Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: 7EBOh6qTstN08HrRxNE9M3a9jUvjBTiV7XCWoY9MHno=
Subject key identifier: 64:49:64:D4:72:5C:1F:76:1A:C8:D9:2E:F3:0C:34:6D:B4:23:19:1F
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 019D28BB5A6DF62DFDDB6DBDD743073B02F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:00 +0000
Manifest this update: Thu 26 Mar 2026 06:01:00 +0000
Manifest next update: Fri 27 Mar 2026 06:01:00 +0000
Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: qeueEpzDF1jDheD0pNrZOu0ZclDCyzRzD+R40q4kR1M=)
2: Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa (hash: LMUW9+NLiMGnI7ZWrV590GSKNkkWYi8Hg05UOVRU3Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:5a:6d:f6:2d:fd:db:6d:bd:d7:43:07:3b:02:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Mar 26 06:01:00 2026 GMT
Not After : Mar 27 06:01:00 2026 GMT
Subject: CN=644964d4725c1f761ac8d92ef30c346db423191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:04:93:a5:b1:9c:11:8f:6e:c3:97:72:0a:
34:f8:85:38:5b:dd:ed:ba:37:bc:5d:74:9a:ee:e7:
49:ba:5b:76:01:db:43:3a:ea:f1:78:81:fe:a4:35:
ad:fd:4e:9c:c9:89:c7:dc:ea:94:fb:d3:a3:ec:3b:
36:25:76:8c:91:b8:e5:ca:dc:d5:cf:32:7e:7b:c1:
a1:b8:5f:23:0c:ac:fb:25:61:74:ed:c4:2b:06:9f:
a9:cf:5a:bd:6f:1b:75:ba:d3:e1:cf:ac:53:35:8d:
c7:d4:e1:4e:bd:c0:1c:ec:d2:b0:5e:6d:aa:53:93:
77:78:58:a0:96:4d:b9:fe:56:c5:01:c4:b3:fc:36:
c5:3e:e0:88:80:20:c6:2b:35:93:b8:40:5a:a1:dd:
62:45:d3:5f:4e:b1:ef:b3:4d:b1:a1:6d:8e:0b:67:
d8:47:90:87:f1:34:d0:6e:e0:e2:bc:44:f0:ee:48:
98:d7:7f:8b:91:86:f4:39:86:7e:82:74:af:ab:3b:
9d:bd:2a:34:4c:16:74:9d:53:d6:b8:24:ad:b4:be:
e2:35:f2:e3:23:64:1f:f3:0c:62:6b:a5:62:c8:56:
3e:c3:db:90:75:ed:00:78:26:d8:07:9b:4c:d3:65:
10:8e:e3:2e:db:ed:0c:34:d0:a9:76:4d:ff:4e:a8:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:64:D4:72:5C:1F:76:1A:C8:D9:2E:F3:0C:34:6D:B4:23:19:1F
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5c:96:1f:ef:9f:33:f2:e1:dc:08:49:81:39:a5:e1:42:df:
6a:6f:4b:4f:3d:ea:4f:c4:9d:71:f2:49:71:4f:59:95:21:09:
e0:17:d7:23:e0:7e:91:27:4f:eb:88:ab:da:a4:59:d8:cf:8f:
48:b1:9b:fd:a0:a7:61:1d:ca:04:41:c8:30:25:cb:18:19:b4:
c0:66:72:4d:8e:ee:66:51:d9:69:fa:46:ee:6c:93:e3:0e:fa:
ca:3f:d0:49:cd:84:53:87:07:ed:89:8f:fa:c7:3d:2a:cc:cb:
50:13:e2:99:5e:d8:e4:89:5c:75:7e:bc:75:7b:cc:fc:13:3a:
41:fe:e9:06:a6:e6:17:f0:d2:47:dd:df:f8:46:a4:b6:92:e0:
c8:fb:bd:60:9c:cf:32:46:24:ed:69:f4:e7:1a:a2:fa:36:6b:
8f:44:54:b7:c7:05:78:fa:c6:86:fd:7b:3b:d7:4d:0a:69:c3:
03:d1:4e:df:dc:ec:ed:60:7b:77:73:af:f0:05:6b:8f:2e:31:
3d:f1:26:cc:46:04:39:31:e7:b8:76:5b:f1:d4:f5:65:20:f2:
e5:c1:59:d5:de:f6:ba:89:24:29:e0:e0:11:60:49:a1:f8:a6:
32:af:ba:ca:62:e0:28:c3:2a:b0:0f:ad:51:b5:16:90:aa:9c:
f7:5c:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:57 2026 by rpki-client