Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json)
Hash identifier: eGYyGmTYU1eiA6pFaed7iEnCVnEoOHGyv6wQWGVTWGI=
Subject key identifier: 99:7B:B5:A1:B5:C2:31:01:B2:5E:14:DF:E0:67:7C:19:4D:9D:E9:8F
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial: 019D2A0492ABB13664FC23F3F5CAB013314A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
Manifest number: 0773
Signing time: Thu 26 Mar 2026 12:00:35 +0000
Manifest this update: Thu 26 Mar 2026 12:00:35 +0000
Manifest next update: Fri 27 Mar 2026 12:00:35 +0000
Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: mXBCWZkADAeUm3ssdmpzGEQ6AJX/ZYitckyrkbbPZas=)
2: ToExRYtfFflY0qgZ7kuI-DMZsas.roa (hash: szC4tibpd14vMIvwD2jijrbaAQvOz43ACSSdEsy8AOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:92:ab:b1:36:64:fc:23:f3:f5:ca:b0:13:31:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Validity
Not Before: Mar 26 12:00:35 2026 GMT
Not After : Mar 27 12:00:35 2026 GMT
Subject: CN=997bb5a1b5c23101b25e14dfe0677c194d9de98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:2d:bd:6c:ed:72:3f:be:71:a8:83:ae:c8:
c2:fc:34:a8:7d:e7:0b:0b:65:8a:2a:61:a8:d3:e5:
64:bc:51:82:e9:0a:dd:11:60:ef:20:da:d7:26:be:
b3:c7:e7:63:86:ae:96:c4:d8:fc:a2:b8:15:ee:5d:
60:8a:4f:2d:8b:02:55:f8:21:44:c8:8d:7e:22:4a:
1c:fa:ac:e4:7e:33:71:6e:05:b7:23:2f:b6:70:50:
26:f3:32:9e:b2:4f:ea:85:95:fc:4e:a4:76:54:0c:
b4:83:51:27:92:54:a9:63:30:b4:9a:3c:03:6f:4c:
76:14:ab:a4:bb:3a:e0:1e:ad:58:cb:97:7e:37:f3:
a8:9c:82:ab:82:39:01:99:08:aa:8a:b0:4b:12:2d:
47:ef:13:63:54:82:17:e7:cb:8b:fd:cc:be:76:34:
70:8e:dc:a3:5b:10:65:73:4b:98:72:8b:06:59:e3:
be:35:dc:dd:86:39:a4:6a:86:0b:eb:60:e5:6d:fe:
5f:18:c1:66:15:9e:29:ae:d6:f1:5c:d7:b3:16:d3:
69:5a:77:8f:37:5d:39:76:0d:cf:5a:c2:a7:13:78:
88:54:5b:c9:ca:1b:88:3b:7e:f3:aa:56:85:44:5d:
f1:39:14:29:7c:65:bf:6b:fc:46:71:a9:c3:0a:ee:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7B:B5:A1:B5:C2:31:01:B2:5E:14:DF:E0:67:7C:19:4D:9D:E9:8F
X509v3 Authority Key Identifier:
keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:08:b6:9d:21:04:d8:dd:ba:1c:88:2d:ef:e6:79:9e:5e:aa:
db:20:db:b1:d5:3a:1c:98:8d:72:30:15:fd:ba:04:12:a0:60:
6f:83:35:ff:55:4b:c0:b9:1c:07:22:2c:60:12:47:1d:55:90:
96:55:68:9a:aa:02:0b:c2:fb:5b:29:40:fc:1c:a0:b1:21:d5:
b5:6a:75:c3:68:ce:e4:5f:2a:ac:c0:30:ff:5c:23:e6:79:bb:
35:87:3a:c8:68:f6:43:f9:73:c7:44:a9:f0:9c:5c:89:cb:ee:
aa:c9:31:4a:d5:bd:d4:d0:3d:0b:40:f2:3a:70:cb:d4:2c:f6:
fa:de:4d:83:1b:bf:d8:48:48:33:e4:3c:da:d0:e2:a5:d1:10:
44:db:ad:27:14:9c:44:ae:2f:74:00:08:6d:3c:12:8e:2a:c1:
03:4d:e1:50:5a:f8:b8:f6:6e:a4:96:90:2b:8d:f0:99:59:b3:
ce:b7:14:27:35:5a:a1:0d:35:30:42:71:b0:01:f9:33:8b:bb:
3a:57:9e:d2:b0:e9:46:11:89:37:42:72:2a:40:40:8d:7f:33:
29:f7:ea:20:0a:31:d9:68:72:31:cc:e8:62:db:7c:eb:7f:88:
a6:0b:0d:62:4f:56:50:76:9e:41:23:ed:76:c6:15:9c:e6:61:
0e:b7:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:52 2026 by rpki-client