Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: RshzXW9bJlrLbnNbszlPkpruhpPzjS1wd3HrBfbbJSE=
Subject key identifier: 65:36:A0:14:66:10:2E:66:2B:EE:D9:AD:C3:A6:1B:39:6E:71:F6:21
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 019CAA58AD25A19B03DDB89175055E8A6198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 15CF
Signing time: Sun 01 Mar 2026 17:01:04 +0000
Manifest this update: Sun 01 Mar 2026 17:01:04 +0000
Manifest next update: Mon 02 Mar 2026 17:01:04 +0000
Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
2: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: eO48/PcJ32e+JLxrMoJTFcRjnD7bjAz3GtQd4QZ5Zvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ad:25:a1:9b:03:dd:b8:91:75:05:5e:8a:61:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Mar 1 17:01:04 2026 GMT
Not After : Mar 2 17:01:04 2026 GMT
Subject: CN=6536a01466102e662beed9adc3a61b396e71f621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:f0:93:95:d5:47:1d:63:83:b7:4a:b3:a9:
22:eb:3c:33:14:30:a5:48:80:61:f7:f5:c1:2a:8d:
5a:76:52:78:fc:aa:c7:81:40:e0:43:48:5b:cb:a9:
d7:88:8c:09:b5:8f:9a:7b:bb:27:4d:86:58:47:e8:
c3:3b:8d:be:e1:97:3c:66:0d:a7:bc:61:52:cf:13:
95:1c:1e:a9:f2:2e:24:f9:fe:23:81:d9:ec:bb:61:
63:31:70:e5:3c:d5:c9:84:26:9a:82:c3:4c:3f:f1:
15:bc:99:ee:50:de:82:11:f1:64:dc:a4:21:6e:91:
e4:8a:8e:62:06:e8:b1:04:9a:80:82:7e:4e:8b:c0:
26:b2:0b:d5:fc:82:f5:ad:7b:78:90:32:02:56:57:
21:9a:23:b1:46:8c:8c:8f:65:83:d0:47:cc:49:57:
0d:57:c9:6b:ec:7f:2d:7e:4e:ca:59:9b:e2:db:69:
ee:2f:b9:2e:c9:ec:27:71:76:b8:e5:2a:fb:15:23:
7d:b2:71:46:21:24:6a:06:5d:b5:e0:8f:87:42:7d:
3e:56:9b:2c:52:d0:c4:14:7f:27:8b:7a:35:37:ed:
a5:2b:8a:48:5a:a0:d4:43:39:46:6f:4a:ce:55:7d:
ef:b5:d2:95:cb:e6:0b:fa:23:d3:07:43:46:d5:f6:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:36:A0:14:66:10:2E:66:2B:EE:D9:AD:C3:A6:1B:39:6E:71:F6:21
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a0:70:c8:0a:08:b9:7f:bc:b8:33:a5:f3:6f:f0:99:d5:61:
cd:63:2d:6d:4a:ad:2d:e9:d7:18:ee:fd:f7:60:e3:0a:ce:bb:
cd:08:a0:c7:97:67:6b:73:ae:53:cc:2e:25:70:3a:f6:f1:6d:
d6:2e:33:23:e9:2a:51:cc:0c:1d:03:62:39:b2:84:bb:b1:56:
88:7d:ec:98:d0:e0:5a:51:ac:aa:0c:2e:91:48:c2:53:68:3c:
8b:ce:66:c7:ff:5c:dd:65:bb:f8:ea:86:48:4b:03:f3:4d:32:
dd:cb:f6:7d:c7:16:ba:28:22:01:a3:48:d3:11:9d:13:e7:3e:
1e:df:22:7c:42:1f:a5:65:9d:83:e2:ec:15:7b:88:a6:4a:5d:
2b:54:bc:e8:2a:14:53:c9:1e:86:8d:52:d9:88:2b:b3:03:67:
3c:49:d0:71:9f:58:a6:29:9d:19:a8:73:8c:06:2c:2b:3c:16:
52:bc:71:a1:fa:f5:69:c6:0f:c0:7b:ed:f3:ab:c2:53:0d:2c:
e4:f5:21:7f:dc:c6:f8:7c:1b:c7:b8:21:54:54:0d:e0:3b:e8:
50:1b:c4:6e:f9:0c:e9:76:bb:6a:17:54:3d:c5:39:22:42:1b:
a0:08:52:3c:66:c2:c3:c1:75:57:b7:c0:91:3a:1d:b1:f4:e4:
cb:e7:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:17 2026 by rpki-client