Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: WJ97EDBASLFsIu9yHZJy966aNCUY71yqGw7Bto41Y0U=
Subject key identifier: 82:8B:46:F1:25:BA:8F:6C:76:16:8F:81:16:8E:F3:93:15:EA:37:A6
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 019D27A8F255111A648AC99641D9E0AE2230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=)
2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=)
3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: SDNBquzJeMoc+nKEwYUpb1UG0HCefY2rREmYr6x9/Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f2:55:11:1a:64:8a:c9:96:41:d9:e0:ae:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=828b46f125ba8f6c76168f81168ef39315ea37a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:75:b6:2e:50:28:78:b9:04:36:74:ce:60:
be:40:a6:0b:30:c6:c9:1d:33:48:2e:6d:7c:b8:76:
2a:79:91:d1:38:9a:15:67:a2:3c:91:b4:c9:d8:f4:
d2:5c:38:cc:92:5f:61:3b:34:89:22:ab:1d:1b:08:
83:3f:3e:9a:68:7c:1c:06:39:ad:01:c0:cb:4f:4d:
25:2f:7f:ef:53:7c:96:df:7f:43:9c:71:bf:27:25:
ef:76:05:eb:3f:57:3c:f1:a6:9c:c3:c5:9b:26:ab:
79:cb:07:b8:66:84:25:e4:bc:3f:84:24:8b:1c:c8:
47:b7:94:10:4d:cd:76:38:2d:ef:12:3c:5e:6d:69:
9c:cf:fb:43:de:a3:5d:f3:a9:8d:b5:95:0f:4c:f6:
7f:df:48:ad:66:47:8a:6f:ea:c9:3e:70:1c:33:3b:
04:69:ff:37:54:3e:11:65:cb:54:b7:31:34:ec:90:
28:5e:ff:94:1b:fc:58:71:5c:ce:bf:1c:37:fe:3c:
1e:4e:ad:96:56:64:60:da:89:d3:bb:1c:61:f9:d4:
8a:4d:6b:24:8d:af:f8:5d:65:ac:88:4e:fd:48:02:
2b:88:8a:3d:95:a7:12:c4:c5:fa:e2:60:17:d3:f3:
8e:ae:85:33:8b:13:a8:6c:bf:62:d7:14:fc:f8:9e:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8B:46:F1:25:BA:8F:6C:76:16:8F:81:16:8E:F3:93:15:EA:37:A6
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f2:0f:85:7e:4d:02:e7:87:3f:47:8b:00:e0:2c:d8:91:f1:
d0:22:c3:ef:88:d9:40:82:c9:32:bb:86:4a:c3:02:a5:76:5b:
56:86:72:9e:5f:cd:43:44:a6:d5:a2:5a:d2:33:1b:72:ae:fd:
09:69:8d:8f:eb:6e:4b:15:56:90:93:b8:8f:9e:22:6d:5e:cc:
51:69:4c:13:03:01:37:66:03:8b:cd:30:f7:cc:f8:7b:b6:bf:
d5:70:c6:fd:cd:f1:4a:fa:d2:b5:e6:2d:35:82:8d:b8:dc:a8:
9e:8b:83:10:7f:2c:73:5e:8a:f8:a6:83:25:8c:60:94:b7:0f:
4b:08:ac:ff:9e:15:55:47:a5:3f:53:15:ed:05:8e:51:a4:9b:
d7:bd:f9:23:ab:8b:b5:c6:c1:4e:56:f4:26:fc:c4:96:f3:b4:
ff:96:6c:61:dc:b6:61:69:aa:d3:f5:58:0e:12:7e:2a:30:70:
d4:42:60:45:f9:3b:c7:60:9b:a9:73:be:3e:de:41:8a:d2:00:
23:42:90:63:6c:6b:01:2d:54:d1:0f:ad:ba:ff:9e:d8:df:e0:
78:54:14:61:ad:58:44:4c:60:85:9f:b5:22:93:a6:ef:2a:3a:
2e:17:5f:9c:8a:1b:51:dd:96:98:5c:29:e0:20:83:c5:28:4f:
41:5a:c4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:31 2026 by rpki-client