Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: 6zO7PvoAqlpA4yHKDfaz2rfkD3wp3BL+G3dfC91yjOs=
Subject key identifier: 09:E3:FA:70:49:53:24:D9:49:BD:71:43:CD:E5:DA:92:4F:9B:B2:E5
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019D2584024206D8F2717D40C08B35C1BA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:41 +0000
Manifest this update: Wed 25 Mar 2026 15:01:41 +0000
Manifest next update: Thu 26 Mar 2026 15:01:41 +0000
Files and hashes: 1: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
2: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: xwW6WFeygoLyDPg1VOqTCaLCHQ7qqTKrDj64V7CnDZI=)
3: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:02:42:06:d8:f2:71:7d:40:c0:8b:35:c1:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Mar 25 15:01:41 2026 GMT
Not After : Mar 26 15:01:41 2026 GMT
Subject: CN=09e3fa70495324d949bd7143cde5da924f9bb2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:a5:01:63:df:0c:05:3c:5d:2d:1a:22:59:
a7:09:53:b1:c0:59:3f:85:d6:05:2a:bd:97:a6:a4:
98:56:2d:b8:c5:0f:cf:80:a0:78:ce:95:11:85:16:
7f:a2:d6:f3:2a:b2:71:e1:67:db:c9:0c:42:b6:f3:
59:1d:f5:53:24:4b:f5:cc:e7:c6:47:f1:ea:51:b6:
81:a7:77:8f:4b:91:52:bf:c7:b2:8c:0d:fc:92:32:
33:69:a9:d9:8a:65:7f:b8:53:fd:d6:88:c3:15:6a:
db:2b:09:26:8f:60:cc:d5:d0:fa:84:4c:2e:66:85:
ed:7d:7b:b9:e2:ef:82:77:a8:d6:69:08:a7:24:3b:
99:7a:b3:4e:fe:ce:6a:c6:c6:89:09:c3:70:46:62:
ff:30:61:72:16:31:42:36:72:72:65:c8:b0:b9:28:
c4:f9:0b:41:0d:fb:f9:ac:31:86:b4:9e:47:0d:5d:
4a:94:26:da:e1:f9:4e:c9:ba:e7:5c:65:64:79:8b:
40:13:96:c2:29:07:5b:b5:ff:ad:01:02:d1:4b:b6:
dd:fd:ac:92:60:27:1c:20:40:a2:42:6b:fa:99:90:
94:f1:f8:77:03:50:d9:7a:cd:da:f2:66:ba:27:cb:
e1:bb:7d:6b:fd:e1:0d:46:a2:e2:e6:61:c2:57:67:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:FA:70:49:53:24:D9:49:BD:71:43:CD:E5:DA:92:4F:9B:B2:E5
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:61:b6:31:90:d2:f9:db:d1:d1:98:2e:b5:44:77:e1:cd:13:
58:9a:27:d3:50:eb:28:a4:da:98:0e:b5:6d:d5:2e:bc:c0:15:
78:59:ef:fd:65:83:a3:85:e1:60:aa:f9:eb:65:d9:e6:ac:c0:
7a:a7:20:4b:1a:d4:64:a5:1f:8c:fb:ef:92:c0:e7:6d:fc:c3:
1d:e3:9b:b5:18:bf:be:20:d1:a8:7c:69:e3:c2:87:19:53:31:
45:74:75:c7:d6:7f:5f:5b:68:eb:d1:77:52:21:cc:2d:69:56:
ef:1b:8c:3e:3b:e8:7a:fd:d5:c8:25:c2:bf:d2:55:43:01:9e:
c5:8c:cb:db:13:60:cb:a4:f0:9a:13:a9:19:4d:7d:10:2e:62:
f6:38:dd:49:54:41:3d:bf:77:6c:73:5f:9f:81:1d:64:6a:91:
b5:fc:52:07:6b:21:e9:65:15:58:7c:8c:41:3d:8b:ba:1c:3a:
fe:dc:5b:5d:29:f9:d7:42:e2:bc:a7:a7:7a:d3:d8:5c:78:e2:
2e:9d:c0:77:30:3b:dc:ca:45:41:73:be:b4:80:1a:6c:a1:26:
dc:bf:97:5b:a7:65:a3:ab:37:30:cc:08:00:98:e7:06:d1:ef:
71:fd:69:3b:e3:d6:59:24:fe:17:d2:d5:07:7d:c8:03:4d:aa:
52:b2:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:29 2026 by rpki-client