Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: wN1jZtv6dD9Ip2O39fX8jiHA3kT3Y91Vrr6aDimbl+M=
Subject key identifier: 10:F2:49:CA:F1:4D:C3:BD:BE:E1:9A:3E:0D:11:C0:E0:EE:F1:0C:52
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 019D2929A51CB146B3A8F814A2CFDA5A057F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0FC5
Signing time: Thu 26 Mar 2026 08:01:28 +0000
Manifest this update: Thu 26 Mar 2026 08:01:28 +0000
Manifest next update: Fri 27 Mar 2026 08:01:28 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: Kce/l5oIDVSK1ImZjl6lbEPezKGMAFogeXJGoV1/No8=)
2: gJFWXPA_JHXzvOKJ3yPP-FpXrIU.roa (hash: UejuYxPlvqYqOEh9OQ46XPeNSYssNDcfHiTgcJb7toI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a5:1c:b1:46:b3:a8:f8:14:a2:cf:da:5a:05:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Mar 26 08:01:28 2026 GMT
Not After : Mar 27 08:01:28 2026 GMT
Subject: CN=10f249caf14dc3bdbee19a3e0d11c0e0eef10c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:72:73:07:37:ed:b6:b6:27:30:13:31:89:
85:05:3f:21:37:e4:db:b1:1c:f5:df:0e:1e:c4:7d:
14:ab:d9:f4:23:59:a1:5d:e5:42:9d:7e:db:30:e9:
14:c7:16:44:d4:0c:87:6b:8b:fc:23:a7:df:6e:d0:
0b:ee:36:5c:a4:5f:32:df:d1:0f:cc:da:bb:c3:97:
51:d4:64:ee:33:6c:de:20:86:b7:d0:2f:b5:1b:82:
f4:07:e0:15:06:ad:c6:97:de:91:a1:96:0a:4f:70:
68:1e:00:6e:d8:b2:1c:6b:79:0d:17:19:4f:f7:f6:
05:b3:af:2f:bc:51:5b:85:41:a2:e0:b4:86:ef:98:
2b:90:e7:c3:09:30:b0:07:0a:0d:a5:92:80:20:d5:
95:7f:9d:44:a3:18:f5:f7:52:24:82:3b:2f:99:9d:
c2:ae:a4:4a:03:21:c2:a6:f6:89:ab:cc:a9:3d:33:
b1:bb:a8:f0:dc:41:bc:9c:39:a3:23:8d:8f:15:6d:
39:37:95:4a:ac:4b:9c:9e:96:b8:10:7a:4e:1c:ee:
1b:8a:d6:83:0c:c0:77:66:45:5c:3a:6d:a9:d6:52:
55:c6:01:68:95:3c:55:d7:f1:31:9b:6c:a0:dc:e9:
fc:31:5c:51:29:ff:40:fd:b9:89:37:56:af:a4:a4:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:49:CA:F1:4D:C3:BD:BE:E1:9A:3E:0D:11:C0:E0:EE:F1:0C:52
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a8:3a:41:1a:52:df:f8:cb:77:9d:a5:5f:ab:17:0e:b0:4f:
79:c3:0a:04:73:91:c3:9e:6e:62:2f:60:c3:02:49:66:a9:2e:
70:4e:14:d2:81:f5:3d:bf:93:62:94:3c:bf:c2:38:cf:e4:7a:
ba:c6:f5:ba:5b:83:8d:3f:de:ce:3a:61:32:fa:7c:3a:06:e9:
77:44:da:1c:bd:6c:cb:70:08:61:8d:aa:4c:2a:9e:4a:01:e6:
b8:aa:ca:99:ec:4b:b4:27:99:53:fe:30:ff:b1:f6:2f:92:3f:
f0:8c:59:8a:3d:4b:a6:e1:e3:55:30:3c:ed:df:2e:90:53:52:
fd:ec:53:a0:0d:7c:3e:60:5f:d4:ea:4f:63:0b:46:33:f1:40:
e3:7b:f4:20:02:b6:db:f8:13:1f:b7:57:8f:ed:f7:dd:90:ca:
52:8d:8b:13:2e:03:25:c4:09:0e:a1:82:51:b8:bd:ae:94:42:
c3:c9:19:f7:31:5d:99:b1:a1:ee:3e:80:f8:99:6c:8b:bd:9a:
74:8b:08:f4:3c:6d:4b:fc:56:14:31:eb:d2:8e:ec:2d:48:df:
c3:84:a2:3b:b1:6e:c7:4e:f5:ab:77:87:7a:cf:c0:ab:ff:59:
61:75:7a:45:0f:0a:31:65:08:a0:88:9b:7b:e7:c3:26:83:af:
51:89:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:45:04 2026 by rpki-client