Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: 3e0qiFZWjJpjhs+SKj/IMFQwT/m4XvWOU6SyB9BLF5w=
Subject key identifier: 9E:5C:B8:45:61:EE:E7:39:E1:C2:48:C1:FE:83:9D:7A:01:F9:23:CC
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 019D28167C512DB1D5ABE779344DC4E03533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: aZx+5N2H8h8ZVgmkLHK7b0OFAuyoO8hWKprDFqAcuho=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7c:51:2d:b1:d5:ab:e7:79:34:4d:c4:e0:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=9e5cb84561eee739e1c248c1fe839d7a01f923cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:3d:55:80:4e:a2:91:2e:7e:0e:6e:64:f3:
28:30:a0:9d:a9:5b:02:98:69:a0:64:8e:fe:64:ce:
87:24:e0:aa:63:97:5d:f6:19:65:ed:0a:d1:ee:cb:
e2:7a:c1:12:4c:05:2d:36:fe:cc:62:49:93:68:e5:
03:2f:c9:cc:a7:66:06:ef:20:6d:d1:41:77:7f:ae:
62:53:d2:20:9a:08:7a:35:59:b1:ab:d5:97:df:72:
c0:ce:8f:63:14:40:6f:39:93:fc:8a:90:63:6a:b5:
bc:3c:64:64:88:68:4c:86:d1:a6:b6:8a:e4:b2:67:
8d:e6:1d:e3:e9:1f:a6:13:15:87:fb:e2:1a:71:51:
a1:07:a0:bf:70:0e:f6:6f:42:41:bb:ae:1f:41:c5:
4b:56:55:2c:a4:f9:38:24:3e:46:dc:6b:58:60:60:
0f:12:33:2e:98:a6:75:6a:d9:fe:40:ba:57:02:9b:
26:e1:02:52:52:8b:b1:43:a3:b0:3b:5a:f0:de:28:
89:2f:e5:aa:86:79:5c:03:dd:a9:30:37:a5:12:66:
7d:9f:1b:6a:3b:3a:c8:71:d8:dc:06:33:92:8d:bd:
48:02:f1:cb:b0:31:aa:d6:8e:59:ce:f5:81:9b:91:
28:e8:e6:46:e8:d3:bb:02:bf:20:5c:41:dd:5a:6c:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:B8:45:61:EE:E7:39:E1:C2:48:C1:FE:83:9D:7A:01:F9:23:CC
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a0:99:39:49:34:19:b6:f3:3f:21:65:da:cc:c3:c3:8b:bb:
93:9a:f9:84:cf:67:dd:20:98:f9:d9:ad:e3:a5:c6:10:34:c9:
23:c6:e7:38:a0:5e:ff:97:cb:b7:cc:a1:f2:9b:fc:0d:62:e8:
8b:0d:22:f2:34:46:b1:08:40:99:7f:be:73:66:2f:f5:dc:0a:
19:17:bc:48:ca:4e:8d:13:ca:37:44:26:a1:aa:3b:11:96:79:
31:54:79:4c:07:85:51:23:30:71:39:2e:06:e3:c2:85:10:b6:
54:96:6b:47:d1:67:9c:4e:f3:8d:36:84:33:19:bb:0b:4b:82:
61:7a:00:c8:e9:a6:6b:bc:99:ff:04:ea:03:64:87:4d:ed:52:
76:e4:4e:19:d2:1f:39:20:2b:cc:0c:95:b1:07:5e:39:a8:f1:
d7:bf:5b:74:fb:63:01:5e:20:c4:51:fa:ca:0e:55:8c:bf:d9:
01:8f:dd:3a:eb:ac:37:2c:c8:e3:f2:de:40:8d:e0:c1:7a:dc:
2a:0e:c7:8e:9d:91:ff:cd:54:d5:08:e5:10:3c:95:05:d5:97:
97:03:c6:b0:9e:26:57:22:01:1c:33:7e:ca:86:17:e2:de:20:
91:c1:0d:44:e0:b0:f5:03:49:b4:37:61:97:dd:83:65:33:84:
74:60:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:31 2026 by rpki-client