Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: 7lLaWXZGud33ufv7+FI7lHKz1eOBKirtMqtaP5GE9jM=
Subject key identifier: 18:E4:32:E4:1D:7B:8E:D1:C1:0C:4D:41:DB:5E:56:79:04:2A:51:95
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 019D273ABBA0D2E13A67B861CE6BEDE94F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: AwpzkVc0oTDl0sjoa6-QEqDiUec.roa (hash: x7d6UyA4Hucc8K4+EGGBB/UoxNRtjZ72KYH63IunwOE=)
2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: 4fyEN/itka/9hKS/Q3410fGMfWoaXc5H05OX5n8vK48=)
3: VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (hash: oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=)
4: dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa (hash: YawdemXrdjGI6Mt73jp819mShD2ngjs7tuw/5rjzQBM=)
5: mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa (hash: EsNOl7YE7/jiv9Lddbv0Cg6u3OhdzH3IL5pGXlsPUKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bb:a0:d2:e1:3a:67:b8:61:ce:6b:ed:e9:4f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=18e432e41d7b8ed1c10c4d41db5e5679042a5195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:b2:32:5b:f5:26:a1:0f:80:9a:75:63:81:
fd:e6:28:ca:60:92:43:c9:88:1a:9c:a7:32:66:7c:
77:6f:6e:43:f6:09:35:ad:81:1c:e6:15:38:af:62:
30:64:9f:58:30:6e:74:34:0f:c0:5a:2a:55:c6:59:
33:1b:2a:80:7b:22:9a:29:67:a4:f7:f3:ed:b2:56:
8a:b7:1b:02:39:3f:26:15:43:62:3c:3c:20:d0:fd:
97:05:98:24:ea:9f:a8:bd:83:f5:8f:1e:07:e9:cf:
f0:85:af:52:0f:c4:a3:bc:41:a4:b0:5a:2f:35:3e:
a6:c9:7a:cb:e6:3f:d6:20:06:15:f7:77:9c:b3:a2:
21:bf:f7:6e:07:d1:d6:93:3d:dc:97:77:7d:34:67:
98:9f:3a:9c:02:f1:4d:e2:08:d3:09:12:96:3d:3f:
26:9d:39:da:11:6c:f2:a9:26:bb:5d:d1:08:58:da:
ab:d7:a5:9b:c0:39:df:19:ea:6c:17:93:ef:91:06:
0e:ce:ba:2a:60:93:1c:ee:19:d5:f5:7a:ab:a9:17:
e2:82:81:f0:08:da:0c:1c:5f:5c:b8:8b:ca:3c:77:
70:00:ea:6a:64:90:46:2f:d8:95:83:95:df:06:2b:
8b:ef:c6:ee:da:f2:5d:02:eb:96:86:6c:c7:3d:36:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E4:32:E4:1D:7B:8E:D1:C1:0C:4D:41:DB:5E:56:79:04:2A:51:95
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9d:92:26:76:4c:69:d7:26:5b:6b:dd:97:1d:d8:43:02:06:
61:87:f8:d1:07:67:7e:a9:c7:9a:7f:00:d1:d0:67:cd:ed:3b:
97:83:d5:81:18:6a:fd:af:0d:a9:8a:49:08:31:9a:40:a0:58:
74:1d:4c:60:4e:64:3f:20:cb:a7:42:89:06:4c:5f:f0:8f:f2:
b7:74:a6:ee:3f:28:73:15:c6:fa:43:39:d4:5a:d4:94:59:22:
99:69:95:80:72:b7:63:23:5f:01:68:3e:5c:9b:53:98:45:38:
9f:59:82:5d:15:6f:c2:47:55:4b:d9:9b:6e:6c:e6:3f:ee:ec:
64:d5:69:8f:bc:de:19:de:5b:6a:40:89:4d:0c:ca:f3:b1:68:
f9:4e:d5:bb:02:e3:1e:69:81:a0:61:ad:6d:6e:8f:8c:ec:a9:
f2:02:5c:56:f4:4c:73:52:b6:58:0e:e1:db:9c:6c:a5:e1:12:
72:70:ab:1a:cf:dc:81:d3:c8:f6:74:e4:92:8b:c4:14:5f:aa:
27:ae:6d:91:ab:c8:0a:de:5b:dd:34:d5:ad:0a:1e:f5:6f:57:
03:6e:e6:53:ea:f0:0a:18:cc:02:38:2b:5f:7f:ca:38:69:81:
7c:d7:70:6e:b2:45:06:3a:3f:9b:f0:ea:cc:12:2f:d6:71:34:
16:ac:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:58 2026 by rpki-client