Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: qKcS8LXZ1YZQZ1DpNFCDvUG+gibWirxJNu5pSDR2rtE=
Subject key identifier: 42:0B:E9:84:7B:EB:0F:D3:2A:15:E5:38:08:0C:6F:73:85:F5:84:DD
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 019D2AA975539AEBB8298121936331DE98EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:00:41 +0000
Manifest this update: Thu 26 Mar 2026 15:00:41 +0000
Manifest next update: Fri 27 Mar 2026 15:00:41 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: 5JKyHl/tCbxQuHf9UR5OlXKaoYe9qR5HS1gKEiFd1hA=)
2: m00WEi-KUhPZOZ6m8xsbkwzAAqQ.roa (hash: 7OLk561MR7BV3oxXePdGss3bEUcPG6YjZLBOYNNOHXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:75:53:9a:eb:b8:29:81:21:93:63:31:de:98:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Mar 26 15:00:41 2026 GMT
Not After : Mar 27 15:00:41 2026 GMT
Subject: CN=420be9847beb0fd32a15e538080c6f7385f584dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:71:e0:bf:4a:99:ef:5e:40:09:4f:4f:9c:3d:
da:6e:30:90:a5:13:fa:fa:19:1c:d1:84:67:a8:b3:
c7:6d:c4:76:de:f7:e5:bb:d9:23:98:63:45:5e:6c:
c0:1f:d5:58:d9:67:2a:a6:cd:e7:df:41:ca:8c:ff:
e6:0a:a9:47:16:ae:86:32:d0:f2:ba:0b:42:21:b4:
f9:89:9b:d2:3b:ca:71:c7:fd:7f:83:a3:5e:97:93:
a5:5b:4f:fa:23:e9:c4:20:6d:ba:9e:ad:53:93:0f:
3b:60:54:47:78:ae:bf:d8:68:5e:53:5b:71:af:af:
fc:84:76:80:87:6b:ad:f9:fc:84:57:e6:cb:a6:dd:
44:d7:a0:01:44:13:c5:6f:6f:bb:40:b6:61:ac:bc:
45:ba:29:ff:42:1b:f4:76:a2:72:e8:fd:6a:b1:93:
d7:ab:c7:a4:4d:a2:25:46:9b:25:16:2e:9b:c4:47:
de:0a:50:b4:d7:df:ae:94:ce:e1:89:fc:0f:d6:0f:
5a:66:2f:da:21:89:3b:fd:db:14:61:59:89:6e:06:
91:24:32:3d:cf:e5:31:fd:3b:95:55:f3:ad:b7:81:
b4:7c:0a:65:fd:61:83:e9:93:bd:3a:56:7b:31:5e:
56:32:a4:74:bf:51:44:53:e5:23:a9:7c:e8:89:55:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:E9:84:7B:EB:0F:D3:2A:15:E5:38:08:0C:6F:73:85:F5:84:DD
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:61:21:23:af:5c:51:e4:51:85:36:03:96:e7:b9:17:f0:80:
18:0f:e8:e3:59:4f:a2:6b:fb:ea:99:18:35:d1:34:53:bb:14:
20:de:fc:14:0a:d0:67:16:a2:2d:aa:63:e2:18:75:02:f8:5b:
e1:1d:9a:ac:98:0a:26:6e:97:ad:b1:f7:f5:49:2e:22:d4:5c:
69:e2:70:f9:d8:78:88:a1:c5:43:22:89:03:fa:af:b3:cb:59:
42:d9:61:d6:2a:33:f8:8e:25:eb:d1:97:9d:0a:2b:8e:75:64:
4f:6a:d1:13:a8:ee:73:83:97:68:da:38:30:27:eb:5f:3c:13:
1a:0a:bf:69:45:90:d6:3c:02:7e:18:2a:2d:5c:f2:63:2a:a1:
b1:75:0b:e5:f0:74:86:45:f0:02:fe:61:9c:5c:f3:90:43:bd:
88:13:01:7b:2a:18:dc:dd:59:09:95:5f:a0:e3:a7:2f:21:a9:
9d:82:8e:c9:38:83:42:e9:73:56:62:80:04:5c:a1:f0:0c:66:
9f:04:d6:ba:c2:32:b1:f6:8c:9c:6c:56:97:a4:12:c1:b1:8a:
e9:0f:6a:c2:19:07:b1:8f:d2:82:39:88:9f:29:f8:e1:e4:eb:
14:9c:79:77:bc:a6:7e:21:5e:d4:c2:bc:50:3f:89:80:8a:40:
b5:38:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:17 2026 by rpki-client