Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier: 47YwZUhZLfVgHKMgwt86UJIi2jdt1tcSRUe5jQnygDA=
Subject key identifier: 40:E1:0A:BC:39:7C:F6:69:0B:8F:72:A3:8D:A5:5C:FC:78:77:35:C7
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial: 019D27A90DBE85F84EA7E795DD8F728E50C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number: 0111
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: 5fJdbPbgOApkaNwj7g4OqL6Q04FXAzc5X43U8m4M40s=)
2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0d:be:85:f8:4e:a7:e7:95:dd:8f:72:8e:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=40e10abc397cf6690b8f72a38da55cfc787735c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:e5:79:1f:42:98:e2:05:fc:ea:da:92:a0:
25:4d:e9:33:42:37:2d:3b:c3:ce:5e:60:f0:9f:0c:
fa:d1:be:42:b0:4b:92:a0:de:92:67:e8:ca:d3:b9:
71:0c:d3:cd:5c:56:b7:26:87:0d:87:66:cb:e2:ac:
f7:5b:58:05:96:20:cb:b2:e7:19:95:16:65:50:63:
39:94:f5:af:1e:9e:cf:fd:18:eb:a5:f2:47:4a:c7:
c8:81:ee:d3:59:91:c9:74:b0:ad:4b:2f:48:4a:e6:
0a:e2:d4:9c:b7:19:73:62:9f:02:0d:c5:32:2e:89:
c6:ed:72:4e:61:72:7c:a9:bd:43:88:b0:55:a2:45:
39:19:ec:f2:3b:bd:d5:e7:9e:7f:02:27:65:8d:9a:
d6:90:cf:02:92:b5:90:64:1d:30:40:6c:fa:bc:dc:
79:41:3f:a9:d2:e6:eb:55:b5:9e:dd:68:9a:3c:a6:
a0:48:9b:99:21:98:03:7b:e0:9e:1b:c9:bf:3a:fa:
8f:b8:40:43:0b:b8:d8:4a:f0:59:d2:40:b8:fe:37:
e6:8e:dc:34:8f:2a:06:8d:e7:9b:b5:9d:bd:e3:24:
3b:91:9f:c9:28:ec:20:16:f7:cf:22:7c:ca:c6:01:
47:34:ce:7e:8f:22:4a:80:35:fc:ce:78:e0:f9:52:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E1:0A:BC:39:7C:F6:69:0B:8F:72:A3:8D:A5:5C:FC:78:77:35:C7
X509v3 Authority Key Identifier:
keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:bc:3b:a3:b8:4c:22:34:01:fe:0c:f9:ab:d6:8e:dd:b6:
c7:d3:ee:6d:4d:8d:33:2d:69:25:7d:e1:6a:79:2a:46:52:81:
46:9b:b7:b5:4e:a1:d2:22:44:b8:e9:e5:2f:d6:ed:91:fa:88:
94:1c:64:68:f8:37:b7:c6:81:bd:a7:b4:df:1f:2f:74:61:bb:
be:6f:bd:7d:cf:08:24:8c:63:cb:9b:76:62:47:06:7f:69:4b:
71:fc:5f:7b:e5:e7:ce:63:51:9e:e3:a6:62:8e:aa:fc:75:2e:
64:5b:b5:38:6c:74:57:66:72:fc:0c:db:03:1e:c4:fc:ac:bd:
dd:1d:55:46:45:f6:ca:5a:71:1e:c7:53:90:11:5d:54:6c:a8:
d9:dd:d5:22:19:04:c8:99:97:9d:a3:56:22:08:d0:67:a3:c1:
24:18:22:07:dc:a5:f6:02:fc:0b:c1:6b:d5:d3:93:17:1e:c6:
cf:26:3f:2e:68:79:48:eb:6d:70:83:8d:3e:05:6b:97:96:46:
6d:76:81:61:9b:33:96:35:65:b0:ef:b0:52:01:6a:be:3d:a6:
b8:24:1d:78:b7:bc:99:0e:1e:06:6f:2e:3c:46:be:31:6c:c7:
ee:7a:25:17:04:b8:75:d0:b4:08:24:1d:4a:16:e6:53:76:8f:
05:08:40:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:22 2026 by rpki-client