Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: PLIh80fH/iwsjf1gGbch+9Twaw6lIAN+xqBxqGpdYLs=
Subject key identifier: EE:C4:17:5B:AF:B9:3D:B1:42:1C:DE:54:D4:CF:B8:12:DD:1C:F2:62
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 019D273AF329C04C33D42EDD8F1F43634112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:01:07 +0000
Manifest this update: Wed 25 Mar 2026 23:01:07 +0000
Manifest next update: Thu 26 Mar 2026 23:01:07 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: hLScn7YlOGSUuINhnM8r9rjSYTqfwI7uyodo+yvyW6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f3:29:c0:4c:33:d4:2e:dd:8f:1f:43:63:41:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Mar 25 23:01:07 2026 GMT
Not After : Mar 26 23:01:07 2026 GMT
Subject: CN=eec4175bafb93db1421cde54d4cfb812dd1cf262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:17:37:0b:26:38:33:30:b4:e4:f5:3b:d6:
c2:84:14:04:15:d7:51:82:65:3b:5e:29:65:be:7e:
73:5b:55:43:c1:1f:a0:78:10:76:60:76:64:84:86:
4e:36:60:12:a9:33:f9:f7:95:9b:4c:14:c8:e7:d0:
d4:c5:d3:8b:25:4c:2e:aa:24:4b:45:a9:93:a7:c3:
ed:de:0b:06:22:56:ad:77:b7:89:da:a2:a6:6c:c7:
aa:08:8a:e2:d2:85:b7:85:11:02:03:80:29:08:38:
67:c0:04:2b:5f:08:cc:e0:ae:db:fe:9a:0f:b7:9f:
7f:1d:17:19:d6:29:e3:8a:f8:ab:fd:3e:08:c0:e0:
1c:6b:b0:0d:db:b6:5c:d7:08:93:7f:92:c1:47:75:
fc:1b:19:8e:dd:b3:cd:9d:e2:c4:39:96:7a:71:2f:
66:3f:fa:7b:c0:82:9c:8e:1b:fe:0f:f1:fa:33:f7:
5a:29:56:14:d0:dc:88:3d:f3:a9:fc:5c:0b:d7:2b:
c4:56:38:14:9f:9e:a4:94:f5:76:1b:b7:b4:f7:43:
f1:5a:93:07:f7:04:72:05:60:02:ff:42:85:d0:9c:
08:96:16:5e:a4:52:31:f9:63:67:a1:bc:98:12:dd:
bd:e9:b9:a3:ee:a3:28:95:be:64:6c:3a:11:bf:64:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:17:5B:AF:B9:3D:B1:42:1C:DE:54:D4:CF:B8:12:DD:1C:F2:62
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:51:27:0b:30:8d:45:25:44:53:54:d6:dd:52:61:4b:10:4e:
ca:d4:4d:56:fd:04:63:e3:f1:d1:0c:88:7b:8e:c5:28:31:f3:
7a:ac:29:f8:86:58:b5:97:b1:40:96:ae:8f:19:9b:00:53:65:
8c:c4:ed:46:7f:86:97:e3:6a:4d:e5:1c:4f:7c:8b:b9:a1:6a:
a2:c8:78:a0:a8:37:59:47:c2:07:12:51:d8:a8:e8:5a:35:6a:
b4:d9:0c:24:ad:8e:d1:ab:3e:e9:89:7c:59:2d:a6:56:77:4a:
7a:59:b5:ff:94:c6:eb:9b:e0:f5:21:63:6b:74:c8:54:8d:bc:
12:7a:4d:a9:d3:ff:5d:a3:d9:49:4c:16:f8:2f:55:78:55:2d:
a7:4a:ef:a4:8d:b0:c5:03:de:ec:4c:aa:db:0f:f8:74:50:f6:
af:cf:e0:93:c8:c0:f1:b2:6e:fd:d9:06:31:b9:5c:98:79:29:
cf:02:42:8a:87:29:94:c1:b3:9b:a9:25:2d:41:76:1e:64:3e:
be:7c:11:e6:72:0a:1f:6a:2b:fb:52:78:ab:ee:f6:b0:7f:14:
85:5f:48:e0:d0:e9:65:59:b6:a1:9e:fe:34:ec:85:c4:3a:55:
33:f1:fc:10:27:11:ff:a4:37:21:96:d1:53:94:4f:74:3a:2e:
97:c6:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:18 2026 by rpki-client