Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File: QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier: vozHiCG2Tm9xHJUuhJCoaFQofl4+TzuQ0vKRAGrPqdI=
Subject key identifier: B4:C3:42:C5:75:FB:D9:96:D7:1C:86:64:79:E5:23:67:41:84:BC:F4
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial: 019D2A3B78633E5F03C3C47570E006472E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number: 118C
Signing time: Thu 26 Mar 2026 13:00:33 +0000
Manifest this update: Thu 26 Mar 2026 13:00:33 +0000
Manifest next update: Fri 27 Mar 2026 13:00:33 +0000
Files and hashes: 1: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: hsHkEjYkUDcZ1BdV8J1RqCAGqVjwcKev3kKlOYeoJPk=)
2: taUKy4LsAIVqYECr_I6zC5-6tmA.roa (hash: XbQTe1aYMndPzhCH28pl8kMRF03Ke9lcnEs2hGBI9TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:78:63:3e:5f:03:c3:c4:75:70:e0:06:47:2e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Validity
Not Before: Mar 26 13:00:33 2026 GMT
Not After : Mar 27 13:00:33 2026 GMT
Subject: CN=b4c342c575fbd996d71c866479e523674184bcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:2c:25:6a:6e:ec:8d:6c:8c:68:75:9c:a0:
14:dc:ca:cc:b6:b8:03:56:2c:89:8c:46:e9:8e:d2:
21:eb:46:9d:bc:2b:f2:26:7f:3c:c1:a3:18:75:bc:
7c:e1:8e:33:d1:fa:ab:97:52:0d:92:3d:40:e9:fa:
8c:71:ae:51:ac:94:2d:1c:48:92:3a:8a:a4:7a:c4:
a3:79:55:d2:16:2e:8d:f5:38:b5:68:53:82:b4:b6:
d4:c3:dc:ec:a4:0f:91:e6:18:9c:21:ae:03:86:6b:
af:fa:bb:af:55:c7:aa:8e:0e:be:3f:70:72:e7:49:
50:c2:7c:df:67:7a:5d:df:df:24:26:b4:72:74:82:
e5:2d:75:46:c8:3c:56:32:9a:e1:2b:c8:20:f0:81:
c9:82:88:a7:46:6a:73:bf:9d:3b:43:6e:bc:67:ac:
39:fc:7b:32:2e:a4:52:2c:b1:cd:a0:67:64:94:79:
73:f5:88:2e:58:d0:13:a2:eb:7f:5a:59:99:73:ef:
72:93:07:63:cd:a6:a9:d3:da:0c:2a:21:e6:8d:fc:
a0:5c:50:84:39:9d:0d:18:b5:bf:03:92:47:0f:71:
d1:aa:e0:06:70:9c:ca:7a:e9:7f:c3:fc:f8:e8:7a:
b3:6e:d9:95:b6:5e:b5:a0:df:05:56:6c:a1:ef:6b:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C3:42:C5:75:FB:D9:96:D7:1C:86:64:79:E5:23:67:41:84:BC:F4
X509v3 Authority Key Identifier:
keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e5:8a:56:c3:78:79:37:35:f9:c4:19:85:86:8d:ed:0f:e0:
f7:ab:90:37:00:2e:5c:68:69:1f:5d:73:30:52:52:5a:30:65:
7e:b2:ec:21:43:a7:94:ec:53:6e:1e:a4:94:f2:cc:49:39:87:
76:67:9f:6f:bb:22:7f:3a:e9:bc:93:ef:be:e3:81:f7:57:a3:
a7:43:b5:cb:5e:a4:e5:96:5a:97:5a:41:1e:ab:5c:2e:56:13:
a3:6e:37:99:8f:4d:fa:9b:e1:27:da:40:74:e0:cd:0f:c9:57:
6d:0e:6a:ce:4a:d6:b5:b2:55:0f:34:f2:51:1e:f4:5d:24:ea:
52:81:07:b3:fa:37:c4:c9:4d:76:42:5a:1d:b6:60:89:6d:9d:
63:9e:e3:d9:0d:01:6b:df:d2:e6:0e:1e:64:68:fb:2a:2b:e7:
bb:26:45:78:91:d1:70:06:51:5c:dc:c8:3d:b8:7d:af:a7:8f:
06:fd:aa:4b:58:4c:cf:e5:8e:e4:04:12:de:49:c6:8d:d0:f7:
22:e4:e3:50:49:77:68:56:b7:e1:ff:5d:9c:a4:4c:39:1e:92:
ef:1f:a1:34:ab:db:ec:46:02:2b:c1:fd:63:7f:5a:70:e2:83:
46:19:bc:0e:ef:f9:fb:e6:8c:05:e3:1b:42:70:5a:8f:ab:29:
c3:b0:25:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:59 2026 by rpki-client