Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json)
Hash identifier: 8lbkleWdyjO4LzpE2Z6UByq9s4CXD+OewSs7bfSqGko=
Subject key identifier: 18:7B:3C:16:79:38:46:86:77:FF:00:F4:37:F9:93:AE:D8:A8:FC:D4
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial: 019D29978E1AFAE9DCFD54B60046BF6828FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
Manifest number: 15E0
Signing time: Thu 26 Mar 2026 10:01:31 +0000
Manifest this update: Thu 26 Mar 2026 10:01:31 +0000
Manifest next update: Fri 27 Mar 2026 10:01:31 +0000
Files and hashes: 1: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: 9Y6UvGZEnGJpTWHKUFhScclRch7ZRKxA/PWPaCo2pMA=)
2: lXeVvSBTU7kT9plGVLjP1SeM5e8.roa (hash: d6HLCVnG+FtyHmH62hlZHwElrQ46SkYz4wdJECCi/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:8e:1a:fa:e9:dc:fd:54:b6:00:46:bf:68:28:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
Validity
Not Before: Mar 26 10:01:31 2026 GMT
Not After : Mar 27 10:01:31 2026 GMT
Subject: CN=187b3c167938468677ff00f437f993aed8a8fcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:c4:27:49:5c:bd:28:b3:29:ed:00:19:ef:
ac:6a:6e:55:15:87:28:b8:21:37:10:0e:20:31:57:
f7:c7:a8:e3:c3:dc:eb:9e:c6:d4:2e:a0:ee:d2:ab:
91:b1:ba:4d:44:33:13:59:75:c5:bb:7b:32:37:5a:
d4:17:f0:38:82:bf:97:5d:68:46:2d:8e:b6:37:c4:
42:8a:56:cd:41:1b:d2:04:02:0e:96:5c:58:43:38:
57:2f:75:4c:1f:c5:40:c2:3b:69:7f:5c:1a:f0:ed:
ec:b4:dc:c9:18:74:49:dd:d9:1c:d3:62:eb:bd:93:
c8:6d:fc:db:1c:08:61:ea:a4:30:79:50:1a:09:0e:
fe:d0:f1:2e:4a:67:80:4a:a6:55:30:18:4a:10:01:
af:a7:f9:5b:d4:86:2e:74:07:87:09:9d:5c:88:d2:
e3:d4:61:84:fd:ab:a2:c7:19:55:a5:52:ae:a6:2f:
12:d3:6c:4d:ea:8d:da:76:4d:68:4f:24:ce:6b:76:
43:ee:de:28:1e:7c:51:f5:d5:88:47:fe:c3:df:05:
25:2e:bc:5e:43:ea:07:08:19:87:b6:22:ef:91:0a:
aa:b9:f5:2b:c6:b1:b8:c8:04:ef:09:b0:b9:c7:2c:
4b:72:f7:f1:4e:3b:13:04:ff:e2:7d:86:a8:19:3b:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:3C:16:79:38:46:86:77:FF:00:F4:37:F9:93:AE:D8:A8:FC:D4
X509v3 Authority Key Identifier:
keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e7:22:ed:fd:d8:42:db:06:6b:7f:3f:ae:8b:d3:34:1d:86:
7c:3d:7d:fd:02:08:9a:e3:90:c5:9e:fa:c1:68:29:b5:d8:ab:
6c:34:78:09:7f:b0:eb:02:bf:a8:99:9e:c6:98:06:79:b8:e8:
a2:4b:f7:92:43:15:33:8b:cd:a8:14:ad:4a:d1:59:36:0c:05:
f8:c8:5c:66:be:7b:65:87:16:64:1b:ae:da:1a:8c:72:a1:cb:
e1:bf:44:57:7a:4c:0a:84:62:c8:ee:4c:5b:54:99:f8:fc:1a:
23:39:74:95:75:87:04:f4:9f:1e:d0:e5:27:54:bb:41:7a:77:
7c:63:de:e8:bd:2f:3f:b2:b3:4b:e3:23:14:4a:4b:a1:b3:e7:
a0:11:12:39:ef:0c:ed:b9:49:bb:a5:65:90:d8:49:92:98:43:
64:7f:40:1b:02:8a:30:2f:55:a1:44:61:51:4a:d6:2e:4a:05:
94:a0:3e:58:d4:16:fa:b0:f5:dc:4f:e7:aa:20:67:30:48:f3:
da:7a:0d:6a:10:8f:69:de:34:20:ff:b2:63:43:fa:59:83:8a:
ae:d2:24:01:ef:8d:38:39:1c:9f:e7:27:dc:12:86:a4:73:0b:
0b:31:b1:1a:3c:93:40:b3:c7:65:18:80:3a:1a:fe:c6:95:48:
46:07:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:50 2026 by rpki-client