Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File: QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier: EIYdEzPDaJx/Wz1VWz/Qi4Utz50MpvD5uWisElvDp68=
Subject key identifier: 28:AB:B9:FA:86:BD:FB:5E:BE:71:A2:76:8A:C1:27:C7:C4:2A:D7:89
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 019CAD9068BAAA910A7AE33DBBEA2055D908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 08:00:48 +0000
Manifest this update: Mon 02 Mar 2026 08:00:48 +0000
Manifest next update: Tue 03 Mar 2026 08:00:48 +0000
Files and hashes: 1: 6P9heqcjWC1rgYXIRmhdx-97RQI.roa (hash: Wmt5NIZ7B735D829/2kh7N0lg+ZEmMiQ2DIicb7NPis=)
2: CeZNOwjANN4HMY30DhoMsqh7kc0.roa (hash: Eu0R/pH+qqACExevGNpBWZPYFKUIF3usiZ6pHAqzeUg=)
3: H9vdOoMnNvcj9O3pGR64p1cw7mI.roa (hash: IwVpFDPCmKPKuO6vfa3AZGtMLLchqRt7QtT34xytDoc=)
4: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: dzLB+vLvEf39/+MRIDqJpFDRH4OzbxLwIphAz4KtXJo=)
5: lhRrxFX2ddbsLjVa14L7LqCeSk0.roa (hash: VWU2mBVhm/guPrYibtgL6oEOWFxdxHR0S2Eb5+SbI98=)
6: zjfJO2RH5SIxJF2laNjzaWPFUmE.roa (hash: CH64B9ZYUzeZok1rFlTbLuLN/vSRqUxl6QpPK+7D75o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:68:ba:aa:91:0a:7a:e3:3d:bb:ea:20:55:d9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Mar 2 08:00:48 2026 GMT
Not After : Mar 3 08:00:48 2026 GMT
Subject: CN=28abb9fa86bdfb5ebe71a2768ac127c7c42ad789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:54:fd:34:ad:26:92:59:b6:ed:ee:31:34:
ea:e3:b5:64:ad:23:bb:a6:bd:a9:73:d4:ac:f1:bd:
66:69:70:e2:9e:92:96:db:ed:25:69:76:f4:a6:2f:
1b:f4:09:cb:44:0d:1f:9e:eb:c3:e4:fa:c2:76:ab:
02:44:19:0f:59:0f:80:a7:89:8b:a8:19:54:f0:72:
76:a0:e3:e0:4b:da:eb:0c:1a:d1:c4:8f:1f:ed:14:
9c:e3:4b:5d:83:d8:9c:39:c1:3e:fd:aa:18:35:58:
af:5e:f5:6b:12:15:0d:3a:c3:7e:9a:d0:45:b1:d4:
f7:68:f7:6f:13:3c:86:c6:24:49:84:d8:59:fc:9d:
3b:1a:ef:fd:33:27:c6:60:7d:7b:0e:0d:d2:50:37:
84:4c:e3:b2:8d:12:86:9d:a7:14:80:01:d2:c7:5a:
09:1d:85:77:64:53:03:0b:fc:09:bb:5e:0f:da:62:
8b:eb:49:bb:4d:9a:e0:a3:da:42:4a:4d:21:57:24:
f5:2f:de:d5:11:ad:3c:cc:f0:3a:2b:69:78:c9:08:
3a:77:5a:16:8b:eb:1a:92:5d:65:5b:65:67:f9:17:
c4:e8:f7:fe:94:8e:bc:ba:12:b4:c8:cc:40:eb:7d:
84:42:dc:68:53:5d:1d:d9:31:8d:85:6e:06:3b:77:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:B9:FA:86:BD:FB:5E:BE:71:A2:76:8A:C1:27:C7:C4:2A:D7:89
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5a:40:86:3d:51:96:95:5b:ea:73:75:c0:b5:08:51:76:d0:
29:43:98:9b:12:1b:ed:ac:b1:a9:ae:c5:03:40:32:5a:a2:20:
d6:77:71:80:f8:20:11:b3:f1:1b:53:63:38:07:1a:f2:11:ba:
b6:05:55:0e:cc:4c:76:29:b4:48:83:51:45:aa:73:e9:1c:17:
44:74:fc:02:78:99:e3:01:0e:2b:f7:96:58:57:c3:5d:fd:84:
1d:5f:a7:97:66:e0:5b:c7:57:7b:9d:1c:71:d5:73:7e:0a:06:
7c:f4:42:0d:10:99:cf:a7:23:9a:fa:0f:d6:1f:b2:f7:cf:55:
98:f6:0b:05:8a:32:50:d7:5d:fe:53:37:9d:3e:7d:c3:94:66:
81:61:52:cc:8d:7d:d2:82:8b:7c:45:81:dc:76:3f:d5:71:86:
94:09:03:69:12:8d:ce:a3:e6:d9:bb:1f:59:9f:66:d7:e0:6d:
f7:df:1b:c6:3f:07:c7:aa:2a:e9:a3:bf:d5:87:2c:15:ab:c8:
48:94:92:d1:5f:03:a5:0c:de:ca:fd:f6:30:a5:2b:e3:62:af:
2f:fe:58:cc:ff:3a:c8:c8:e7:a9:ed:27:5e:f0:79:5b:d6:fa:
c9:b6:e4:81:c6:80:e5:5c:00:d6:64:1d:70:e0:e8:55:eb:5b:
d9:e3:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:26 2026 by rpki-client