Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json)
Hash identifier: fNIHACe5SfB18lWeKzfbXv59NH0qg3WxFRB+85heErY=
Subject key identifier: DA:3D:D0:22:2C:4D:7B:12:CD:2D:8F:A9:A3:8D:2E:9E:6D:3D:AD:FE
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 019D265F011622674C9E366C607299B434B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: HmFW9/+lpbcirDZV97v9pPFrZmYjdqrhqE61WfJmpEI=)
2: UuOnxKKINXGrGno4BgqG1wRiVJE.roa (hash: qOk1balDAYueDzPokwNkuPz8mml9IxTXWfQ4Usp7bxE=)
3: lWaDtpARbUJ2WwQgVuDOZ2ytV1Q.roa (hash: jLR4Kee9nPopi72xWjqK7/G5TtGJxgI8fqStb9xXKYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:01:16:22:67:4c:9e:36:6c:60:72:99:b4:34:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=da3dd0222c4d7b12cd2d8fa9a38d2e9e6d3dadfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:bd:ce:fe:a3:d4:24:f9:e8:50:ed:f5:5c:
66:32:d4:bc:47:10:d3:fd:fb:39:98:f4:f3:de:86:
fe:84:b4:1f:6e:74:2d:2c:83:3e:62:4a:9b:45:fe:
6e:84:44:3d:40:f1:30:f2:cb:9f:02:7d:96:70:d2:
09:5c:67:6f:21:c4:d3:75:e0:1f:ed:bc:6a:df:24:
e8:81:7c:2a:b5:af:5c:2f:05:11:61:ee:90:62:a0:
8b:04:cf:c6:9a:8d:3c:37:f0:f1:f7:91:28:cf:ef:
29:43:83:76:5c:6e:7c:de:fe:04:d7:38:2b:40:6f:
b0:f8:58:43:68:26:45:16:df:50:6c:f1:79:fc:94:
f2:a5:21:7f:cf:5a:9d:0a:46:6c:29:87:ff:d6:95:
ee:c0:87:c9:c6:4f:08:66:fc:48:bc:52:de:12:5e:
11:50:ee:0b:4e:04:4d:86:14:21:9a:84:7f:66:3b:
34:b3:23:0d:9a:0e:da:34:cb:fd:be:24:7e:74:02:
06:6f:ba:96:0b:1c:65:d5:7e:9f:0e:55:b6:3d:e3:
9d:20:42:a9:ad:c9:d7:c8:83:f9:52:d4:13:21:84:
04:0a:d4:77:c7:20:f6:a5:32:56:c9:30:6c:a6:96:
27:ba:c6:b6:a6:7b:1b:b7:57:89:ef:a3:98:e1:21:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:D0:22:2C:4D:7B:12:CD:2D:8F:A9:A3:8D:2E:9E:6D:3D:AD:FE
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6b:47:c4:4b:5d:b1:72:35:d4:a8:37:6b:cc:e7:82:67:48:
a6:7d:f2:9a:bd:94:51:80:67:e2:ab:2d:08:6b:bc:19:f7:4b:
71:be:c5:e6:dd:87:f2:fd:76:5e:36:9d:fe:3c:11:fb:d9:f4:
29:af:59:e1:4b:e7:07:18:fc:c1:bf:ea:83:8b:41:b0:67:57:
c3:bb:b5:a8:3e:fe:1e:7a:c0:a4:15:c1:87:be:45:2d:22:66:
b0:1e:4e:d4:21:35:f0:91:ca:61:93:5e:30:8c:73:50:f1:24:
b3:b3:61:b7:0c:fd:28:00:af:1f:90:70:d6:6d:3f:f3:33:e8:
73:92:04:fe:fe:52:b3:37:36:c2:7a:a2:87:40:49:9c:8e:b5:
e5:7a:4a:34:81:33:05:50:34:58:9d:96:4d:84:2f:d8:dc:13:
19:98:35:f6:5c:38:7e:b1:bd:c6:07:19:bd:e2:76:5d:03:20:
98:d0:1e:a7:18:68:5d:25:4d:cf:bb:4e:1d:b7:8b:4b:9b:0b:
bd:ff:46:1d:2e:8f:9e:09:6c:b5:e2:de:28:b5:41:cf:f5:ae:
be:22:b8:95:9f:2f:e5:08:ad:78:94:e1:02:04:28:cf:0e:90:
46:a9:57:e8:10:1f:ef:41:e2:67:96:40:5f:14:76:63:ff:e4:
3f:ba:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:05 2026 by rpki-client