Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: R/4+Lu2uCdB1q/bsHtFIpuk177xgSIuV7iTVp6ZQN/A=
Subject key identifier: 3A:3C:FF:88:07:1F:FC:E2:22:1E:57:24:37:17:DC:D8:4F:89:B2:E4
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 019D2704C8075BDA411B03780E98790663DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0F6F
Signing time: Wed 25 Mar 2026 22:01:57 +0000
Manifest this update: Wed 25 Mar 2026 22:01:57 +0000
Manifest next update: Thu 26 Mar 2026 22:01:57 +0000
Files and hashes: 1: Np_Aj_nRkhMZ7_NKJQ1GEacRUpA.roa (hash: ejeWv0bVkbD4tbjs10obMgkJkumcVMFWXk26yJzaKVM=)
2: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: dtFYIi6Nhm4TEYFG0G1yqOl/8JetagcWE2zhM4IwiYQ=)
3: rf6n8rR_IGjgaV0dY9RAe_eoXuQ.roa (hash: h34ncx2/ZVU6/2WFeoHZWwK1+eEDb80qBYHdb3kT8TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c8:07:5b:da:41:1b:03:78:0e:98:79:06:63:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Mar 25 22:01:57 2026 GMT
Not After : Mar 26 22:01:57 2026 GMT
Subject: CN=3a3cff88071ffce2221e57243717dcd84f89b2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:e7:4a:18:7b:27:2f:d0:10:0d:71:73:17:
e8:b8:fc:52:db:02:cf:a0:be:a7:65:28:64:e3:3b:
9b:20:90:a3:4e:9f:07:0b:f3:ec:61:73:52:3a:6b:
c0:21:d1:bd:c9:8e:d4:0a:9a:27:aa:5e:02:58:aa:
8f:58:7a:c2:14:b5:01:e9:72:b9:10:bd:d8:69:cb:
85:f2:a5:a1:19:5a:2b:e3:30:b4:85:0e:33:f9:98:
5e:b7:2b:88:a4:25:c3:08:e0:da:25:c5:bd:76:ed:
5f:f4:54:d1:8f:4f:87:93:35:c7:d0:63:f3:19:8b:
3d:68:72:47:53:0e:ed:a3:55:a3:e1:1c:43:e5:07:
10:ea:b9:85:d3:cb:cf:79:f2:ac:7e:ac:e5:0c:76:
f0:59:c3:43:a0:49:42:6c:fc:8b:2b:50:46:03:45:
3f:a5:33:b5:a1:cc:8f:3e:e4:8a:6f:22:cc:fe:06:
36:7e:d7:85:46:cf:9f:9a:ac:73:a1:d4:62:ee:d7:
10:cc:5c:52:38:e6:0a:d4:51:43:44:81:8a:d0:7c:
66:f7:8a:13:95:ef:7f:51:c4:61:e7:c9:3e:14:86:
4a:27:45:4c:1c:ca:be:1a:0b:78:94:4b:1c:03:54:
9a:56:5e:cf:21:76:b8:76:1f:34:aa:76:ef:9d:0e:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:FF:88:07:1F:FC:E2:22:1E:57:24:37:17:DC:D8:4F:89:B2:E4
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:39:49:f4:16:00:08:73:93:ea:16:79:5b:d5:dd:dc:07:a6:
fd:04:83:5c:2b:87:9a:6d:a5:fb:2f:ad:6c:82:f4:2b:28:0e:
df:1a:ab:0e:37:1a:ee:ad:e0:3d:d3:b1:1f:4f:ee:c7:89:e8:
a6:f5:9a:54:13:58:07:f1:15:c4:db:fb:98:25:55:d9:ab:95:
d1:67:c3:7a:6f:91:b2:eb:d1:c5:73:84:53:9e:0b:4e:38:d2:
6b:a6:c9:d7:3a:67:f1:de:99:d6:9b:69:88:ed:06:79:47:c1:
10:5f:45:b2:f7:c1:78:9c:52:42:f6:30:58:78:d1:36:5e:a7:
3d:7d:df:c5:a1:ec:45:ee:16:d5:45:b1:cc:9c:de:4a:52:68:
27:0b:c3:ee:fe:b1:1e:b8:f8:7d:aa:eb:66:73:66:74:ea:0b:
fb:9a:ee:bd:c6:9d:2b:34:20:8d:cf:8d:a6:ff:cd:73:98:08:
b7:9f:3d:6a:ce:06:94:7a:ec:3f:13:8c:27:9f:f7:b5:8c:b1:
de:4e:b0:8a:36:c2:96:60:05:3b:eb:d9:97:3d:fc:3d:67:5b:
f0:45:e0:d6:6c:0f:02:d3:91:89:cd:13:8b:fb:7d:40:d9:21:
91:5d:a2:8b:a6:7f:00:c0:d8:35:7e:f2:4e:e6:6f:de:56:57:
7c:f1:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:24:02 2026 by rpki-client