Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: 5RrVXTs7+YyjxSttDvPdfei9EYRpAy9CNacr9ShQCtw=
Subject key identifier: 51:E7:40:E5:14:49:A3:AB:B5:9F:63:B9:F5:C9:66:5F:5B:5F:4F:12
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 019D2583BB57AE8DCFF8FD0940FCC1B3F351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 15:01:23 +0000
Manifest this update: Wed 25 Mar 2026 15:01:23 +0000
Manifest next update: Thu 26 Mar 2026 15:01:23 +0000
Files and hashes: 1: GzdfLu-BksDJwE9pfcgaIEcBTJs.roa (hash: 0uOTjDCwE9CC6NlLuvwra/kx1v02mWMFwmjFQbmGkMM=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: EcPgrlBx950iNXUD1duoQXl9LVwve1kno8B7oUQSowE=)
3: ZRhUKW2L993xH1vo8_JfQDNvL-4.roa (hash: dqDDWP+wPoSkNiw6G5+CgUtA2olvFu/u/K+P7q4Sxgc=)
4: u1MF5XqndvG5UGN3sAIiEMCwAmM.roa (hash: 09WdJsC0RyyomkwiBQQyeEsIZCuoxjnDogc7nlWYUzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:bb:57:ae:8d:cf:f8:fd:09:40:fc:c1:b3:f3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Mar 25 15:01:23 2026 GMT
Not After : Mar 26 15:01:23 2026 GMT
Subject: CN=51e740e51449a3abb59f63b9f5c9665f5b5f4f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:5a:11:8f:eb:d2:51:ca:5d:de:d2:88:da:
0d:42:db:e2:9d:41:86:16:48:b6:0d:ff:46:93:de:
e8:4f:bf:b1:98:55:f6:58:e6:7b:3e:ea:7b:1a:94:
44:3d:f7:36:11:07:55:96:fc:23:6e:15:0a:5b:71:
37:dd:35:8e:0f:36:e2:0f:53:cf:44:31:ea:1b:50:
88:6d:92:30:a7:e6:22:91:c2:0a:a9:4a:76:1c:5d:
e9:33:28:36:15:e6:74:c4:31:84:1b:f4:25:33:31:
9a:95:3f:90:ef:dd:f1:b4:b0:d6:67:71:7a:31:1d:
37:55:bd:c6:87:6f:84:79:64:8a:6d:16:c6:0e:43:
ea:58:93:4a:7a:4c:d5:21:0f:bf:17:cd:32:d5:98:
da:7a:50:57:50:8d:8e:76:a5:65:33:e7:20:f4:02:
9f:eb:1f:f5:99:4a:0b:80:3f:6c:4b:7c:f0:12:7f:
49:91:d5:95:b3:1b:1f:3a:29:40:15:e0:2f:47:97:
7f:62:88:d6:bd:aa:f7:81:9c:12:14:ed:7a:25:7c:
be:31:7e:d5:dd:fc:a8:fe:a2:96:01:c3:5f:19:e4:
d8:45:08:fe:8b:8e:be:69:20:32:e6:fb:67:86:1d:
5c:23:6c:d9:2d:bf:dc:4f:82:63:09:8e:6c:46:96:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E7:40:E5:14:49:A3:AB:B5:9F:63:B9:F5:C9:66:5F:5B:5F:4F:12
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3f:a4:12:dc:08:75:53:ee:32:16:96:c5:e2:76:a4:fd:bc:
ab:a4:1e:78:90:4f:cc:7e:8a:0b:6e:47:71:d1:a0:6e:12:1c:
d9:30:a6:bc:c0:21:dd:8d:19:41:bd:14:26:03:1d:7d:83:a9:
87:b1:89:6d:16:86:82:af:a7:f7:1a:e0:b8:27:3f:9b:b2:66:
f4:87:26:09:7d:0d:21:c1:3f:13:e3:e9:d2:bb:02:61:fc:ef:
d8:e0:79:0c:d8:dd:08:ae:ff:b1:4b:1a:a2:66:1e:9c:0c:5a:
65:41:3f:92:8c:bd:99:54:e2:7e:63:47:0c:ae:38:d2:2d:6c:
fd:75:12:44:be:14:f5:33:36:60:df:9d:e6:45:41:01:8b:91:
1a:a5:96:54:58:ec:90:ec:bb:fd:70:ff:fd:1b:a5:df:9d:ad:
ed:c5:57:d9:45:0a:94:2f:1e:14:cc:98:3e:67:65:a5:de:d4:
d2:30:c9:0e:ed:ca:a2:61:dd:b9:cb:9e:f9:d0:86:8f:d2:5d:
32:d1:68:8a:62:de:bc:97:d1:cf:20:ff:28:c0:54:01:3f:b4:
e1:81:dd:16:31:c9:72:a2:ae:1b:30:46:76:1b:80:fa:e9:b5:
36:50:31:29:ed:48:1b:a7:8f:e0:ca:8f:b8:a1:bc:fa:a7:50:
8c:95:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:10 2026 by rpki-client