Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: OywwivaU3KMz5KbhqkMr3BHrYJ8HzUo9qQRg4lIbkGU=
Subject key identifier: 99:20:C6:BC:9B:83:BF:8B:68:8D:5F:33:47:D3:38:C2:87:A4:01:6A
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 019D28166A1506A05100A46B68C66EAFFDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:50 +0000
Manifest this update: Thu 26 Mar 2026 03:00:50 +0000
Manifest next update: Fri 27 Mar 2026 03:00:50 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: 0YzQTH3GstZqOhLK3lCS8KuSXvaPLci9O1R9cfKgQb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6a:15:06:a0:51:00:a4:6b:68:c6:6e:af:fd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Mar 26 03:00:50 2026 GMT
Not After : Mar 27 03:00:50 2026 GMT
Subject: CN=9920c6bc9b83bf8b688d5f3347d338c287a4016a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:82:29:48:28:3b:78:51:54:a6:1c:62:21:d7:
4e:d6:84:92:aa:c1:13:b7:c0:37:5b:25:12:ea:0c:
bf:61:51:c0:74:31:f0:c7:a0:4a:56:53:be:92:bd:
26:24:b2:cf:84:99:c1:d5:cd:d8:72:23:ee:45:4f:
8b:02:85:ba:a2:b5:38:31:70:e5:77:80:bc:38:16:
3a:94:39:82:f7:75:78:8f:98:68:c0:32:33:f3:c4:
c9:b8:3b:98:00:fe:e3:e5:8f:b3:89:4a:9d:12:e3:
25:bb:02:1e:6f:0b:5f:7c:7a:cd:99:ff:b1:e4:07:
6b:77:1d:ce:c0:c9:2c:ab:d8:30:22:96:91:6b:71:
91:ec:8e:e7:73:a5:c6:6e:93:37:3f:9d:1e:1f:9c:
38:26:88:3b:29:5f:1d:50:fe:fc:e5:e4:65:d0:f8:
17:91:da:40:5a:80:60:b3:08:74:21:83:49:f3:84:
57:cd:91:22:3e:ab:33:70:a7:18:8f:8d:bc:69:1b:
eb:88:58:3c:c1:2e:2e:97:d5:54:42:99:15:78:a4:
db:34:18:a6:ad:cf:1a:3c:1b:10:e6:27:9a:6e:ef:
67:5c:3c:ff:80:b6:80:fe:bb:31:9c:aa:e7:d7:e4:
fe:ff:4d:e2:77:d4:0f:c4:db:7d:0a:d0:cd:d5:80:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:20:C6:BC:9B:83:BF:8B:68:8D:5F:33:47:D3:38:C2:87:A4:01:6A
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e2:34:e0:58:78:d3:b1:35:08:9d:0f:ad:27:f4:b3:a2:a0:
ef:77:d7:0d:f2:73:6b:bf:0f:82:c7:59:bd:a0:ef:11:18:92:
b1:73:93:da:b7:4a:71:6c:de:8f:a7:14:42:2f:dd:36:7c:87:
6d:4d:3c:fb:5d:b8:19:0f:f0:de:8f:39:62:b8:88:0c:3f:25:
ed:39:10:ea:0b:7f:2d:33:e0:0e:03:44:19:6c:d4:ea:45:f1:
52:96:f8:e5:a5:f2:7a:9b:db:55:90:c7:8a:d1:f1:05:05:81:
66:b7:fe:8c:d9:4b:c7:a2:1c:8b:93:6f:8c:2e:e0:7c:f9:16:
c7:9a:91:57:13:32:d5:f5:66:38:5b:79:6a:26:7c:89:94:bc:
13:7d:b5:fa:a2:79:f8:94:85:4a:88:64:e5:0b:84:87:aa:32:
ed:50:cb:be:69:1a:6c:bf:48:d3:d1:08:96:3b:d6:dd:79:30:
97:c2:c2:a2:83:de:b1:4f:90:c3:5c:97:b2:0e:f7:bc:d0:7d:
1e:54:03:91:dd:18:7c:6f:df:6a:06:1f:da:9a:f8:98:94:79:
60:61:6b:40:ac:5c:d1:e1:bc:41:9c:c4:c0:12:d2:9f:41:0b:
26:f9:d6:d3:40:e5:a0:27:76:6c:2c:76:ca:ea:9d:a1:fc:00:
6c:f6:17:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:26 2026 by rpki-client