Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
File: QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft (raw, json)
Hash identifier: hjr8lL5lx4jXX+fIzbgyXC2QfE7PQ1o7PeHFRK6U4w8=
Subject key identifier: 00:88:91:93:EA:8E:54:CE:A2:1A:59:0E:F3:6D:0C:EB:3A:DF:11:CB
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial: 019D28BBE20E8C0DCCAF436165AACC73B24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
Manifest number: 12B5
Signing time: Thu 26 Mar 2026 06:01:34 +0000
Manifest this update: Thu 26 Mar 2026 06:01:34 +0000
Manifest next update: Fri 27 Mar 2026 06:01:34 +0000
Files and hashes: 1: 2SKAnmNppGmTIZV2xgVXbNnLQZE.roa (hash: 0TEDM1XRgsWS8H5Ci7uA1v4v4wOO9F775kBBURCrd3c=)
2: QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl (hash: s76+FkSBSEc6trEOusQ3n+XSntgp7vOprdxgu6KQav0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e2:0e:8c:0d:cc:af:43:61:65:aa:cc:73:b2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Validity
Not Before: Mar 26 06:01:34 2026 GMT
Not After : Mar 27 06:01:34 2026 GMT
Subject: CN=00889193ea8e54cea21a590ef36d0ceb3adf11cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:a2:9e:68:7e:d9:79:b7:fc:2f:ab:1c:80:
a0:7f:49:6b:4d:02:f3:2c:1a:0c:27:10:5b:e5:a4:
bf:cc:c4:d7:10:84:b4:c4:2f:d0:cd:5c:f3:e2:cd:
d1:90:85:48:06:cd:b3:74:56:5c:9e:89:46:b8:4a:
51:b0:8e:25:43:2e:0f:3c:a7:20:22:7a:24:f7:1a:
f2:ce:94:19:c9:8b:1e:de:d0:9a:3c:a5:23:20:d6:
f9:73:9b:94:a8:f0:4d:d9:fc:cb:43:07:b5:a7:d8:
06:94:ed:69:61:40:92:33:92:b3:92:c9:4e:4a:68:
5b:a6:a2:1b:12:ae:b7:5c:44:b3:d8:6c:1b:85:1a:
74:a4:54:b4:db:80:0d:26:4c:9d:fc:c7:1a:3c:92:
a7:5b:11:3f:6c:d0:1c:d8:8d:5d:13:cd:2f:23:53:
65:94:4e:c0:78:f1:c3:7e:a8:75:79:a2:0c:20:71:
02:93:7b:68:24:ec:11:65:6b:c9:ec:1d:f6:97:53:
34:c9:5b:46:b4:e7:cd:41:51:2f:4c:4d:70:c2:a2:
e4:92:eb:ab:43:0b:bd:84:e3:25:0a:b2:1d:3c:76:
52:1d:c1:40:93:02:63:e9:c0:74:82:66:76:b2:7f:
68:52:36:ac:3b:06:3d:1b:0f:ad:56:04:fd:ef:e2:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:91:93:EA:8E:54:CE:A2:1A:59:0E:F3:6D:0C:EB:3A:DF:11:CB
X509v3 Authority Key Identifier:
keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:06:85:a7:1d:a6:25:94:44:b4:87:f4:01:4b:78:41:dd:e7:
8b:8d:18:e9:ac:f3:ee:5c:77:e3:f9:1d:23:8e:c3:9a:e3:f7:
60:67:0a:94:01:24:38:41:e5:90:78:41:d3:cf:0d:d2:cb:2b:
34:3a:c2:8d:b5:30:37:84:a6:7a:85:34:f2:9a:d2:4b:e0:39:
0c:09:b5:36:65:43:72:a3:22:77:94:c0:80:e4:99:82:53:40:
ed:fe:fa:6b:fb:e8:78:9d:a6:18:8e:a5:db:3f:c5:d2:d3:92:
9b:d1:57:c5:ca:99:60:e9:31:18:da:ef:78:05:c5:23:d3:c9:
5e:7d:aa:de:20:b6:33:3b:41:1d:fa:91:f7:a9:ae:2b:36:b7:
3d:55:da:2e:a7:a0:39:75:ef:1b:10:33:0c:e0:9a:19:9a:46:
99:fe:b0:5b:20:d0:f7:8c:53:c0:9b:86:07:a2:d1:2c:98:e4:
a7:b1:39:9d:99:25:38:b6:3d:d2:cf:f0:a0:44:d3:c5:4d:2f:
af:56:fd:67:38:63:c4:e7:a1:c4:e5:9c:fa:f2:fb:8e:2e:d5:
69:53:74:8e:4b:cf:16:5c:61:f1:c3:db:95:2b:8e:8c:2f:ee:
66:a1:c3:02:4d:fc:99:d5:d7:a7:d0:0e:bd:3b:ef:72:1d:62:
87:7e:4f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:50 2026 by rpki-client