Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: gnl/dnFBr4fYC8C7gWTaA01PKaXp2s90nRvzL5n5uuM=
Subject key identifier: 3F:79:35:5E:AF:69:69:F1:C5:74:BD:63:DC:9B:9C:A5:79:88:23:3E
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019D26CCABF488B22468DD1F92945B872E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1561
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: vauDqwm5/gJHSZ0IiHBkrO4zdlCzFFsJlag7RfxMe1A=)
2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ab:f4:88:b2:24:68:dd:1f:92:94:5b:87:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=3f79355eaf6969f1c574bd63dc9b9ca57988233e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:c9:6e:3b:02:25:ef:32:28:45:21:ae:7a:
4e:05:26:21:ad:2f:0e:49:50:7c:d0:53:95:5a:1f:
8b:b9:cd:c8:f2:ea:99:d1:cd:d8:0a:06:65:96:2e:
87:4e:21:6f:7c:ef:87:f3:7d:93:20:d7:cd:d8:ba:
63:5a:aa:fb:77:4b:88:35:06:f2:4c:21:ff:7d:a3:
80:fc:b5:3c:60:3f:8f:28:1f:9e:46:6a:55:d0:b0:
b9:71:af:fa:a1:88:70:db:a5:d4:55:15:fd:34:f1:
82:d6:b8:3f:fe:52:18:2c:07:69:09:40:7c:16:bd:
51:c7:80:db:3c:2e:2e:f6:c9:97:75:ff:e3:d3:ac:
df:ce:e6:30:b2:20:b6:a6:ad:b1:71:df:e2:51:1e:
69:fa:f5:f8:f4:45:30:63:8b:15:a2:ef:a1:2b:83:
cb:ce:da:ad:dc:cb:83:b1:05:94:3d:b3:3b:61:99:
3d:2f:7d:18:94:a9:7b:c6:95:90:bb:a7:1b:db:d1:
d8:69:a5:13:03:ae:04:05:f2:1b:ad:e7:7f:6e:3b:
4b:89:db:3c:5d:9d:58:39:08:ea:6c:ae:0b:d1:d5:
f3:c3:a5:ae:1e:5a:80:04:50:8a:9d:09:d8:8a:ef:
7c:07:75:d1:88:57:d3:67:62:fe:0c:22:eb:5a:15:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:79:35:5E:AF:69:69:F1:C5:74:BD:63:DC:9B:9C:A5:79:88:23:3E
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:04:03:30:be:a3:63:5d:5b:ba:e7:dc:6a:91:50:48:5e:fc:
64:d4:4f:73:58:e0:94:3f:56:ef:ec:82:3e:2f:af:43:2a:28:
78:62:16:d7:26:65:75:f6:74:f7:0f:a4:09:66:d2:a6:4e:c4:
6c:a5:02:4d:c3:c7:48:db:3e:8a:95:ea:73:05:5d:d8:91:c6:
f0:f2:35:64:39:93:eb:1f:02:f0:ee:1d:bb:56:89:f5:d4:e1:
1a:03:66:34:39:df:e6:90:0b:11:bd:2d:c7:ab:2d:b2:4b:07:
2b:eb:74:3e:f4:8c:45:28:07:da:ae:50:8e:7f:1c:e8:11:b4:
14:1e:34:88:60:2b:cb:ef:be:ea:83:ef:ac:29:2b:3a:53:a3:
3f:0c:c6:cb:bd:f2:79:d1:0e:7f:51:84:35:11:fd:8d:6c:a2:
1d:e2:22:2a:e0:40:6a:3c:cf:66:70:9c:a2:78:ee:40:19:74:
6a:04:24:c5:fc:bc:92:ea:0a:cc:0d:24:0b:45:c3:cf:5d:66:
d6:db:99:d2:ec:d6:1a:c2:9e:61:d7:7f:be:b6:b7:e7:09:c4:
c6:e2:ae:bd:e6:d3:5a:f1:b5:20:07:48:01:57:6f:34:f2:58:
6c:53:8f:db:06:7d:2f:b0:3a:d8:6a:bd:2e:99:42:0a:1c:dc:
e2:66:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:41 2026 by rpki-client