Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: 0pT6Z3o1y9FYhFKwgMABXZiX4WYxkPjmlqfRer73/jk=
Subject key identifier: 39:49:73:E0:4C:61:1A:E0:48:EC:9C:4A:6A:15:C3:67:2A:57:12:85
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 019D2C2A8B006502AFD74D5B9D562B9624A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 22:01:18 +0000
Manifest this update: Thu 26 Mar 2026 22:01:18 +0000
Manifest next update: Fri 27 Mar 2026 22:01:18 +0000
Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: vXZqwEtucUE5soghRuVj6lxcmK+XqBOBYHkSQjDKLuU=)
2: dw6jrOHCvr8vEJ8EI53CbIWla-4.roa (hash: RtlekyDtmYYhtqPCal9yHYHp8kLr84QNk3nCsBWdbO0=)
3: l31vC9yj9tOcNEOiDfa6E5mFI5A.roa (hash: iMLRpeq0aUEWDn3LyfJLey3OSaLGqWRnQDkTV9RvDA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:8b:00:65:02:af:d7:4d:5b:9d:56:2b:96:24:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Mar 26 22:01:18 2026 GMT
Not After : Mar 27 22:01:18 2026 GMT
Subject: CN=394973e04c611ae048ec9c4a6a15c3672a571285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:06:e2:5e:33:ce:6c:96:3d:58:ad:c8:e1:
ac:e9:3f:7b:63:f4:3d:b0:d6:73:d0:4a:50:28:a2:
02:42:d7:be:45:5c:94:1e:32:30:7e:53:fd:b2:e8:
33:95:22:fd:2d:09:ac:18:68:af:5c:9a:14:68:18:
f7:e1:48:36:ab:fa:3c:21:2a:54:a7:4f:61:45:9c:
11:67:9f:86:0c:2e:16:fe:a8:e7:cc:e0:b8:79:9e:
b1:36:4c:cf:52:53:99:a5:41:88:b4:64:86:49:57:
b5:fd:76:f3:d2:c8:e8:9b:b1:a7:f1:1a:13:5c:c7:
42:09:fe:57:9e:da:ff:6e:a4:3e:15:f4:93:d1:43:
4b:57:d3:4d:0c:3f:8c:38:e9:68:8d:c4:b5:3a:34:
80:ac:57:32:06:ab:3d:04:26:94:de:32:ee:e7:2b:
04:89:34:8e:20:f7:f7:82:84:74:ad:56:9a:12:38:
ea:2f:65:fc:fd:ff:6f:c2:6f:4c:0f:c4:b1:c7:2f:
62:36:d6:44:50:d6:86:4f:af:f0:23:b7:50:84:54:
92:69:55:d0:4d:ee:8e:bc:03:18:05:49:86:42:79:
d7:6c:51:4d:4a:0e:6a:4d:78:67:d3:8d:7e:be:d1:
21:e5:64:4d:83:8a:8c:dc:98:3b:67:35:d7:13:81:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:49:73:E0:4C:61:1A:E0:48:EC:9C:4A:6A:15:C3:67:2A:57:12:85
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b8:dd:84:c6:0d:33:e5:64:5a:97:57:88:f1:68:ec:c9:6c:
5d:09:a2:7c:94:dc:04:af:2d:bb:7d:be:01:e0:bd:c6:10:09:
3d:60:a2:5c:8e:b7:3d:c7:56:0e:35:a6:2e:a7:84:61:5f:63:
e4:49:21:ff:8f:dc:70:8c:a1:3e:99:e4:98:0d:7f:17:2d:33:
e5:f3:05:03:39:26:51:ee:cb:30:e3:8b:4d:71:12:44:be:97:
3f:2d:aa:31:4b:90:60:c9:4b:cf:7e:b7:1e:c5:da:a2:f0:6d:
b2:39:ba:41:ac:19:83:08:a2:c9:e1:16:e1:48:6b:39:e5:be:
61:0a:3e:00:4a:07:fb:d1:41:c5:76:4d:b5:5f:4e:1c:87:26:
b2:17:ea:f8:e3:ce:ff:39:c8:83:3e:08:c7:23:85:c3:94:46:
71:e8:cc:2d:7a:e9:98:07:e0:b8:c1:49:1b:e7:19:d0:4f:b8:
69:46:e3:7f:2b:47:98:13:e7:b5:81:96:31:b0:f3:14:ac:a3:
d8:99:eb:64:4c:94:22:db:55:7a:1a:13:38:61:85:e8:6a:81:
cc:29:06:44:43:e0:c4:9e:0d:71:c9:a7:05:d5:01:16:76:ff:
ca:4b:be:d5:78:1d:ae:63:18:b7:3f:c0:f8:b4:14:90:a5:de:
1f:2c:37:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:01:15 2026 by rpki-client