Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: 2OCYMWmMGKvQun7qpudq7NXJUMM8cQ3VdJHCeek9WYM=
Subject key identifier: 45:E3:3D:7D:F8:21:A7:3E:68:75:E1:4F:B7:7D:82:1E:FF:4F:BE:D9
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 019D28BB9B689FB2DFAF80C7124CAE9FD4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:16 +0000
Manifest this update: Thu 26 Mar 2026 06:01:16 +0000
Manifest next update: Fri 27 Mar 2026 06:01:16 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: lSFW61UEWNs025gfj8sd0Ffd9bawhYUqLuEoAjQa6jU=)
2: m00WEi-KUhPZOZ6m8xsbkwzAAqQ.roa (hash: 7OLk561MR7BV3oxXePdGss3bEUcPG6YjZLBOYNNOHXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9b:68:9f:b2:df:af:80:c7:12:4c:ae:9f:d4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Mar 26 06:01:16 2026 GMT
Not After : Mar 27 06:01:16 2026 GMT
Subject: CN=45e33d7df821a73e6875e14fb77d821eff4fbed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:80:3c:00:cc:e2:78:ff:0f:41:d4:95:7f:36:
25:61:03:95:07:60:13:cb:5e:a9:45:5f:c3:f4:88:
f3:2e:03:48:2c:e4:6d:0d:1f:cc:5b:cb:a0:f4:9d:
c5:eb:36:b7:c0:41:35:72:55:13:53:f9:8c:73:a6:
f8:d1:de:eb:5b:58:f2:98:c0:5e:8d:d8:05:91:4b:
ce:ec:65:45:9b:a6:0e:9e:42:7f:49:52:e1:3e:63:
a1:b0:13:d1:06:6d:86:68:6d:1f:8e:8d:aa:b3:6e:
f4:4d:65:73:18:d5:96:45:28:55:b1:be:52:ad:df:
81:ed:d8:72:36:8f:7d:5c:1d:cb:ca:92:0b:a7:a9:
df:7d:cd:2f:36:44:74:f0:8d:2b:6e:e6:86:31:ce:
d6:f0:39:9e:88:88:9a:5f:da:5b:fc:73:60:51:1d:
a6:5c:04:ef:62:3d:3c:8a:9a:b7:df:fa:43:85:ae:
18:f9:c2:0f:e3:ee:33:92:12:95:40:11:99:fc:1f:
dc:94:bc:d2:29:d5:ad:fb:64:f3:cf:93:18:c5:54:
ed:8c:de:41:cc:87:a0:b9:3a:51:9b:0a:1b:75:2a:
67:c4:db:06:f1:9b:d3:b0:31:c7:4c:b9:5d:1e:22:
70:74:59:5b:9e:5d:75:64:04:b7:31:2f:09:c5:2d:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:3D:7D:F8:21:A7:3E:68:75:E1:4F:B7:7D:82:1E:FF:4F:BE:D9
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fd:17:ac:67:fd:9a:18:cb:71:b0:9b:dd:ff:a1:13:12:b0:
23:7b:00:b2:4b:ff:9b:a0:8c:b2:0c:6d:75:58:88:32:b6:65:
1c:08:c2:e9:39:12:8f:61:0e:0b:cf:68:9a:9c:0e:d6:16:cd:
ba:93:81:01:95:96:42:8d:a8:f8:98:57:ec:a0:84:71:3a:62:
ca:e3:b4:47:c8:d1:c7:8a:1b:3e:1e:ee:0a:0c:51:45:59:b7:
ed:30:02:85:99:c5:f4:e8:93:92:4d:30:78:06:8c:22:93:e2:
85:9e:94:c9:d0:c9:8e:44:29:66:ca:e3:64:89:0f:e3:ba:6c:
7b:57:e9:12:c7:eb:e7:39:d2:03:04:58:aa:ec:27:71:74:53:
7e:91:72:58:90:dc:e7:59:a6:35:b9:38:d2:e2:f2:07:c6:55:
4e:77:e2:5a:7a:16:33:08:4a:33:f2:4a:8e:47:9b:95:03:bb:
2d:ea:f1:1a:f0:80:30:88:12:89:34:93:2a:a3:f4:b2:16:14:
e9:15:12:4e:e1:bc:3b:46:fe:c5:2a:95:77:1c:c2:9a:7a:81:
f1:be:20:b5:d2:62:2e:eb:2a:03:70:a3:a3:aa:5c:7c:e3:90:
2c:ce:75:7f:83:c6:70:42:e1:7b:66:a3:8b:a4:b8:ad:43:2b:
bc:aa:6c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:46:09 2026 by rpki-client