Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: xYwPp5H8nBKDSvEofGjYnKveHHRZYD0lBl55gMr2Sdw=
Subject key identifier: 52:F9:A9:48:C6:B7:E1:6E:AD:01:56:13:0A:0E:54:BD:37:00:2A:1D
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 019D270452122A9E8F7FF9505DD7C21F79A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:27 +0000
Manifest this update: Wed 25 Mar 2026 22:01:27 +0000
Manifest next update: Thu 26 Mar 2026 22:01:27 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: 5VuzSYMdVstPsjUZME9XnKwbJifL3PdEcyQ1EkOxrGs=)
2: V4BV10qPY6b-JooJZeWPBE6lJrE.roa (hash: 38wboqA2Afge4PlNQaN9faMSSzNBTQwT1DwZQqM/Oco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:52:12:2a:9e:8f:7f:f9:50:5d:d7:c2:1f:79:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Mar 25 22:01:27 2026 GMT
Not After : Mar 26 22:01:27 2026 GMT
Subject: CN=52f9a948c6b7e16ead0156130a0e54bd37002a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:c9:23:0d:9d:68:11:32:93:33:f0:74:1f:
44:b5:15:c9:b9:cc:fb:da:74:b2:a8:b9:e8:a2:f1:
d0:a3:a3:e8:f9:2d:14:e1:c0:d3:eb:bb:b3:30:50:
cb:49:0b:d9:6a:32:2d:03:23:e4:11:0d:aa:a8:c0:
2a:c1:3e:d3:43:74:6c:cd:c7:e6:06:2f:3f:af:eb:
cb:40:3f:df:94:fc:b5:9a:2d:df:91:80:d0:a6:5e:
31:ce:86:66:e9:90:d6:05:03:15:63:00:b1:fe:71:
72:65:db:52:1c:70:1e:98:44:67:07:b3:31:5b:9a:
fc:c0:1c:ae:b0:82:3a:2d:54:a4:e4:da:db:55:6d:
5c:f6:c8:f4:01:29:a3:5b:69:f4:97:db:29:c5:fb:
f1:67:e8:4e:34:d8:13:9d:c4:3e:2d:95:d2:e1:51:
39:c7:83:76:ae:6a:a7:ea:bb:98:51:8b:be:e9:b4:
cb:e9:74:3e:3d:4d:72:75:1d:a0:08:b0:5f:0f:7f:
d4:74:17:85:b4:37:d3:3c:87:74:2e:45:26:dd:5a:
cf:0e:00:6c:e8:b3:03:35:49:20:08:cb:10:45:b8:
5a:2a:d7:ed:f1:77:86:21:1e:56:dc:b2:fe:01:9f:
84:2e:bc:d3:f4:83:16:de:dc:47:26:20:2d:58:a2:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:A9:48:C6:B7:E1:6E:AD:01:56:13:0A:0E:54:BD:37:00:2A:1D
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0b:1b:67:be:04:89:7b:32:f4:0c:fe:89:32:ff:3f:c2:3b:
55:c4:8e:b4:87:78:33:3b:4b:f0:3d:7d:a4:42:4a:53:b2:67:
46:18:86:30:53:7f:6c:03:5f:dc:45:29:9e:37:84:71:70:db:
e9:3a:95:df:26:05:58:20:8a:d3:de:9c:07:a9:8f:24:e8:05:
09:61:b6:f7:9c:7b:ad:ec:eb:3e:13:21:0e:3d:fd:ac:bc:09:
e4:07:cd:07:35:60:cc:8f:85:a1:32:de:8a:97:1a:9c:53:88:
cc:74:6f:22:59:20:b9:ff:41:2e:58:3f:69:12:6f:7c:be:97:
08:07:50:f6:d9:df:6f:a0:9b:12:99:63:a8:a4:0b:80:86:7e:
19:cf:7e:e3:dd:20:ea:f4:e7:c3:90:26:58:09:8d:a4:c9:3c:
9c:ab:c4:92:ac:db:ca:16:32:b6:b7:87:6a:18:2b:2e:8f:77:
c4:73:13:b0:20:b1:27:15:5f:a7:48:bc:ce:9e:ea:f4:23:d0:
30:4c:37:50:0c:fb:4c:79:c0:91:b2:9a:a9:61:d6:d4:16:b7:
96:ec:cb:88:c1:ae:0b:ed:d2:c0:3e:d4:be:21:d8:da:e5:6c:
92:22:02:43:d2:01:b9:4a:53:1c:5f:df:8b:4d:7a:35:8a:94:
b3:ce:86:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:57 2026 by rpki-client