Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: NcOYdxuUuBWhyOBjpu6hO9uKqQevsAzwS4ycc8IOdwA=
Subject key identifier: ED:9B:32:F1:64:9C:43:BD:93:AD:28:F9:CF:3F:44:3C:7C:06:A9:7D
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 019DA453630D1A142361196B7C806FA768B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 1124
Signing time: Sun 19 Apr 2026 06:00:21 +0000
Manifest this update: Sun 19 Apr 2026 06:00:21 +0000
Manifest next update: Mon 20 Apr 2026 06:00:21 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: X2ZNT7oYRzawZnOK1FqjgdTJnAjk9SyeJhx4NDVxYZM=)
2: ws3LMFUwqOssAgdFH0sQW1QshrQ.roa (hash: 0QPouBqOetwvm5EolmlFqYseOotdTyUeyqwZDQ7ojQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:63:0d:1a:14:23:61:19:6b:7c:80:6f:a7:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Apr 19 06:00:21 2026 GMT
Not After : Apr 20 06:00:21 2026 GMT
Subject: CN=ed9b32f1649c43bd93ad28f9cf3f443c7c06a97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:d3:be:2e:48:8c:a7:2d:fd:2f:1e:65:78:
86:19:df:3c:4a:7c:3b:65:97:26:d9:b8:73:82:f5:
cf:00:50:d4:60:5b:80:0b:09:74:e0:10:ad:77:6c:
82:10:30:69:dc:69:1f:f9:c5:f5:13:10:55:af:ba:
6c:a7:85:fe:9c:3c:62:ce:69:ae:83:f4:da:df:c6:
03:2d:38:04:3f:13:a6:5a:cb:fe:aa:dd:56:22:73:
f6:59:5f:fa:29:64:be:4b:5c:14:4f:d1:f5:60:8a:
4d:4e:4c:da:d7:2e:03:ca:09:85:ce:5e:09:7a:63:
b8:e4:e3:b9:98:4b:aa:6a:67:8d:49:d5:e8:b2:ac:
02:30:c8:a6:d0:8f:65:78:10:56:10:4f:c1:a3:b1:
9c:d1:02:7e:30:f9:40:01:2e:55:0b:d0:47:82:20:
21:fa:af:4d:ba:6e:d9:61:f8:0c:65:16:c8:b8:56:
a3:05:8b:ee:7a:d2:d1:0a:ad:80:8b:34:e0:47:d1:
fb:7a:c9:69:e5:96:94:42:ee:fb:9a:0e:db:f8:62:
a9:e5:c9:cd:40:04:aa:59:c3:43:ab:8b:78:e2:10:
53:ea:ec:da:fb:cd:30:e3:21:e0:10:04:5f:12:7e:
c8:aa:ae:da:bf:76:af:88:6a:64:85:ad:11:34:c2:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9B:32:F1:64:9C:43:BD:93:AD:28:F9:CF:3F:44:3C:7C:06:A9:7D
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f0:ed:10:50:ef:d3:87:60:bf:3b:c2:01:4b:22:21:50:72:
25:25:05:ce:29:2f:cf:7c:0a:25:ff:d8:0c:f9:f7:10:f3:df:
82:26:28:f0:78:e6:93:4e:3f:18:b0:51:cc:2b:fc:96:17:f7:
fd:d3:6a:83:a7:7e:8d:2a:2a:e1:7e:88:89:97:4a:c5:0c:7c:
bb:e5:90:82:b9:49:ed:73:d4:80:30:eb:06:87:bf:9b:77:6e:
45:78:1d:5f:11:80:1e:4a:84:c8:6e:99:64:53:0d:db:17:89:
88:6c:bd:7f:5a:d1:46:a5:46:17:71:0a:d1:5d:b9:7b:b2:4d:
e1:08:9f:74:e8:0a:ba:dc:65:b3:20:c2:7c:7b:91:1a:56:d6:
8b:6b:28:c9:d3:19:b4:99:4a:cd:f0:b8:6e:67:bd:cf:55:aa:
56:95:cd:d3:02:c9:89:c6:de:7c:42:7f:ed:06:87:6c:41:72:
c2:26:90:fb:ad:48:97:b5:d9:7b:c0:70:d4:a4:68:ec:2d:c6:
74:30:33:46:15:25:82:e8:81:b0:5b:ca:89:05:c8:e8:0a:4f:
0b:eb:78:67:24:98:2e:e6:f1:2b:37:f4:2c:23:ad:72:22:9f:
d2:3c:e8:bb:17:66:06:75:43:c2:de:95:24:c5:d9:21:c7:ae:
01:70:22:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:57:05 2026 by rpki-client