Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
File: QqbmQBmAE94SolHwhgMM14xzJRY.mft (raw, json)
Hash identifier: AfWMh1aelkx3e13SejKMYPZEv+hygxcinn5dBnZn/nM=
Subject key identifier: 24:E2:B4:EE:16:1E:7D:28:E2:24:DD:0A:6E:37:62:27:3E:E1:94:5C
Authority key identifier: 42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
Certificate issuer: /CN=42a6e640198013de12a251f086030cd78c732516
Certificate serial: 019D27043EC33BF037085AFD13882C8BCA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
Manifest number: 1816
Signing time: Wed 25 Mar 2026 22:01:22 +0000
Manifest this update: Wed 25 Mar 2026 22:01:22 +0000
Manifest next update: Thu 26 Mar 2026 22:01:22 +0000
Files and hashes: 1: GEvyRWGXbdbHUTAehbJp3YhlTgY.roa (hash: b/xFEmDMbOi0xEK2SMYux/TUJuKIqsMzgBODuaUhYag=)
2: QqbmQBmAE94SolHwhgMM14xzJRY.crl (hash: YURN2WAtbQeRxbGLiuc/Tsun7V/YNLvc4geEI7R9tFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3e:c3:3b:f0:37:08:5a:fd:13:88:2c:8b:ca:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a6e640198013de12a251f086030cd78c732516
Validity
Not Before: Mar 25 22:01:22 2026 GMT
Not After : Mar 26 22:01:22 2026 GMT
Subject: CN=24e2b4ee161e7d28e224dd0a6e3762273ee1945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:b2:63:4c:bf:60:c5:a6:41:80:eb:62:02:
6a:d1:f2:67:88:77:b3:e6:b1:a7:8d:70:08:da:78:
8b:22:d5:6d:00:2a:44:8b:09:1b:4e:7b:f6:98:b3:
70:a8:d7:ad:d1:46:78:7c:dd:6d:53:47:6e:29:2e:
4d:90:a4:94:20:bc:23:f6:1c:5c:50:99:92:6f:5e:
a3:f0:8c:f8:b7:62:d6:c3:91:cb:6b:d5:c4:d3:c4:
91:5c:35:bd:5a:45:b3:35:b4:80:44:60:38:39:78:
56:39:b1:d2:00:ac:e1:87:79:7f:c6:ad:c2:2f:5e:
ba:ca:21:98:a6:dc:72:31:4d:21:5b:74:47:1b:57:
00:53:d4:f2:1a:62:31:e9:05:3f:a5:a5:99:87:79:
72:ad:d1:06:85:3f:eb:32:e4:a8:11:bb:ea:15:f5:
1f:26:9a:b2:a0:53:01:cd:f9:18:45:93:72:ea:f9:
9e:a5:b8:98:a3:ec:e0:b8:e4:fa:9b:b3:fd:f6:19:
e7:7e:40:ea:7e:95:08:6b:cb:61:bb:d9:ec:9d:36:
de:f7:1a:f1:ad:fc:41:22:47:a4:35:af:68:d4:20:
16:a6:d3:fa:92:a5:d9:99:30:74:ee:e8:f0:7c:5a:
3a:d8:1c:9c:11:ac:34:4c:4f:47:3d:f5:65:30:c8:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E2:B4:EE:16:1E:7D:28:E2:24:DD:0A:6E:37:62:27:3E:E1:94:5C
X509v3 Authority Key Identifier:
keyid:42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:78:82:0a:ce:33:a4:9e:44:db:e0:30:41:62:3e:36:db:
26:ee:88:5d:d5:db:77:64:ab:0f:5e:5e:c6:2c:33:cd:4e:30:
be:ee:e5:6a:06:74:be:4c:38:62:0b:a3:6d:30:d8:be:14:2c:
9a:f3:c7:a2:5d:e7:8b:f9:d0:c3:18:51:04:c8:2d:53:f3:5e:
33:57:69:a5:c7:cc:f6:15:ab:14:94:44:8a:f9:35:bd:27:ed:
2d:d0:b2:38:b3:93:ec:78:6c:bb:75:9d:89:64:85:dc:19:fe:
bf:74:45:f9:ed:ba:c3:99:f1:42:7b:d6:0a:bc:20:4d:67:fb:
0a:21:16:aa:be:9b:f2:26:74:a9:b9:09:64:a3:b3:da:39:0b:
1a:11:de:cd:92:5c:dc:35:9f:41:fb:56:69:79:b1:2b:4c:8f:
44:c7:7a:7d:77:3d:60:fa:38:bc:ce:c2:1b:1f:5a:9c:a2:d3:
ac:ce:c9:e3:dc:63:e3:28:7b:3c:26:ea:e1:8e:f0:b5:4a:74:
dd:29:bb:d9:93:64:2b:82:aa:41:51:07:93:2c:8a:03:5d:62:
d8:52:48:37:29:38:79:b3:00:2e:79:44:19:a9:0e:e8:50:40:
a3:0e:bb:00:d4:91:bc:21:5a:45:36:21:54:44:08:1f:81:2e:
58:1e:6e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:07 2026 by rpki-client