Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: uv2z+Ptg+ls/zx8NWdOINeIkEam6JPGTbhNS+DN6j8E=
Subject key identifier: 1D:67:CE:84:D5:5B:8B:85:0D:8F:AD:F9:9D:E0:92:90:5B:F5:93:82
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 019D2B4E69B9A4998A742C81C4BF4E76E5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 1391
Signing time: Thu 26 Mar 2026 18:00:52 +0000
Manifest this update: Thu 26 Mar 2026 18:00:52 +0000
Manifest next update: Fri 27 Mar 2026 18:00:52 +0000
Files and hashes: 1: HcGRhGei3x2rtwE5oPSrO2D_h_s.roa (hash: ECgDYzAeFwYe5dFl5nmcsBDHGCaMCFt02lsO39cgBdI=)
2: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: lAQYCTSyZmzxb2mlGgHKY3CCu2eFexEvFeyUJ5hUPIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:69:b9:a4:99:8a:74:2c:81:c4:bf:4e:76:e5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Mar 26 18:00:52 2026 GMT
Not After : Mar 27 18:00:52 2026 GMT
Subject: CN=1d67ce84d55b8b850d8fadf99de092905bf59382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:24:99:ad:80:e6:e2:b1:e3:f9:56:bc:68:
6a:10:8e:d1:18:de:1b:bc:da:df:ea:d4:ce:5b:c3:
6c:70:7c:0e:73:0c:ff:f1:6d:5e:b8:f6:15:43:99:
cd:bc:e6:a9:c3:e7:88:cd:77:d8:6a:15:f4:3b:6f:
0d:ae:64:a7:57:52:26:2f:ae:50:6f:2b:4c:4d:67:
be:aa:68:06:0a:e6:60:c1:17:da:db:3a:32:6c:63:
9b:1d:b3:d5:ac:5d:8b:ac:48:a1:77:ad:95:ad:f9:
4a:52:1e:04:9d:70:9d:7d:7b:8e:2c:c9:cb:92:84:
b3:9a:02:20:e6:b8:a9:3e:f5:bd:a2:41:1b:5e:f6:
c7:69:ba:ff:2f:7b:22:d6:d0:b8:98:28:87:67:b1:
0f:b0:58:4a:74:9b:76:b3:b8:84:ec:ca:2d:03:4b:
7f:62:d6:63:ba:a0:72:db:b6:4a:10:c6:ce:05:c7:
d1:98:e8:00:99:05:b4:1c:08:a2:5e:94:35:5a:44:
54:06:e2:e2:27:11:71:e6:7d:61:11:65:73:de:d0:
74:eb:38:db:b1:4c:1b:4c:6e:cc:22:9a:55:4c:db:
ce:94:e4:a5:ff:69:4a:30:27:a0:b9:01:62:7c:6f:
9c:59:44:cb:ad:39:85:8d:33:54:1c:4c:6a:19:84:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:67:CE:84:D5:5B:8B:85:0D:8F:AD:F9:9D:E0:92:90:5B:F5:93:82
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1e:92:d5:af:c3:20:17:73:e0:c6:c4:26:b1:ed:52:52:71:
a6:2e:a0:04:6b:42:65:b1:0c:45:ff:58:3f:e1:77:d8:92:88:
70:4d:32:e0:88:01:e1:b1:bd:b2:f7:78:fa:b2:d5:d9:09:f9:
93:2d:1a:cd:25:5a:33:b3:e8:9c:81:e3:54:2e:a2:4e:38:08:
7e:6f:33:85:d4:d9:c6:56:44:57:c6:be:6d:a0:4f:3c:dc:81:
9a:64:66:fd:cd:d4:b3:e1:60:28:d5:68:08:09:14:dd:9c:b8:
55:70:1d:86:1c:af:a4:18:1b:91:18:35:e0:15:d7:3a:99:c2:
d0:3f:39:d0:5b:9c:d3:13:30:1f:b6:06:30:61:ed:80:c1:e8:
7e:ba:23:7c:d1:a4:91:97:34:fc:6a:c7:73:07:18:a5:1c:4b:
bd:02:b0:72:db:36:f1:0b:9c:05:91:0b:81:82:a2:ec:0d:98:
07:b2:c5:76:7b:90:b7:7f:c1:e7:69:ce:08:77:1b:33:1e:5f:
90:b0:53:9d:ae:eb:37:1f:da:57:cd:7f:73:e6:5d:54:4f:e2:
d0:2c:16:53:ca:40:44:94:d6:13:bc:36:4a:b0:1b:88:98:12:
03:f3:6c:bf:a6:1f:d0:96:1f:51:af:59:38:f9:2d:22:66:b5:
4e:71:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:07 2026 by rpki-client