Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: ylEVr2GDXeJJidPfmga/YDky3RcdGGCpRpg3BJ8Uk9g=
Subject key identifier: B6:FE:42:09:01:7F:F0:68:E3:62:03:44:3B:A1:3E:BD:11:BB:A8:76
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 019D28F2491B87E90A611DFCA5376FF522C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 07:01:00 +0000
Manifest this update: Thu 26 Mar 2026 07:01:00 +0000
Manifest next update: Fri 27 Mar 2026 07:01:00 +0000
Files and hashes: 1: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: q0y2a2KOO8hgzrueIK225mrqCf69CSAiR2XQ0bxPoWU=)
2: TY-6wIosCGnW66OWe0_NroPMbeI.roa (hash: nXhbRc2aX8mNZLPnZ6EyWqXf/5jOIvwFHTTVaDOKJ7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:49:1b:87:e9:0a:61:1d:fc:a5:37:6f:f5:22:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Mar 26 07:01:00 2026 GMT
Not After : Mar 27 07:01:00 2026 GMT
Subject: CN=b6fe4209017ff068e36203443ba13ebd11bba876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:37:a6:d1:5b:fa:f6:2a:c3:56:8c:47:fb:
14:54:39:fa:7d:ad:c8:b4:5e:8c:e0:5e:94:16:1a:
7a:89:d1:a9:27:04:9e:c0:07:77:3b:84:f8:1a:a3:
c9:2f:a5:fd:c3:74:ab:b9:ac:01:d5:bd:72:ef:ea:
98:16:2f:8e:23:0b:ec:07:fa:9e:b7:6b:d9:f8:2f:
21:e0:89:fa:c2:a3:9d:8e:0b:ed:e5:a4:ee:b9:0e:
36:86:83:74:3f:f7:97:b1:3c:20:d2:39:9b:71:1f:
ef:27:18:81:c2:04:9f:01:67:25:4f:aa:11:50:73:
93:82:9d:9f:46:f8:96:6e:d2:7b:a2:7f:5c:3a:c9:
90:d6:92:b3:a6:ae:43:da:89:20:67:95:58:d5:36:
dd:54:e7:ba:92:71:43:f6:81:91:48:ec:27:10:66:
87:9b:a3:88:85:99:dc:39:3f:5a:1f:67:bc:14:f6:
7c:77:5e:67:2c:c2:f8:d5:32:79:e7:44:47:0d:13:
ae:4a:88:aa:95:9c:8d:e5:7d:61:41:6d:41:0e:2d:
f4:a4:a9:fb:d8:55:9a:56:c5:69:c6:9d:ff:2f:8b:
e5:89:24:61:5b:62:92:9f:38:b1:b1:ba:b3:2c:f9:
91:d1:8d:ef:7b:f3:96:59:f1:b5:dc:c9:5b:e8:18:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:42:09:01:7F:F0:68:E3:62:03:44:3B:A1:3E:BD:11:BB:A8:76
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4a:ff:e3:3c:82:9d:a5:9c:a6:d8:1f:c2:99:9a:eb:96:d5:
b7:f4:1e:78:44:0a:27:54:12:1e:66:de:98:c0:c0:7d:19:55:
14:28:39:07:64:b8:53:69:60:49:b3:3f:71:48:29:24:db:52:
ee:74:35:d5:3e:9e:94:55:13:8a:29:4a:a4:4f:fb:cb:66:29:
23:82:d1:18:8a:b6:05:f6:ef:73:c5:c4:3d:1e:a7:a3:4f:59:
f1:ae:5a:cc:31:58:e7:b0:01:51:2c:7e:e5:fd:e7:b3:f3:e7:
70:cb:39:e3:a7:77:d1:27:6e:31:51:aa:9a:8b:00:81:3e:0f:
81:9c:5a:db:b0:d4:e1:df:25:9e:5b:de:75:36:67:e4:e8:27:
9f:71:19:81:3e:56:f9:88:8c:48:27:53:f9:7c:21:5c:de:5d:
35:75:8c:b9:6e:aa:43:05:6f:e5:4d:fb:55:f1:17:36:36:b4:
5f:bd:95:a3:9d:4a:ac:ee:e4:a8:42:90:ff:0d:69:b3:f1:9d:
63:49:3e:b9:72:5e:fd:8e:50:d1:ec:88:02:54:0b:c1:50:c6:
0c:ec:03:18:f3:72:5e:ee:1c:5e:8c:d0:2c:eb:9a:38:b3:2c:
b0:3f:e0:5d:98:20:71:5e:3c:52:32:7f:78:4f:3f:57:40:d5:
77:09:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:58 2026 by rpki-client