Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: ENlIL3+RpbG4xlGVOiIeBGhM23mgH91qVEnr/PUd3r4=
Subject key identifier: 3B:34:06:75:4A:2E:E7:1B:13:8F:4E:6B:30:A6:28:47:BD:45:E7:D8
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 019D2AE018FA26DD78FCCEEDD0FBA9DF3A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 04E5
Signing time: Thu 26 Mar 2026 16:00:22 +0000
Manifest this update: Thu 26 Mar 2026 16:00:22 +0000
Manifest next update: Fri 27 Mar 2026 16:00:22 +0000
Files and hashes: 1: 2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa (hash: VPm4JxETY4pUG2qbLQfLY9WMJOpVuE0GwkXWlkKqHlA=)
2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: MKKZWzcASCFm4j0F3BMBC8yYbsQLz0rqZQa2OMYUsRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:18:fa:26:dd:78:fc:ce:ed:d0:fb:a9:df:3a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Mar 26 16:00:22 2026 GMT
Not After : Mar 27 16:00:22 2026 GMT
Subject: CN=3b3406754a2ee71b138f4e6b30a62847bd45e7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:66:70:6f:59:40:b1:7e:e3:46:a3:38:70:
0a:30:ff:c9:55:a0:d2:8d:09:09:d4:db:4d:14:78:
dc:a2:20:c3:8d:f2:ac:56:56:10:20:8b:fe:3a:b2:
de:c0:22:e1:5d:be:77:1d:e8:8e:82:0b:4b:12:97:
23:f9:c6:42:4b:bb:4a:d1:b5:7d:48:66:28:66:20:
b4:77:a9:6b:32:93:62:19:4c:b6:02:6e:22:d8:18:
c3:fd:ac:58:9d:f0:1a:c0:29:dd:53:6f:49:db:87:
32:cc:da:a6:ba:ec:d6:f7:a8:6e:4f:5d:6d:36:fc:
e7:8c:f6:79:98:74:fc:8c:0c:29:d0:8a:a3:f6:82:
d6:e0:36:0c:cd:29:e3:76:ca:1a:53:2a:5d:67:74:
28:cc:11:4f:35:50:e7:e4:76:04:56:20:ac:64:dd:
ba:fe:c9:64:c3:ac:06:bd:ad:05:53:bb:bd:4a:5e:
d0:31:a7:e9:29:2c:5e:9f:8c:2b:3e:17:ec:b0:8c:
a2:71:4e:4e:d2:0e:c3:9c:fe:3f:4f:f1:8f:21:c8:
11:02:3a:db:56:7c:12:5f:7d:ea:f1:c0:d2:01:d6:
a2:e5:83:a9:c3:d5:16:9d:41:a3:22:31:9e:8c:d4:
11:fa:4d:44:bb:de:1a:30:2a:f7:78:0f:6e:ce:47:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:06:75:4A:2E:E7:1B:13:8F:4E:6B:30:A6:28:47:BD:45:E7:D8
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:37:83:4b:1a:7c:60:ad:37:4a:88:dd:a5:20:70:41:3f:fd:
6b:8f:c2:52:29:67:da:28:d8:2b:1c:91:88:16:e5:a0:b4:5f:
3d:3d:f8:c7:16:5e:1c:f0:55:6c:8e:6f:5d:38:bf:50:f7:33:
94:23:d6:7c:12:e3:cd:8b:75:ea:a3:13:9e:5f:61:48:30:35:
c1:95:30:47:ba:88:e4:c4:58:20:1c:d4:6b:8b:16:90:f4:fb:
93:79:ed:5a:5a:f0:ce:c3:20:be:64:51:3e:ca:ce:67:8e:c0:
4d:d3:58:54:9f:87:04:e4:73:d5:28:ae:16:7a:d7:9a:99:28:
4b:7b:83:a2:c2:28:65:07:42:60:64:c1:14:1a:e4:48:ce:04:
a6:fa:42:9e:e9:8c:f8:74:f8:ea:d9:db:f5:ef:b2:a5:2b:80:
85:b9:45:89:fe:e7:d9:c0:30:20:c4:3b:8f:78:07:7f:a2:32:
53:41:07:88:49:5f:f7:41:55:e5:54:ee:88:9c:d9:eb:c5:9b:
4c:83:9e:f1:55:62:28:1a:9a:3c:e6:ac:3b:df:88:d5:50:82:
0c:af:c2:27:2b:a8:29:7c:5d:8b:03:c3:0a:fa:54:c6:6f:4b:
62:45:9a:60:08:fe:4e:56:8a:0f:7a:db:6f:3f:64:8e:81:8b:
83:d9:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:59 2026 by rpki-client