Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json)
Hash identifier: vBHgbK4nRky/BQ4g1oFOY+/6evTJkGefr5uh+DIvUcM=
Subject key identifier: 48:24:2C:5D:1F:C9:84:41:B7:87:63:F9:E5:6E:C5:F7:C0:B3:8A:CE
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 019D28F32112D92C55CC33B027667C202AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
Manifest number: 179C
Signing time: Thu 26 Mar 2026 07:01:55 +0000
Manifest this update: Thu 26 Mar 2026 07:01:55 +0000
Manifest next update: Fri 27 Mar 2026 07:01:55 +0000
Files and hashes: 1: 8HofXb8C3Ef7Atp6Ezn1h0QIP9Y.roa (hash: lkGKwqlCZTFno799svHwhDXRjrBujMrNLPvs2ZrZ4Ho=)
2: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: KYtRiczQZ08pRXE4uuEWoUQjHIUA6gdC2AUrckccBaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:21:12:d9:2c:55:cc:33:b0:27:66:7c:20:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Mar 26 07:01:55 2026 GMT
Not After : Mar 27 07:01:55 2026 GMT
Subject: CN=48242c5d1fc98441b78763f9e56ec5f7c0b38ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:a9:ed:ed:7a:dd:14:a9:0f:4a:af:ca:84:
0b:88:c6:0c:e6:28:06:5b:bd:02:69:7d:ab:39:c0:
6e:2b:9d:5c:fe:ec:6b:2c:c4:a7:ff:f7:11:0e:63:
3d:a1:05:94:0f:e1:34:66:7a:b9:77:03:84:69:88:
e5:c5:ce:71:82:8a:b9:46:fd:9c:b7:67:7b:d5:3a:
d2:c0:95:3a:19:bc:0d:da:1a:ae:56:bd:22:25:93:
05:2f:0b:46:1b:60:90:2f:0d:8f:33:e3:1d:70:63:
fe:8b:53:c7:16:3d:03:a1:63:c0:1c:79:7e:41:33:
72:8c:62:e8:47:01:08:63:0f:f5:66:89:65:24:68:
0a:f6:e0:41:e5:73:51:64:d0:af:0f:46:13:67:56:
a9:f8:68:99:e1:d7:62:b7:ae:0e:e6:2d:f2:73:01:
c5:a7:ce:31:c1:94:15:db:bc:d8:27:b9:52:13:dc:
9d:df:f4:4e:aa:c8:2b:62:95:db:8f:38:fb:5b:72:
a5:da:d3:36:b7:58:40:7e:1c:c6:25:9d:ed:48:25:
35:33:df:54:16:b0:97:ca:f5:d5:f1:8a:0f:d5:ab:
29:dd:a7:df:33:6a:4f:5f:e0:68:6c:c2:28:84:09:
4c:cd:f2:44:93:5e:ee:7c:e9:98:f1:10:4b:fa:d7:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:24:2C:5D:1F:C9:84:41:B7:87:63:F9:E5:6E:C5:F7:C0:B3:8A:CE
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7c:dc:6d:82:cb:14:aa:45:56:ec:fd:12:89:1e:32:14:c4:
7b:85:c3:eb:fb:de:ee:61:ec:67:1d:00:9a:b3:5a:df:32:c1:
da:73:ab:f7:31:e9:48:8a:f1:eb:98:c9:de:59:2c:0c:09:14:
1e:1d:f1:28:ed:48:69:a5:0a:12:ff:2e:4c:bb:c3:ba:8d:88:
7e:7f:71:61:ad:45:9b:71:56:d3:20:93:f9:1f:ce:84:20:da:
bf:ee:b0:93:77:7f:c6:e8:9e:db:51:f4:90:18:0d:cd:04:00:
39:d6:19:9a:51:42:a2:83:fc:d9:7a:2a:24:e3:57:0f:cf:fc:
06:69:d9:5f:c8:55:c4:8c:2c:b1:bd:b6:19:2d:8d:54:5f:ad:
d6:88:3f:32:d5:05:71:cf:cf:bb:e8:40:24:f0:14:a5:56:0b:
52:ed:d2:9c:6c:5a:ec:c3:d2:3a:fc:09:ce:9f:5c:38:67:38:
f7:11:53:8d:8e:36:63:ee:b6:d0:3a:de:b8:07:da:2c:76:52:
34:82:be:83:b4:97:7c:f4:f7:ed:3a:54:b4:24:bc:67:0e:4d:
a2:f0:29:2c:d9:d3:c7:59:9c:cf:ee:ee:38:ae:51:aa:0f:69:
32:b1:13:9b:f4:e1:08:93:31:fe:eb:25:57:f3:9b:91:3a:46:
fe:5e:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:34 2026 by rpki-client