Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
File: QCc8FepF3zcZPjRbae3YP4xvIgI.mft (raw, json)
Hash identifier: Yd/S1tHOxFvoE7ngTV60syk1eDI8sgLja13nmqVENoc=
Subject key identifier: E8:F4:60:88:5E:2A:CB:88:34:B3:FE:83:17:36:81:EE:A3:4B:95:1C
Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202
Certificate serial: 019D25BA5B8E93E433DC6EA30A904D2EEFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
Manifest number: 03CC
Signing time: Wed 25 Mar 2026 16:01:03 +0000
Manifest this update: Wed 25 Mar 2026 16:01:03 +0000
Manifest next update: Thu 26 Mar 2026 16:01:03 +0000
Files and hashes: 1: QCc8FepF3zcZPjRbae3YP4xvIgI.crl (hash: lkBfGW7bXrqICt77hBI8ZPRJF8JOHMZ/c09Ea+FUUEI=)
2: RlG57nnNxGB2HezUW2iS9nc3Ags.roa (hash: 3PbLinbQVfE8cbPE3bd3pNL44DfI1Jhqjnzqheow9+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:5b:8e:93:e4:33:dc:6e:a3:0a:90:4d:2e:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202
Validity
Not Before: Mar 25 16:01:03 2026 GMT
Not After : Mar 26 16:01:03 2026 GMT
Subject: CN=e8f460885e2acb8834b3fe83173681eea34b951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:60:e7:bd:d2:f1:a9:8e:72:bb:c1:5e:44:
a7:65:40:29:51:0f:88:67:52:87:04:e2:c1:5f:eb:
9f:63:8e:40:8b:49:15:a5:7f:a8:93:93:a4:6d:b6:
c7:26:14:5d:a0:5c:72:f2:ee:cb:8e:86:66:a3:f7:
72:8f:ad:cd:7b:70:81:67:fe:fa:56:c6:43:99:b8:
ac:b9:28:83:b6:b1:b6:3d:86:ff:e6:04:45:5b:54:
d8:d4:f0:22:e4:57:84:72:2b:60:3a:1b:4e:c3:bd:
fa:1e:6d:41:2b:f7:8e:70:15:6c:70:25:b8:b0:30:
75:1b:a5:7a:10:33:e4:b5:28:e3:61:41:97:f0:45:
e4:34:2e:03:af:c4:1e:dc:cc:ed:0f:ff:79:81:4c:
aa:92:46:54:08:bd:f8:5b:0d:23:68:f5:bc:e3:e2:
50:2f:2c:3c:cf:f2:e4:09:73:2e:d3:ed:2b:15:40:
58:2d:1c:df:ac:0b:aa:95:ce:92:39:e2:4d:14:c0:
11:64:bc:a2:40:33:2f:0a:8f:5f:80:99:86:e3:41:
49:be:c3:2d:45:75:05:84:fa:4e:10:96:70:f5:3b:
8f:db:f5:7c:d7:a0:6c:98:51:03:d0:d8:85:e4:ee:
db:7e:c3:a6:ba:e0:44:45:b1:3f:f1:21:75:3e:2c:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F4:60:88:5E:2A:CB:88:34:B3:FE:83:17:36:81:EE:A3:4B:95:1C
X509v3 Authority Key Identifier:
keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2e:96:00:21:5e:37:5d:88:04:17:8c:f4:94:df:40:46:20:
4e:cd:c0:21:da:ba:f4:11:4e:34:91:7b:66:42:be:2d:1d:41:
ec:76:15:f9:9a:5c:fb:f6:3d:96:83:48:36:a8:0c:d3:27:d1:
29:00:83:17:cf:22:b9:04:2f:96:8a:bb:8c:8b:c8:0b:9f:59:
18:97:19:e3:8e:27:62:b1:45:b0:3d:4c:ff:60:0a:0f:71:0e:
e6:9b:14:2e:5c:d1:22:d9:79:73:ac:b1:63:46:b8:af:15:b6:
c8:cd:27:78:c0:e3:f9:a6:88:8b:80:b7:b9:83:a5:2b:43:35:
4d:0f:99:ac:ff:14:03:3a:9a:69:d3:3f:9e:93:3c:72:fe:a8:
b3:53:99:20:bb:00:e8:c6:5b:0e:b2:a3:74:f4:24:e0:83:ad:
71:be:38:bc:8b:3f:27:d3:99:46:f2:c6:cd:9e:80:78:90:c9:
29:c2:9a:14:4a:8d:57:bb:a2:69:1d:6c:39:1d:8d:c7:1f:f4:
53:3f:9e:31:4c:8b:80:7b:a3:10:19:c9:20:07:44:73:b9:ec:
c3:dd:e6:ac:0e:fe:9c:a4:ed:43:02:0f:2f:44:a7:c1:1a:a6:
b3:b7:70:83:1d:4a:46:ce:98:b3:6b:23:68:3e:a7:32:ca:38:
36:f8:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:55 2026 by rpki-client