Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: g1VDSdplTDBbqinx7/3P+bNXyZ0pNba5at1DtSD9/IA=
Subject key identifier: C4:A2:AE:D2:BC:81:B5:29:62:82:A5:7B:7D:05:CE:1B:12:F1:38:99
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019D26288C59BFA6706DE62A623D9A85E2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 17B7
Signing time: Wed 25 Mar 2026 18:01:24 +0000
Manifest this update: Wed 25 Mar 2026 18:01:24 +0000
Manifest next update: Thu 26 Mar 2026 18:01:24 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: d1qCr6nzwyu+zJnMds3qTFRKeQ5avVQ0KeunQfL3Ldw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:8c:59:bf:a6:70:6d:e6:2a:62:3d:9a:85:e2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Mar 25 18:01:24 2026 GMT
Not After : Mar 26 18:01:24 2026 GMT
Subject: CN=c4a2aed2bc81b5296282a57b7d05ce1b12f13899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:1d:3c:8b:2c:66:00:de:68:fc:ba:7c:8c:
1d:37:14:b5:b4:5d:c7:92:95:9e:3e:1e:65:e3:bd:
f4:18:6c:f8:4d:43:46:eb:d4:43:24:3c:35:2b:17:
bf:32:4c:c9:43:66:83:6c:18:e4:88:3c:8c:08:e2:
e3:ea:82:7d:55:47:4f:83:e0:f5:ad:55:ff:a8:8e:
95:2e:f5:ff:5c:f5:4b:5e:a5:3f:1a:c1:22:bd:41:
da:72:4e:43:e2:f0:10:73:8e:83:79:ca:6e:91:0a:
07:93:3e:81:42:6e:37:d5:69:75:9e:bb:90:ed:b3:
7f:e9:69:37:f4:5f:ae:2a:59:6a:96:c8:2b:59:59:
1f:fe:72:8d:45:90:6f:7e:af:49:aa:96:d9:27:dc:
f9:1f:35:04:7b:54:c4:fa:17:b4:29:21:e9:3b:04:
60:f1:be:8b:79:bd:92:5c:7e:f8:28:48:f9:c9:fd:
a0:cd:d9:5a:a2:db:10:9d:92:7e:d2:a3:f1:81:0f:
9e:e8:79:ae:9a:b9:ac:68:79:ed:43:5e:ff:2d:2c:
17:84:11:9d:ca:7d:c2:e4:59:43:94:6b:3a:71:dc:
a8:73:8c:f1:95:b2:18:61:f4:50:0d:09:6a:fb:6e:
fd:b1:d0:f8:f6:03:14:d8:2c:ea:88:02:1d:85:18:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:AE:D2:BC:81:B5:29:62:82:A5:7B:7D:05:CE:1B:12:F1:38:99
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7d:94:dc:83:64:c2:36:b1:b3:d2:e5:58:ba:7d:50:a8:b0:
e6:e2:bb:3c:a0:87:06:58:5d:1e:98:08:6e:ed:63:44:3f:29:
d3:1c:ff:d5:e6:7a:e0:6e:4a:6f:c8:45:88:e0:30:b5:4f:21:
b3:31:8b:72:2f:df:5c:4c:de:38:7b:fd:b1:ef:e9:77:b4:a4:
34:e8:8e:05:0c:8b:c4:f9:2c:e3:9a:34:0f:b1:d2:d5:4d:e2:
5b:8c:98:13:9f:9a:1e:16:c4:b4:83:56:79:eb:f0:82:75:31:
b3:19:f1:73:4f:0d:b9:a8:12:94:2b:62:46:87:1b:ce:be:ac:
38:db:40:87:e8:8b:e3:4f:39:ae:81:e8:f9:50:f7:44:35:9a:
83:67:32:08:16:98:fd:1c:42:49:ba:5e:27:67:c2:95:fe:e2:
63:da:74:b5:f5:b1:29:0f:43:5b:ae:db:4d:03:95:54:5c:70:
f9:c0:56:2d:f5:b9:3a:9d:a7:51:4c:01:97:63:68:61:05:4c:
c3:43:ae:33:a7:ce:97:86:32:d6:79:d0:34:4f:01:52:af:f6:
fc:25:95:1c:a2:a4:2c:6a:cf:d2:e6:e7:d7:e6:80:8a:91:a8:
d3:b2:3a:46:a5:a3:2d:8a:fb:20:a4:36:2c:52:c3:3b:3a:59:
36:46:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:55 2026 by rpki-client