Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: UWBxzvC+IEPw16ufKRlkdUtrKZlkBzYkWVE29P3ct/E=
Subject key identifier: 47:94:93:E9:D8:51:B2:C7:22:4E:3E:F4:BC:92:1B:D9:45:E3:CB:8C
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 019D27A8F061226809ACBD1960E3333DF95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0DE4
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: PtqRh4uLNVo8j685c/2zJbbWWN9BMjheWyBhd29HVQU=)
3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f0:61:22:68:09:ac:bd:19:60:e3:33:3d:f9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=479493e9d851b2c7224e3ef4bc921bd945e3cb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:3c:17:10:ae:82:43:f9:fa:86:cb:0c:ee:
5a:10:ce:87:11:bf:48:03:e2:b3:43:52:a3:cf:bd:
15:65:42:4c:79:57:62:2f:78:02:7d:6c:38:af:aa:
55:8d:ab:62:3e:70:1b:7c:f9:cd:a5:66:17:8c:15:
e3:c0:d3:bf:bb:71:3d:7f:be:76:fe:ce:86:14:43:
ae:96:45:ca:97:b0:1a:2e:1a:41:45:f8:c8:85:aa:
bc:d2:47:64:a8:f4:e1:66:d1:09:8e:2c:35:7b:ad:
71:07:64:ea:fc:79:0c:87:77:16:4b:89:ab:8c:d6:
7a:91:36:fc:6e:89:6f:c3:24:32:37:57:c8:fb:8e:
5d:1b:f1:03:67:93:6f:09:c3:ac:52:05:8c:c5:bc:
1e:f6:c1:66:cd:0c:8c:97:e6:72:bb:20:3d:56:30:
c4:33:50:c1:0a:51:09:4f:9d:cc:5d:98:5b:84:51:
60:fb:9c:95:e2:a3:9e:b8:40:4f:65:b1:2f:a7:8b:
b1:e0:0e:2f:cb:e0:4d:5d:50:35:ce:3d:80:19:e7:
b0:46:d9:3c:5d:99:cf:32:f7:89:1e:96:59:3f:8e:
85:fc:e8:a6:46:cc:c3:22:ff:b6:bf:3d:65:33:ed:
67:44:b1:b7:8b:7c:49:cd:39:8d:fe:d6:38:a1:a5:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:94:93:E9:D8:51:B2:C7:22:4E:3E:F4:BC:92:1B:D9:45:E3:CB:8C
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:76:bd:b7:00:b1:48:d5:65:3e:21:5e:14:5b:60:07:5c:ce:
f2:9c:f7:32:ee:d7:23:88:2a:ed:b8:c3:ca:89:bf:d8:bd:01:
aa:ec:ee:e0:31:cd:d2:aa:53:09:93:0d:09:86:4f:06:01:74:
cd:2e:81:fd:43:27:5e:69:71:30:b5:97:64:85:a2:45:a3:e0:
49:85:8b:a4:69:05:28:2e:d3:7e:ca:22:88:0c:4c:7e:12:d3:
7f:ec:e0:e3:c7:58:38:10:53:9b:95:af:19:17:54:69:d1:82:
c4:99:3e:03:98:f0:af:65:5d:7c:df:74:82:03:97:11:3c:ca:
4b:c1:14:90:7f:0c:97:77:4e:a1:a5:e3:db:c3:e5:ee:7c:c1:
93:88:29:49:77:45:a5:e5:86:df:26:1b:a6:14:df:0c:c9:41:
d7:22:90:cf:b3:34:f2:bc:b6:cf:be:78:1f:12:f4:48:25:14:
15:0f:0c:3a:19:51:de:dc:82:52:3f:30:6b:2b:35:13:71:9a:
4a:ff:3a:57:b7:6d:c4:2b:f7:bf:26:e6:0b:0c:f6:fd:95:ec:
e7:fd:55:68:44:50:a8:64:78:70:01:25:e0:41:25:9c:4b:b0:
cd:53:98:69:ea:2e:2c:34:a4:a6:0a:1d:18:34:14:20:ed:e4:
a8:4e:d2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:06 2026 by rpki-client