Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier: /hn9Urf2IU5wfDHjmixq1Tv1bBWV2LfVdD1P1DhbMC8=
Subject key identifier: 77:ED:DE:D8:20:89:D2:BD:9F:C8:2C:90:25:F6:D5:D3:87:5F:B8:6F
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial: 019D2A04A9C99394A3FE192261247E467107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number: 17DB
Signing time: Thu 26 Mar 2026 12:00:41 +0000
Manifest this update: Thu 26 Mar 2026 12:00:41 +0000
Manifest next update: Fri 27 Mar 2026 12:00:41 +0000
Files and hashes: 1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=)
2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: fcA5eNKl3KLmoBAopNpOePMXkpAYuNcNGnQQyEzxJDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:a9:c9:93:94:a3:fe:19:22:61:24:7e:46:71:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Validity
Not Before: Mar 26 12:00:41 2026 GMT
Not After : Mar 27 12:00:41 2026 GMT
Subject: CN=77edded82089d2bd9fc82c9025f6d5d3875fb86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:61:a2:f4:28:b7:2b:ce:65:a6:6b:a3:31:
b3:46:f7:e9:cb:b8:7d:5a:99:93:15:7d:f6:8b:d3:
41:d6:97:fe:bd:75:79:af:83:68:94:f5:a0:c3:bf:
03:9a:6d:c6:ae:f7:20:4e:df:19:1f:fd:00:99:49:
b3:5a:0a:c7:00:50:d6:4a:fe:c5:41:2e:aa:64:b0:
3f:85:6e:7b:59:56:e9:cf:e9:e3:dd:39:11:fa:fc:
49:72:77:83:2b:0f:86:c5:37:28:0a:75:e5:46:57:
3a:8b:41:6e:ce:c5:26:b9:27:04:9f:f9:06:ab:54:
97:e0:00:ad:0f:b3:91:13:f0:a6:6d:eb:34:7b:7a:
de:4b:18:f2:8b:a1:f5:32:98:8e:bb:43:b2:50:f3:
2e:46:e3:08:a9:e5:68:b9:1b:e7:03:ce:c1:0e:39:
c3:c1:16:03:63:c5:8b:74:da:ab:14:22:50:a5:10:
33:93:56:17:c4:67:18:f6:fa:0e:4f:92:90:7a:0c:
ad:ea:f4:a6:7f:5e:3d:52:85:89:c1:70:68:5e:f5:
23:37:89:58:09:ba:ac:18:50:54:ee:e0:c6:b8:c2:
a7:26:e0:ec:2a:db:88:d7:9f:81:eb:44:4c:e1:11:
d3:c8:15:13:55:32:81:4e:67:df:12:8e:72:55:8b:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:DE:D8:20:89:D2:BD:9F:C8:2C:90:25:F6:D5:D3:87:5F:B8:6F
X509v3 Authority Key Identifier:
keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:70:1c:65:ec:92:d4:34:ac:d2:b1:7e:46:5c:20:94:b6:db:
41:56:d6:03:81:55:39:9e:33:fc:c3:16:1e:7e:af:6e:6b:c2:
83:96:9c:e4:19:96:88:fe:35:fa:9f:61:63:a3:56:4e:f6:71:
81:67:37:5e:73:1c:5d:4f:dc:eb:4f:12:79:d2:fb:b3:41:c6:
d6:82:ef:41:2d:d7:07:fa:eb:b9:93:91:c4:a9:46:4d:b1:37:
cf:d0:ba:a2:b1:cf:b8:95:d6:9d:27:68:6e:a1:05:95:e7:48:
a8:4f:9b:8b:ff:c4:d4:24:5f:8c:36:c4:23:a4:e5:27:fd:ed:
6f:1f:e6:48:2e:a1:82:0c:14:d3:84:3c:a6:75:47:9b:78:21:
f7:f5:8b:d2:42:22:c8:b4:3d:e6:20:02:26:77:fe:ae:c7:28:
f0:73:c0:e7:a7:f2:8f:c7:e6:bb:b4:fe:cf:11:5b:92:8b:56:
96:5e:d4:09:53:c4:14:73:0c:97:be:d0:6e:a6:86:66:04:13:
93:78:03:49:4f:e1:c7:db:03:68:86:9b:c3:ae:21:8e:04:d7:
1e:de:78:33:98:6c:5c:e7:0d:ac:3e:dd:d7:10:d4:60:12:1a:
ae:2c:e8:d9:d4:e8:67:f2:d4:91:de:9d:88:07:84:b2:46:5e:
65:68:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:33 2026 by rpki-client