Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
File: QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json)
Hash identifier: YwY+Yy/hu4MXddAEjDkf7rXcNAfFcQXTxAOxnoPZ2KA=
Subject key identifier: 7C:0E:AF:AF:A6:35:A1:E3:BB:81:BB:C7:0A:5A:06:96:09:D3:B4:88
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial: 019D27A8B6C0D4D3AD5652612FACB518AD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
Manifest number: 1853
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: Pz1ijF7NvXZpwroWfDzmV2z1wts.roa (hash: 2MVgLGXOwFf2G7MSkrktFH0ASrpgVLNSAdBfzn0r5Z8=)
2: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: xn615+NxR+dpD3CFA2H+M1L9xbTHXMLwkF2MrQpipOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b6:c0:d4:d3:ad:56:52:61:2f:ac:b5:18:ad:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=7c0eafafa635a1e3bb81bbc70a5a069609d3b488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:d6:a1:c5:30:c4:67:bc:5a:7b:f6:50:36:
8c:c2:ae:fd:45:7e:1b:57:30:68:43:05:05:ea:43:
7d:a4:ad:ef:1b:88:80:8b:5d:45:2d:2d:9a:bf:df:
ff:15:b6:c0:1e:96:70:c7:8c:cc:59:4b:dd:1b:63:
fc:d3:a8:0f:d3:f5:6a:f2:e4:41:c1:36:05:08:b1:
22:ba:a4:3b:3f:41:d1:5b:d4:00:49:97:1f:2e:a5:
b4:10:60:40:49:75:7b:ac:32:dd:37:31:46:82:36:
0a:f4:be:bd:45:b2:c0:02:c1:8b:39:80:1b:57:fd:
38:13:69:91:45:20:87:e3:e5:e2:fb:1e:68:61:dd:
b3:4c:2f:e4:cc:79:4f:bb:79:eb:69:d3:15:84:81:
e9:4f:a3:58:74:6c:ca:7b:b1:90:36:b8:2a:2d:8b:
4b:8b:20:19:02:48:5b:d5:96:f6:e9:a2:47:eb:84:
19:36:c8:bb:28:2f:5c:0d:75:fd:7a:8f:78:d5:c5:
a7:80:f4:2e:ad:f2:2f:e8:36:76:a6:ab:4d:01:61:
34:e7:bc:ce:b0:44:e5:d2:96:2a:d2:db:2f:e3:46:
cf:df:ae:94:b6:08:62:5b:2d:93:9b:5f:10:28:35:
99:fa:c2:fe:f8:f1:59:0f:5d:c5:3b:c2:1a:a3:63:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:AF:AF:A6:35:A1:E3:BB:81:BB:C7:0A:5A:06:96:09:D3:B4:88
X509v3 Authority Key Identifier:
keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:72:fd:7b:43:60:3f:3f:b9:80:73:b4:20:b8:18:09:ba:37:
a6:72:11:df:72:9f:86:7c:6c:eb:fb:33:18:07:7b:b8:a2:f7:
ae:e1:87:31:8c:02:fd:07:81:9d:54:dd:f5:38:30:2b:98:62:
bd:c7:06:58:89:0c:ea:6d:7d:a8:70:24:b8:ed:55:a4:e2:57:
f3:a5:f7:b8:2d:e8:a4:65:b5:72:a0:23:c4:40:66:04:df:bc:
56:40:e3:6f:10:0a:e6:60:6e:22:70:13:8c:dd:22:d4:8e:66:
d5:1f:ed:25:d1:bb:66:be:27:81:66:a7:fd:5b:5c:d3:ac:4f:
7f:95:88:59:6b:b4:4a:c5:b9:d9:9e:d8:2b:fd:ad:ec:a2:0b:
b9:71:c7:2e:46:7a:67:b3:5e:f1:86:22:db:1b:cf:63:cd:bf:
4c:09:bc:72:6e:04:f3:cd:97:eb:97:2f:4e:15:98:c8:5a:3c:
8e:8b:81:f3:4d:dc:9c:02:e7:1e:d7:f8:67:f5:2a:4c:f3:5f:
6a:c5:8f:b0:e0:d1:88:8f:d4:fa:69:46:a4:7d:bc:0f:29:8a:
ee:cf:ae:99:18:f5:b8:04:21:fc:fe:d1:9a:10:4d:68:7d:f6:
52:4d:32:57:e8:6b:48:9d:e8:da:6b:6d:16:79:0a:ca:6e:70:
08:84:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:39 2026 by rpki-client