Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier: zRRi8xtB8V6TooLy7t+ArHah/7bfJyB0VW5qWCD591c=
Subject key identifier: 14:C4:79:8B:1E:E6:D1:33:25:43:BA:1A:02:A3:E9:C6:4F:C4:58:9C
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 019D28F33873BE7B40D1B74F6583DA426064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number: 0579
Signing time: Thu 26 Mar 2026 07:02:01 +0000
Manifest this update: Thu 26 Mar 2026 07:02:01 +0000
Manifest next update: Fri 27 Mar 2026 07:02:01 +0000
Files and hashes: 1: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: MvTYQPHNM1rr9m7abJ/KKVy3ky4hxgYO5KB4GaxWShk=)
2: TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa (hash: QmsaqQhRAEGLEdE3C26cYEAQUOOxk2PCRLum00KwaiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:38:73:be:7b:40:d1:b7:4f:65:83:da:42:60:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Mar 26 07:02:01 2026 GMT
Not After : Mar 27 07:02:01 2026 GMT
Subject: CN=14c4798b1ee6d1332543ba1a02a3e9c64fc4589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:32:d2:01:57:58:ab:ab:3e:75:41:35:51:1e:
da:85:38:0f:b1:55:d1:e3:0c:fe:6a:3c:70:a6:4e:
e6:0f:91:02:8f:6b:a6:90:28:45:17:3c:e3:20:80:
a1:14:51:a7:c2:14:3e:24:73:53:ff:c2:f7:d3:27:
ac:43:4d:9e:88:5b:c6:86:3b:67:96:25:cf:b5:fb:
b9:54:30:d1:9c:da:bb:1e:58:98:ef:41:e1:2b:91:
63:51:8e:5a:ee:7a:93:ca:6d:60:bc:19:c0:6e:35:
43:9f:e3:bc:f5:6e:07:e0:e2:47:49:a9:16:e6:aa:
70:3c:10:45:e1:be:d8:46:f7:81:87:6e:fc:64:48:
57:60:44:6f:8d:13:59:53:8a:eb:9c:67:22:96:96:
fc:d2:96:1f:9c:bf:1f:7a:19:74:55:c0:d9:80:d0:
d4:fc:c6:c8:a1:3c:91:86:8c:0a:82:c5:c3:37:e9:
78:0c:27:98:f7:d5:f2:ca:68:d6:f3:ae:97:6c:6a:
ca:aa:36:9a:76:3b:34:c9:e6:29:53:99:4e:78:79:
97:f4:d4:11:e1:67:37:93:bf:f5:47:ee:67:b8:40:
ba:f9:ea:79:b9:fe:f0:04:56:b2:fc:e8:3c:68:48:
b4:89:14:8d:f7:91:73:2f:ed:db:6b:27:48:61:2f:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:79:8B:1E:E6:D1:33:25:43:BA:1A:02:A3:E9:C6:4F:C4:58:9C
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3d:8b:29:34:77:28:ed:da:39:a2:c5:6d:0f:0e:e8:b5:2d:
5f:32:7a:2f:c6:c6:7f:a3:99:5a:e8:f6:99:fe:fa:fc:7a:4f:
97:70:33:5d:41:d4:f8:9e:1b:83:de:a4:60:d1:2e:70:cb:51:
2d:8d:3a:51:bc:d2:07:dc:b9:8c:09:30:54:b1:6f:7b:ca:ae:
03:b5:81:2b:a8:b3:af:57:7b:ba:d5:dc:0f:22:b7:4d:87:ba:
7b:15:63:59:e0:d6:11:3e:5f:d5:2d:4f:6d:e2:32:70:07:1a:
85:16:67:7a:c3:b1:6f:fd:36:0c:d3:b6:3b:2a:57:c9:75:12:
3b:30:e5:ee:9c:d1:8b:89:9f:49:a6:f6:67:cb:16:bd:28:72:
ec:99:6e:09:59:44:90:52:b9:0a:37:af:c4:83:c5:1b:18:f1:
f5:89:0b:4d:dd:8f:61:38:ed:a9:61:dd:99:7c:8d:f2:2b:cb:
fa:9e:15:28:33:ca:a6:ea:85:8a:7c:a2:dc:9b:12:2b:70:bc:
9c:7f:23:08:11:f3:62:18:eb:9c:66:70:de:8f:cd:dd:40:f5:
c4:b4:fe:a1:f0:1d:1a:51:de:be:b8:d0:6e:3f:b9:2f:fc:90:
cb:74:8e:ee:b7:a8:05:ed:49:67:06:78:39:a2:ea:42:77:69:
ca:0c:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:21 2026 by rpki-client