Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: 1KHJIXWCSji5phQKG+RVCWeGaGHX/8ZDbs/EpTWFiVc=
Subject key identifier: CB:E3:D2:D4:40:B4:E0:B5:9E:F1:FE:7A:15:52:BA:A3:78:5B:60:08
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 019D265F76DAF0CF32121F887B8B1F979312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: KlD3VWHQ4aqkbxPTSFe9lHD/ULz/+9dyaWgQPx7iw7o=)
2: k3T33aZGj24vxqNw1UfxEFrHk44.roa (hash: 3m3SCEsy+0+eUIAdjTP7HM49Wof/8SG/a2XAHOJJcbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:76:da:f0:cf:32:12:1f:88:7b:8b:1f:97:93:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=cbe3d2d440b4e0b59ef1fe7a1552baa3785b6008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:45:0e:9b:de:20:28:b7:c2:fe:f4:d8:8d:
15:bf:4e:34:0a:fa:8c:89:ab:4f:0e:5c:bd:7d:c5:
1c:26:13:7e:e0:20:72:df:59:cb:82:50:05:eb:a4:
57:9a:14:88:66:2e:c1:a1:a6:f6:e4:c4:9b:78:3a:
7f:2c:ed:bb:cd:8e:94:f1:7a:f5:70:33:fd:91:86:
70:73:9c:88:b6:e6:26:c2:82:60:d8:fb:91:e1:e7:
69:f7:3a:fd:d3:6e:18:41:15:a2:86:e5:95:73:d2:
95:7f:7e:16:28:5d:be:76:9e:ef:64:fa:c6:ad:f4:
a2:39:1f:7e:88:85:8d:84:ad:5f:40:85:1e:16:1a:
24:37:5a:1c:fc:21:68:ce:f6:ec:a1:b7:ce:11:55:
4b:93:af:17:e9:cc:96:a1:4a:ce:d2:0e:1c:cf:35:
7a:ba:98:a3:d6:54:b3:4f:08:c8:21:53:e7:75:85:
ac:9d:01:b8:c7:a9:55:1a:07:06:e0:a8:f1:23:66:
7c:87:48:86:ee:5e:76:4b:58:10:7e:0f:c8:58:1e:
c3:e1:7b:01:b9:0f:14:b1:31:aa:cd:61:21:8d:39:
c3:d0:89:cf:5b:61:22:c4:aa:06:a2:bf:35:88:92:
8c:16:54:5e:44:bb:ed:d4:cc:21:72:b5:07:ef:30:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:D2:D4:40:B4:E0:B5:9E:F1:FE:7A:15:52:BA:A3:78:5B:60:08
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:71:a2:88:38:1b:c5:46:db:f1:ea:02:fc:62:ca:e6:64:99:
53:00:ec:b3:c7:dc:c4:23:04:68:b1:ed:aa:15:0c:c0:fa:21:
92:fd:90:d4:6b:6d:f2:a4:90:cc:1e:53:f2:0e:8c:4f:88:26:
ad:15:31:08:ba:62:2f:44:36:07:49:b1:bf:49:19:37:9a:23:
36:a3:2d:db:b0:85:46:11:52:8e:dc:41:eb:03:b9:18:7e:97:
df:f8:70:95:b8:1b:c3:5f:78:e2:d9:54:a0:80:69:35:93:a7:
93:e1:80:7a:2d:e9:40:bd:14:aa:ec:da:4f:ba:19:e5:38:a1:
1e:dd:2a:a9:0e:ed:83:d4:b2:0c:4c:26:f3:e1:d6:6f:d0:f9:
5a:5b:e0:02:a3:83:c8:b3:be:1c:63:12:1a:cd:ab:1f:4e:02:
f9:c8:12:98:00:5c:b5:4e:63:d1:3a:06:25:8e:6f:b2:12:52:
4e:9b:54:67:6d:98:22:67:66:1f:e6:cd:9f:d2:38:2f:46:56:
7f:75:8b:ba:ae:a0:15:9c:94:68:90:ec:70:cc:32:f5:97:3d:
65:bd:24:7c:4f:e4:74:00:b2:e9:48:e5:de:b3:1d:a8:53:49:
f4:e5:ca:8a:40:53:51:e0:2f:41:ec:95:56:70:2d:cc:55:46:
43:c2:3d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:07 2026 by rpki-client