Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: rbZqhf7adCNtxnU76Gjyv8GpDmlOCM611YaoGKdTGPY=
Subject key identifier: CF:3A:ED:E8:50:A9:F7:CB:20:D1:E3:D3:F9:EE:E2:76:BF:4F:49:D8
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019D2928FA289CCBE6DE3E7259B70654B61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:00:44 +0000
Manifest this update: Thu 26 Mar 2026 08:00:44 +0000
Manifest next update: Fri 27 Mar 2026 08:00:44 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: ER1edBhmWO2RqcdRUEhhdhfIczpM0exo9xzRuKdCus8=)
2: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
3: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:fa:28:9c:cb:e6:de:3e:72:59:b7:06:54:b6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Mar 26 08:00:44 2026 GMT
Not After : Mar 27 08:00:44 2026 GMT
Subject: CN=cf3aede850a9f7cb20d1e3d3f9eee276bf4f49d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:2a:99:ba:51:2e:8d:90:ea:28:46:b7:69:
ac:9c:19:a8:9e:4f:6c:51:3d:a0:5b:15:71:b5:09:
db:1b:90:de:89:ae:fa:33:10:7f:84:ad:b6:a8:50:
d6:4d:1d:b3:c7:07:fb:4b:d6:a7:c9:59:1d:0c:e1:
48:a9:b7:ae:94:e1:39:8a:7a:54:34:0c:3b:ea:d9:
51:d4:83:75:1b:1a:ae:de:33:4f:d7:12:8a:4f:f6:
bd:7b:4c:1e:e8:57:d4:c6:7f:e4:64:5c:4a:c2:fb:
3f:56:ad:33:d5:1c:73:97:6a:fa:75:61:52:d4:b1:
a3:10:f2:df:41:29:04:b5:59:ff:23:97:92:1e:40:
db:3c:44:46:92:7a:d6:bb:e4:4b:48:84:a0:aa:b9:
e8:85:37:72:60:b6:86:3a:c4:6f:bd:c0:a5:33:5d:
72:6a:b8:88:14:71:dc:ac:bb:00:83:ff:46:ce:24:
37:19:27:8d:37:87:d9:0b:73:14:8f:48:cd:aa:17:
74:04:b6:f7:6e:d0:95:87:ae:ae:f8:f9:15:a2:e4:
dd:b1:0f:12:5f:f6:88:67:ff:33:90:97:a7:8c:bd:
c0:e5:57:74:96:ed:c9:d3:b1:59:f4:3b:33:26:16:
18:8f:60:00:c6:f2:23:59:7d:da:b1:5c:30:df:07:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:ED:E8:50:A9:F7:CB:20:D1:E3:D3:F9:EE:E2:76:BF:4F:49:D8
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f1:02:5e:23:62:4e:70:d7:19:aa:e7:c4:f3:0b:6e:ba:ba:
5d:6c:4f:30:ac:90:60:c1:64:d1:15:79:26:ce:d6:3a:62:fd:
b3:bd:17:a6:42:3c:7c:28:69:b0:a2:b0:72:b3:80:0e:0a:d0:
2d:22:c0:10:1a:43:39:fd:e3:2b:a9:3a:48:ed:aa:dd:44:ba:
be:cc:3a:50:c6:d5:35:3a:e9:cd:81:1d:63:59:f8:0a:9b:60:
8b:7c:88:de:84:f9:4a:d0:25:44:08:bf:a4:83:a6:51:ea:85:
84:0b:ba:25:07:40:74:c3:48:66:e2:b2:a0:00:8f:f5:49:9c:
43:07:d3:69:4d:22:9b:30:8e:bf:90:59:26:2a:2d:da:54:88:
57:5a:f7:6b:44:83:fd:a7:f9:1f:57:06:08:11:75:b3:b3:17:
87:cd:36:70:34:58:35:66:5d:19:c7:7f:6e:0b:43:9d:7a:76:
10:c1:88:b4:9b:3c:63:7c:b0:1b:2c:02:eb:f2:55:dc:e0:0c:
df:aa:5c:c3:cf:ef:e2:ed:0b:a3:72:9d:e1:a2:37:89:10:38:
6e:08:6d:0f:a9:b4:a4:99:08:42:aa:3b:5d:9c:0c:b0:4b:ba:
aa:86:f9:22:c2:1d:76:64:be:49:fc:20:9d:fe:d1:b7:f5:c0:
66:ac:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:54 2026 by rpki-client