Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: KsD8z+TbbJpAhBMSMeJef/V8gnD5C1JW/V8BwEWK7y0=
Subject key identifier: E6:08:62:B5:64:EB:25:F0:65:10:E6:29:9A:75:A2:F5:70:4D:2C:F8
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 019D25838E5E76F64CE2644FCD9117780553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 0D18
Signing time: Wed 25 Mar 2026 15:01:11 +0000
Manifest this update: Wed 25 Mar 2026 15:01:11 +0000
Manifest next update: Thu 26 Mar 2026 15:01:11 +0000
Files and hashes: 1: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (hash: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw=)
2: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: 4f2N99FRjmWaaJqqitWkCLmGz7tSebkiPRicojWISzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8e:5e:76:f6:4c:e2:64:4f:cd:91:17:78:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Mar 25 15:01:11 2026 GMT
Not After : Mar 26 15:01:11 2026 GMT
Subject: CN=e60862b564eb25f06510e6299a75a2f5704d2cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:4c:37:d0:ea:85:c5:9f:32:01:57:ad:d0:
ca:76:f6:12:1a:ee:f9:3d:07:38:e9:88:f3:66:cd:
32:f0:9f:71:f5:c1:2e:e0:a0:fe:62:65:3f:55:15:
c7:4e:5d:be:a0:e7:91:e0:49:63:11:ba:d5:54:3a:
a7:01:34:65:1d:27:c9:3e:79:3e:9f:49:eb:db:ac:
6b:5c:d3:70:6d:81:a6:37:f8:c2:09:84:40:c7:a3:
b3:65:aa:29:58:bd:56:50:08:b2:43:fa:df:c0:c9:
ad:48:8a:6e:64:92:de:8d:94:70:61:40:cd:3d:46:
61:89:2d:be:0e:b0:44:b6:99:e9:04:82:be:64:3e:
10:98:da:c3:bc:97:30:af:5e:2c:7b:be:37:3e:dc:
39:42:0f:a4:3a:a0:81:64:a6:7b:7a:37:03:f3:2d:
8a:ea:4a:cc:17:db:e9:6a:d7:15:09:1e:26:6a:58:
d0:fa:21:f4:b3:a4:65:1d:50:f4:95:ad:09:c4:6c:
0f:cb:de:cf:dc:d1:b4:3f:6f:3b:b1:c4:a1:c0:04:
f8:9c:5d:79:c1:c5:1e:f3:28:3d:61:82:ce:80:cf:
09:d8:70:fc:70:e5:f9:c7:02:67:39:e7:7d:61:72:
3b:ec:53:87:26:f1:d6:53:80:a0:cd:14:de:03:cf:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:62:B5:64:EB:25:F0:65:10:E6:29:9A:75:A2:F5:70:4D:2C:F8
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b7:ea:86:4f:ed:07:5a:f6:29:1e:6c:61:5c:0b:43:5d:88:
09:16:a6:50:e9:5d:90:11:72:b0:5a:3b:9a:ea:cb:26:dd:2c:
c6:8b:da:e8:6e:83:ff:d9:c4:f3:45:fc:42:0e:55:2a:2d:e5:
cc:07:51:b4:42:61:c6:1e:e9:8d:9a:68:a4:b3:f2:b0:b9:b7:
ac:4b:64:3e:da:90:f6:85:5f:ed:90:de:f4:d2:b8:59:da:c5:
16:74:86:a6:a3:80:21:69:a1:f9:e2:d3:c8:99:d0:02:7b:6b:
17:87:90:40:17:0d:21:76:ab:4e:b6:64:ed:07:f5:92:0a:d5:
71:d7:95:f1:a1:df:72:1f:12:11:49:b6:26:ca:cb:1e:65:80:
6d:d5:52:10:68:7c:0a:e9:1c:21:8c:a1:a2:14:19:d2:82:68:
0b:05:da:76:fb:ae:15:f0:b3:77:10:3b:73:59:32:12:22:76:
ca:49:77:51:f4:7b:ff:a5:67:00:42:05:89:e6:c6:38:24:df:
12:fc:3c:18:73:fc:f2:0a:3f:53:bf:6a:6b:9d:4d:80:77:94:
e7:05:f6:58:b3:ef:3d:78:4c:cd:5a:77:e4:71:63:b0:40:b6:
01:67:5d:d9:ad:9b:d2:a2:5b:17:bc:36:e1:24:31:11:eb:2c:
f5:db:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:50 2026 by rpki-client