Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier: yRVVGNrBtOpd7mTPkdFMUc/ikxSCxD6zzim2b/YwK8M=
Subject key identifier: 00:FF:CC:7B:06:8E:00:90:FD:09:6E:0F:8E:13:4E:D5:18:69:03:BC
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 019D26963547CFB21D29C7A1948D151C0BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: AowKkxtW6zZ1UTjoAc7hV8qi+VgHiQyuN1ypCo2ZrIs=)
2: vRnuRcOcTR4IlPBpAANvMD2tP4Q.roa (hash: NFKmQ01DaLYF5z1+sTJFGIZl8qsux87G1ZSp/QZjt6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:35:47:cf:b2:1d:29:c7:a1:94:8d:15:1c:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=00ffcc7b068e0090fd096e0f8e134ed5186903bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:d8:d3:a8:b9:15:a8:9c:e1:bb:2e:c4:b0:
bd:d2:52:29:3c:05:c6:0c:b7:1f:43:d0:17:16:7d:
62:d0:c3:1e:d2:4f:67:6f:b6:2d:09:48:0e:69:7b:
2b:02:0e:3f:5d:75:53:59:19:cb:24:08:cd:cc:40:
13:69:11:47:ef:33:92:5a:4e:ac:c2:8b:84:84:2b:
c9:0b:fe:1d:af:df:d3:da:51:76:77:75:0c:c2:a2:
f5:85:b5:23:da:cb:0a:3a:ce:b0:a0:8e:99:65:25:
39:2b:da:f8:9f:15:20:39:3d:82:bd:98:36:7f:02:
bd:a8:6b:96:b8:62:cc:e1:82:22:0c:f0:65:15:cd:
a6:be:84:f8:58:86:1c:ce:6a:82:21:07:79:46:b3:
27:3b:23:33:74:7b:dd:8e:3c:0f:af:cd:3b:d5:c7:
24:2f:d7:df:50:fe:2f:f4:f0:82:f3:22:ae:e7:b9:
2e:36:71:b6:71:99:10:8c:e4:17:0c:fa:b9:06:e0:
12:e7:97:ab:87:d9:f5:db:62:ff:09:27:71:28:36:
bc:78:af:6a:6b:e6:96:b1:74:78:6d:4f:28:a4:4b:
9b:45:52:48:8d:84:96:ea:a0:81:a6:65:7b:39:c8:
a9:df:bd:ee:e0:b1:e0:2d:b9:03:ba:5b:88:6b:33:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FF:CC:7B:06:8E:00:90:FD:09:6E:0F:8E:13:4E:D5:18:69:03:BC
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d9:5c:b7:30:36:35:82:79:32:8c:68:75:b6:21:79:9a:36:
b2:20:13:58:a7:31:e5:30:dc:de:fb:3c:bf:ab:c5:d1:94:a6:
7b:1c:d5:26:d8:03:fc:45:c4:22:79:ce:3f:2b:b6:dd:ff:86:
0c:11:d7:43:29:61:8d:24:73:80:e0:83:11:92:5a:48:8c:48:
c7:f1:b0:f8:54:e0:f1:29:67:63:05:51:45:f6:13:3a:28:47:
97:56:6f:ad:a3:41:09:be:aa:09:68:d8:30:4c:5a:1d:25:44:
d3:fb:2f:e1:a0:46:76:76:2e:33:98:3f:82:30:90:3a:ab:91:
12:d4:97:c2:5f:f3:0f:a7:cc:d2:7f:77:99:d7:f9:71:70:4b:
2a:81:95:bd:15:73:a4:ab:64:59:05:df:9a:b1:a3:0c:a1:17:
b6:06:f1:23:6f:96:96:5a:81:cb:eb:f2:c0:ed:61:21:38:99:
a9:e9:02:73:04:2f:b6:ad:c2:65:5d:d8:bc:a8:d1:a2:1d:f0:
1c:48:29:ee:cb:75:b7:39:bd:3e:f5:f7:08:a6:eb:60:2b:74:
1a:5e:e5:fa:e7:7d:17:f6:fe:19:41:28:9a:f3:e9:eb:4d:2e:
1b:f0:e8:9e:bb:d1:5e:92:d0:39:47:58:57:76:28:96:d3:b5:
3c:9c:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:39 2026 by rpki-client