Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: VCBP8mOIXdctuF7PcrcY6HQ3v6GMDZuHhxZKx2A5C3A=
Subject key identifier: 9B:21:F2:5C:CC:9E:53:0E:35:86:96:2D:A0:16:63:D7:F0:2E:59:1F
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 019D2884B0A98DD4D88003C4DF2C20D10318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 1540
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: rVDwibNUSc/hYNYhf2FyhHUkUggMiL1k3YEKgV23NuI=)
2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b0:a9:8d:d4:d8:80:03:c4:df:2c:20:d1:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=9b21f25ccc9e530e3586962da01663d7f02e591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:9b:d0:2f:58:2c:39:62:78:f0:09:fd:02:
2b:1f:82:5c:57:26:28:46:71:c5:83:27:90:bd:dc:
96:d5:22:38:7f:2a:bd:f9:d0:f4:ab:fa:1f:3f:95:
a6:4f:6d:67:ff:b9:8d:f1:0d:63:c8:53:3a:54:95:
d6:0a:42:bd:96:f3:c6:b3:09:fc:5c:82:e1:a4:8a:
e2:d5:55:e3:71:a6:20:26:46:19:f3:60:e0:cd:c8:
ec:df:1f:8e:e4:d2:05:f9:82:96:b2:f7:a1:ec:72:
04:f4:fd:9a:75:7b:00:a7:ea:3e:8e:7c:4f:9e:79:
89:45:1c:8e:06:94:d6:a1:e7:d2:b9:e0:cf:5f:c8:
7a:fd:a1:21:b7:63:55:ab:52:42:a0:0d:7d:d8:bf:
c6:2d:bb:37:80:fd:af:6f:89:f8:cc:da:c1:a2:72:
f5:7e:29:04:a3:d0:ab:7b:86:b1:c4:2b:0e:ca:52:
8a:ce:b0:a9:56:e6:a5:3a:bf:bf:da:ab:aa:ab:50:
35:7e:6c:5b:77:81:ff:b6:99:f2:69:d4:e6:47:28:
90:35:29:ce:25:00:c3:4e:10:f6:ea:4b:bd:9a:7d:
c6:79:90:86:0d:7a:8c:c1:63:61:af:eb:db:45:2f:
8e:74:fa:69:62:2d:f6:ec:79:d3:dc:eb:6e:f8:51:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:21:F2:5C:CC:9E:53:0E:35:86:96:2D:A0:16:63:D7:F0:2E:59:1F
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:70:13:43:81:a6:ab:20:78:38:fa:75:c8:97:a2:57:d5:c0:
d0:3d:47:91:e8:a2:f1:62:30:da:2c:9f:4d:4c:79:ce:f6:33:
56:f7:7d:cf:e1:09:f5:13:35:f1:1e:06:60:6b:92:c7:09:38:
8f:a0:be:d7:16:6b:fe:52:98:4f:74:f5:49:79:02:6a:d4:56:
c2:a4:fb:a8:92:01:e2:9c:ae:94:b7:b3:f3:4d:6c:2b:49:d8:
5c:61:96:ec:32:89:93:71:94:2d:34:02:39:9c:e3:fb:1b:3b:
1b:61:c8:32:31:a4:47:b8:b8:8b:6d:b9:f8:b4:58:7a:b6:bc:
65:82:c0:cb:5c:57:f4:c6:00:a2:6b:97:5e:76:d5:54:fc:ba:
1f:b8:50:8b:b2:b8:52:15:60:6c:b2:02:bb:c4:ec:21:24:49:
63:33:c5:71:31:46:ed:24:aa:07:78:e5:60:3a:4b:dd:00:30:
f7:89:68:4b:f1:a5:a6:cf:ca:7a:12:eb:0a:26:4b:9d:ba:bc:
1e:bd:05:ae:a6:b0:6b:8d:92:cf:15:23:06:d3:89:d2:ac:13:
39:99:4f:d4:60:a5:55:94:ea:ed:c4:42:87:5a:14:95:ff:c8:
9e:69:ac:84:eb:de:1a:41:5c:ca:c6:56:fc:30:09:78:c5:06:
88:4f:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:23 2026 by rpki-client