Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
File: QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json)
Hash identifier: XiP+WGv+H9AjwmxXnDAFTL/bMslm1LQuNR3PhXZBiQE=
Subject key identifier: AA:28:27:85:20:10:86:D3:84:2A:8C:47:D1:D0:D6:76:5C:46:D4:F0
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 019D28F224B3F9D4C227410050B19DC2BFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
Manifest number: 054A
Signing time: Thu 26 Mar 2026 07:00:50 +0000
Manifest this update: Thu 26 Mar 2026 07:00:50 +0000
Manifest next update: Fri 27 Mar 2026 07:00:50 +0000
Files and hashes: 1: 3xGw1rop8564t3-bxbU_RkP9FKQ.roa (hash: yfLjzKJGeMwVRP+KK+Z2T+JHoQEZVG5MrcsyFlDcLWA=)
2: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: bfci5/CItXHf/4HXKr7COJ7XSbTZcIUT7EtCyubryvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:24:b3:f9:d4:c2:27:41:00:50:b1:9d:c2:bf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Mar 26 07:00:50 2026 GMT
Not After : Mar 27 07:00:50 2026 GMT
Subject: CN=aa282785201086d3842a8c47d1d0d6765c46d4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:ed:4e:5a:d4:b3:c6:7a:b4:00:93:5f:9a:
61:29:d7:ba:1a:a0:18:4e:55:d3:6f:db:e9:66:5a:
0a:d1:ee:da:1d:04:f7:d4:39:86:82:e5:a0:a5:b5:
e7:89:46:95:16:a4:20:e7:c5:73:f4:ca:93:8c:e0:
f4:85:48:e3:87:db:1d:aa:0c:de:20:70:a1:99:54:
62:fb:00:87:ae:e1:db:ea:cb:c3:21:c4:23:5a:c1:
30:61:0d:5f:54:89:15:05:56:03:9c:e1:b2:b2:ce:
81:06:61:bc:a0:7a:1d:39:e9:8f:d8:9e:69:ca:46:
2b:36:aa:35:a7:50:33:a2:d8:71:40:0e:62:1a:d4:
44:81:6f:e5:be:3a:b0:7c:6f:16:8f:98:08:f5:ca:
aa:8f:a4:e0:e8:d6:5f:94:af:c4:b4:78:78:1b:1e:
8e:45:b3:d5:47:eb:c6:bf:60:59:0e:c6:23:c3:7f:
68:fc:40:c0:7d:38:ea:7d:46:08:9d:69:f1:bb:e4:
1a:4a:e8:1a:74:ab:f4:49:82:ac:40:f5:b5:9b:b3:
cc:40:63:07:29:29:02:8a:1b:33:46:f9:e7:d4:a0:
7c:87:13:c6:ba:aa:2f:69:51:6e:9e:20:15:74:3f:
66:c3:31:9d:1a:1b:7a:fc:da:24:51:0b:a7:d2:ed:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:28:27:85:20:10:86:D3:84:2A:8C:47:D1:D0:D6:76:5C:46:D4:F0
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3c:be:59:53:b8:a5:a4:6d:a4:95:4b:22:81:e7:6b:4a:fd:
45:f4:39:60:b4:01:06:ff:79:52:d1:fc:65:06:83:df:f5:18:
0b:2e:70:62:9c:15:d6:8f:ea:3c:ca:f6:f0:b2:07:74:0a:76:
a0:bd:76:f1:6a:5f:10:d5:53:ab:a5:1c:37:4b:a7:94:24:70:
d3:82:7d:d4:5c:e2:f1:ec:61:3b:d3:77:07:14:7c:9c:cf:a5:
3c:ea:98:93:ef:b0:ec:45:5b:9f:5d:c2:2f:63:07:e3:ec:d9:
0e:f6:5d:36:8f:05:4a:d0:83:67:c3:ef:98:6f:61:62:e0:62:
20:66:9d:29:20:d6:d4:19:cd:9e:ec:ad:36:26:20:ea:79:81:
51:f0:ca:5b:32:fe:b5:b7:02:e7:8d:2a:11:c6:04:33:49:83:
c3:e7:b8:ce:a8:c2:19:b0:1c:7c:86:d0:d6:ac:7d:35:08:e5:
7c:11:70:28:04:91:6d:7b:f2:f6:9e:92:8c:98:ca:44:d1:f0:
6b:cd:63:97:31:32:b1:dd:e1:a1:d5:d0:a1:ab:2a:e7:bc:4b:
88:20:72:9d:3a:86:d1:5e:e4:ac:f4:6c:f0:bf:30:62:94:93:
6d:8d:17:74:27:16:18:c5:62:14:aa:3f:3b:06:f7:0c:1b:a5:
c4:6b:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:57 2026 by rpki-client