Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: 5N+0OUmkwR0ju2cJGAMvO5+KAPbp56GQ/VV2WY8U57A=
Subject key identifier: A0:1B:5E:DD:26:22:69:32:F6:9F:89:93:55:16:AA:AD:95:46:98:79
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 019D2CCEF47FB3C01DA8DDB55273DC12E64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 188B
Signing time: Fri 27 Mar 2026 01:00:53 +0000
Manifest this update: Fri 27 Mar 2026 01:00:53 +0000
Manifest next update: Sat 28 Mar 2026 01:00:53 +0000
Files and hashes: 1: KVd8UU1QCGLbelU8FBZ3BjTJf_M.roa (hash: e0wcDwUSIAfCnaYto4Jivp2KjPS/q2XzRg7RSdokzyQ=)
2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: vgpTlDFBCfBEvEQfJV5ZBPLCnHD0Z2gAyzfV/nN747o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:ce:f4:7f:b3:c0:1d:a8:dd:b5:52:73:dc:12:e6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Mar 27 01:00:53 2026 GMT
Not After : Mar 28 01:00:53 2026 GMT
Subject: CN=a01b5edd26226932f69f89935516aaad95469879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:7e:09:f3:e0:20:9d:06:95:f0:bc:34:fe:
35:9b:b2:0e:4a:20:8c:fa:4c:15:91:1b:26:cb:cf:
10:ef:bf:75:cb:61:a6:0e:1d:43:cb:a3:da:db:ac:
58:7d:76:2a:6d:b6:a3:d8:6f:db:6f:33:92:22:c3:
02:33:04:08:b5:d4:c5:7b:c3:3e:03:b7:69:ef:98:
14:3b:38:56:6d:70:31:1d:09:a4:34:c2:70:d7:85:
81:2f:ac:88:38:21:59:0c:23:c9:28:02:10:33:b4:
9a:6d:91:b2:86:5f:1e:7d:50:40:6f:3d:0f:8c:a7:
05:26:90:87:50:59:61:30:94:ed:a5:58:c5:b9:42:
d4:d0:d9:a4:fb:64:cc:73:d9:d7:f4:bf:88:e4:fc:
76:38:d7:e6:45:d9:37:b9:61:09:f4:90:c7:92:c2:
c3:19:0c:6b:ac:de:ef:20:f0:f7:24:3f:0e:58:2e:
78:14:d4:fe:12:a2:8a:45:ed:30:8c:6a:f3:3f:ee:
0a:ea:24:9a:e9:6a:c3:0a:6b:e9:09:f4:6a:7e:4b:
f8:3a:e7:6e:7b:78:57:46:c9:e3:df:24:42:09:bb:
ce:90:1e:8a:72:72:31:f9:b9:01:0a:08:e8:6d:25:
4f:f5:c2:d4:25:cd:90:ca:02:a6:b0:ae:0b:03:fc:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1B:5E:DD:26:22:69:32:F6:9F:89:93:55:16:AA:AD:95:46:98:79
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2f:e4:36:47:67:4e:ec:b6:68:0a:2b:7f:32:34:1b:8c:db:
9a:39:e2:ab:a3:62:13:d0:c5:99:85:56:7a:12:b5:65:7c:10:
91:1d:b5:63:c6:23:03:0e:19:94:2d:7b:9b:9a:9f:a2:c4:34:
95:5e:55:ab:1f:d0:a6:d3:ad:43:37:e3:21:47:11:c9:35:b8:
b2:d2:c8:75:93:a2:34:fc:e0:93:7b:b9:e2:e3:23:d8:6c:65:
22:1c:f1:75:b4:55:26:93:0f:fe:d5:df:72:b2:4a:d9:c1:9f:
1d:fd:23:c9:85:39:75:8b:72:4f:a6:77:2f:a2:3d:34:b5:72:
16:30:78:33:7a:1c:2a:0e:7e:8e:64:24:e1:27:60:60:57:16:
6a:c0:8e:a5:ae:9c:16:bf:94:65:1c:af:bd:23:3a:01:c7:cf:
73:b1:e6:56:58:50:4a:7d:1e:b6:14:56:9e:04:ac:0b:f8:e8:
f0:ab:ee:09:b6:57:5c:fe:ba:fe:5f:4d:a0:5a:e0:5c:58:54:
02:6c:a2:fe:d7:2e:77:04:f3:30:19:b9:42:b5:b2:a1:2c:ac:
8d:0e:52:c0:74:f1:53:e5:8a:ec:a5:f1:09:75:ea:9b:72:ce:
d0:81:06:e7:b7:80:64:b2:80:ae:16:ff:71:ef:82:ee:fd:c2:
a0:24:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:00:10 2026 by rpki-client