0:3e:ee:7c:4f:d2:26:fb:36:63:48:
bc:8f:67:2f:30:a5:bf:11:32:8d:f3:8c:37:40:38:
05:95:6a:90:6a:d8:35:fd:59:e0:29:1b:12:30:26:
84:43:69:71:3d:e3:11:48:71:f0:e5:f1:02:d8:1a:
00:76:cf:b9:86:96:ab:cb:91:b5:6b:3b:7f:3c:e6:
73:04:1c:0e:79:6f:c3:02:92:91:38:d4:23:7e:c3:
53:e0:c8:33:35:5c:e4:fd:e3:a3:b3:6b:65:72:c1:
43:45:32:b9:6b:6c:0c:92:d8:0c:db:c6:ed:d6:70:
6c:90:8c:23:90:a6:9d:c1:fe:b1:9b:5e:b6:78:91:
db:b0:9b:80:c1:ad:be:b4:2a:c9:65:92:78:38:28:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E4:E9:42:E3:11:1E:CA:CC:8D:B0:20:3E:D5:E4:7D:35:C3:AB:08
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bc:f5:9b:5b:35:77:a1:5e:e9:1a:0a:23:21:53:2e:63:f2:
25:fc:70:ca:97:07:9e:aa:a3:3b:f3:04:cb:c7:ad:32:ed:f7:
12:21:b7:0c:d0:4c:52:ad:c9:d0:fb:76:f4:d7:40:b7:6f:29:
47:82:68:8e:e4:b1:f1:7c:83:04:b6:97:be:4d:bf:e7:3d:63:
fc:5f:46:ea:e6:11:ac:c9:07:9c:16:5b:31:6b:fd:95:26:56:
fa:f1:91:00:fb:5a:d8:16:2e:0b:69:97:8e:81:85:0e:cd:22:
5a:f3:03:cb:96:e7:99:4c:c5:4f:cf:bb:18:4e:9d:7f:df:50:
0e:dd:77:e5:5e:43:bb:87:ef:36:3f:51:6d:82:3b:99:4b:28:
02:80:49:b5:67:73:c4:df:47:95:66:37:0f:bc:3e:36:95:92:
62:8b:67:54:7a:23:58:32:a9:92:0d:46:6e:a2:fa:3e:36:4e:
60:b2:3e:9d:01:41:5b:91:a0:58:b6:b9:69:d2:88:33:9b:05:
1a:f3:8c:45:0f:3f:b2:fa:91:aa:63:96:1e:6b:02:f7:7f:e5:
1e:19:c5:ad:de:53:e5:9c:36:1f:db:a0:95:36:3d:80:4b:b3:
10:10:d7:6f:bf:5f:bc:4e:b2:4d:23:09:61:c6:0c:d7:27:00:
b3:6a:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:31 2026 by rpki-client