Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: U6chEICYt+VI0+eC1AJ2E29vv8mhiXY8STmn5a0v26I=
Subject key identifier: C2:F4:12:F8:32:E1:DC:0C:49:85:1F:8D:8A:8D:56:59:F2:3A:28:77
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 019D27727D85954210860F213990C38114F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: XMoqZ59957emyCX7gUMNzUbn8chweXVakBeaq5hh5+c=)
2: vF0Ba58Vjf6MQi2xfFA2VRGbWDA.roa (hash: UP/P5O1v0/b2/0tqvP3zAcq5nuDMZ+lgRc9j8wTq7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7d:85:95:42:10:86:0f:21:39:90:c3:81:14:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=c2f412f832e1dc0c49851f8d8a8d5659f23a2877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:2e:54:e1:3d:0d:26:1b:34:4c:a7:97:c4:
6f:bb:e8:e3:e3:ba:c8:eb:1e:2c:c5:2a:05:a0:ad:
6c:bc:3a:fd:05:36:0f:d2:10:05:06:4c:85:1b:92:
7b:7a:f8:41:c5:57:52:d7:e6:46:34:3b:d6:fe:06:
e0:73:64:47:2e:24:6a:4b:9d:67:02:83:64:12:f9:
6e:61:3d:65:3e:38:31:57:24:42:0a:84:21:72:2e:
42:47:58:60:b2:24:15:55:8d:32:cb:1e:c5:79:50:
dd:2b:e3:94:06:9e:58:3c:6d:b1:40:6a:66:97:71:
82:d6:a2:eb:16:f1:d8:02:62:c2:94:d9:53:8d:70:
fc:9b:98:56:93:6f:66:1f:da:2d:46:ab:3e:9a:47:
c6:cb:2f:6a:ac:34:ee:82:4b:fb:03:da:61:c3:f6:
27:53:61:92:89:07:28:95:90:15:92:27:82:cb:a7:
39:4e:a1:5b:65:d1:f5:16:b7:77:be:d6:ac:7e:24:
ec:88:9d:54:f1:26:2a:ba:d1:c9:83:9a:f4:06:48:
f6:96:45:cf:d5:fc:29:cc:92:50:25:3d:e5:9e:6e:
8f:7e:eb:bf:4b:3b:7f:cc:0b:2d:75:86:fa:ba:06:
cb:fe:b4:49:48:f3:a2:2d:77:b7:97:e5:99:6a:61:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:12:F8:32:E1:DC:0C:49:85:1F:8D:8A:8D:56:59:F2:3A:28:77
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:45:e4:cd:44:fe:36:c9:a1:64:7e:47:b5:4c:46:a9:dc:40:
34:f9:af:8b:a4:21:37:34:08:5a:d8:e6:6a:04:7f:cb:59:48:
42:31:38:81:1e:96:a1:a4:17:88:64:0b:84:0a:da:3d:f0:a7:
ed:fd:9d:75:e1:b1:21:52:3f:ad:ff:13:f4:57:cc:fa:f2:93:
e6:60:33:e1:2e:40:13:51:fe:7c:e1:ef:d1:eb:f9:40:96:26:
cb:f3:0a:d8:f4:c6:44:31:06:5d:06:6a:9d:d4:f6:9a:59:8f:
68:a1:ee:38:e6:7e:02:05:f4:6a:cc:1c:7b:70:f2:39:37:e2:
e4:be:b8:6d:09:c3:17:e5:ed:2f:a9:4f:e5:f4:fc:cb:3b:85:
45:3b:22:66:aa:53:38:68:d2:06:28:f3:f5:e9:17:b2:04:56:
0d:1d:e9:8b:81:5b:48:e5:6d:45:b2:2b:ae:03:05:2a:04:f1:
f8:b2:36:ad:11:1f:c9:f1:76:e7:c8:2e:3f:ac:a2:e5:f6:8c:
42:8a:5c:aa:06:9e:7a:b1:ff:5d:68:bd:05:67:56:ad:8e:a8:
e7:ab:32:f1:49:bd:c4:6b:3c:ae:aa:6b:48:ed:8b:2d:47:a5:
6a:d3:12:cb:1a:ca:51:9c:06:6f:b8:e3:88:d3:52:c5:4f:9d:
64:11:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:13 2026 by rpki-client