Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File: QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier: O1vEkE6Q+2201XNno+QTf89z77kDObhUmWnQcsO2jno=
Subject key identifier: 9F:0B:6C:83:96:A3:7A:CF:6D:0A:C5:63:F8:72:52:29:74:28:DC:65
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial: 019D273AB3CAAC8281CD859CA0003E0CFD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number: 1533
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: 3PqCBsnwrek6Q6n5klUn2vxcEVE.roa (hash: SqGyC3AtR5IMiR3v88dUPZnBKw3fI3oEx2k+/NhUD6Y=)
2: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: 3Myb/LDR3eEny1b3VMKQMsjPyYBl9BF4bPF9fuKsP98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b3:ca:ac:82:81:cd:85:9c:a0:00:3e:0c:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=9f0b6c8396a37acf6d0ac563f87252297428dc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:4b:58:f5:93:48:be:dc:52:ed:62:d4:17:
7d:3c:25:78:04:e4:17:1f:30:74:d0:17:73:f1:b8:
95:20:02:4c:de:2b:29:37:19:31:55:3a:71:2a:77:
1d:16:b7:3a:bb:aa:56:cd:c4:4f:fc:2a:04:31:84:
9c:51:6c:6d:8a:c9:b0:e9:49:cf:51:89:6c:05:6b:
38:0d:f2:69:69:8e:01:8a:fd:08:63:34:22:a1:96:
20:5f:71:1c:ee:a4:8a:bc:3c:12:91:19:eb:6a:78:
6d:1c:8f:f9:92:19:20:1a:b1:e4:bb:90:6a:cf:3f:
38:c2:a0:75:12:f8:6f:4e:a9:af:50:06:6a:9d:1e:
b8:4c:16:f6:07:34:a3:fd:82:7e:89:f3:32:b4:77:
31:65:59:90:73:fb:84:63:c7:7f:6b:17:22:1b:7a:
aa:e2:d1:6c:58:4f:4d:39:42:7f:29:97:45:df:0e:
dc:5d:f0:5a:0b:9c:2d:56:fe:14:b2:eb:f3:1f:45:
87:82:66:a2:ea:2f:0e:01:b4:47:ac:0d:59:f6:57:
be:ab:ee:86:b5:68:a7:6d:d3:77:45:10:13:90:66:
0d:69:c0:81:21:74:80:8b:1a:ee:73:6e:96:48:10:
64:17:5a:ef:d8:54:dc:b9:09:f7:7a:84:20:ed:b5:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:6C:83:96:A3:7A:CF:6D:0A:C5:63:F8:72:52:29:74:28:DC:65
X509v3 Authority Key Identifier:
keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:09:64:8f:83:dc:05:6f:78:70:92:9b:1a:4f:54:4a:c7:42:
ca:27:ab:c0:e6:e5:36:a5:44:70:fc:62:5e:bb:00:49:6b:16:
18:9d:f2:b3:7b:3e:39:92:1a:75:96:08:d0:ea:71:62:53:e1:
6f:71:30:04:8e:ef:54:20:a2:0d:cc:80:80:9c:3d:8d:7d:7c:
30:3e:d3:73:f4:d8:e0:a1:a4:17:c0:27:e1:88:16:e1:1d:07:
2a:ef:63:97:67:e7:2d:a2:69:88:e9:a4:b2:c4:77:1b:88:be:
6c:60:3d:11:99:70:d0:5d:78:58:3b:75:be:5a:69:ff:81:0c:
fb:a7:94:a0:43:3b:ed:84:4e:79:7a:49:18:0b:5e:16:34:0c:
ba:0e:34:ce:15:72:07:91:39:af:0f:7d:cc:53:f8:df:74:f1:
d1:39:a0:29:f5:8e:00:9b:67:f4:a2:91:ff:ce:52:df:54:08:
17:b6:25:a4:cd:fc:cc:2f:16:82:8e:a0:4f:42:ac:ba:ad:72:
47:81:fd:70:0b:63:96:a5:d6:e6:11:d8:08:3a:0a:cb:9d:7f:
9b:cc:fd:86:e8:e8:d6:f6:d3:b3:4e:d2:db:3e:a0:bb:c5:16:
75:23:dd:c8:27:66:1d:51:6f:1a:71:8c:d8:fd:7e:f1:a2:de:
30:70:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:12 2026 by rpki-client