Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: HKiP3JQTntV0feOC6oGeuticjvg+iKhllLY3vvjFAGM=
Subject key identifier: D3:D3:2C:32:74:0B:46:3C:B8:09:1A:23:E0:2E:67:3B:66:3E:0A:B7
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 019D2703EA397AEF89FB4433FD202BB843F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0C6F
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: gf2WaUN43mk51aID8rXumpV79BYyHoAu+vV+kYHWTDo=)
2: bgTj1AVpGOJ4PVrdSMxeLKpik_E.roa (hash: PA5QdaiNGx0nBgpS5K3tHFIeNRXLUOzm0Y2JaVTpock=)
3: lePQo6wZD_Sk6G9yXvisbl2Tsao.roa (hash: 4hQP72BMPYOrYdBAheaaMbRjYFT184+eQqEoi9pvU4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ea:39:7a:ef:89:fb:44:33:fd:20:2b:b8:43:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=d3d32c32740b463cb8091a23e02e673b663e0ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:5e:ce:7d:8a:0e:57:22:53:36:d1:13:9c:
96:54:72:cf:0d:37:94:e7:5b:a1:a7:33:4b:c6:7f:
46:2b:3b:d8:c0:9e:5a:e7:1a:0d:0e:51:b9:14:9e:
9b:97:36:c2:c5:aa:8f:f3:11:08:38:f8:ae:99:50:
b1:15:a4:9a:77:d1:65:bc:4c:69:67:da:ef:1c:ff:
67:d5:0a:7b:24:46:03:d1:45:30:78:ce:b4:b5:ec:
48:9a:40:6e:57:76:8e:94:67:38:ec:1d:bc:e7:ab:
29:35:ac:85:5d:a4:54:df:2c:08:92:7a:02:dc:31:
88:5a:4c:60:42:ba:17:91:3a:85:6c:ab:84:c0:f3:
6d:ce:50:48:6f:3d:e9:cd:31:10:37:d3:89:02:35:
f6:06:f2:0b:76:10:61:27:60:2d:cb:d6:b5:bc:5b:
fc:89:34:7b:32:c5:02:34:c4:75:36:e7:59:d6:38:
4d:67:3b:44:e7:49:c5:65:05:b1:fc:f9:68:03:c5:
e3:8b:92:8c:45:95:a7:76:42:b6:3e:e6:f8:d5:2f:
ed:65:54:02:dc:f5:f2:94:a6:71:03:d5:2b:e2:11:
4a:8c:fd:16:ce:7d:2b:c4:cc:ac:c7:36:d1:57:a4:
5e:ee:dc:c4:13:c1:08:5a:d8:47:a8:47:a0:d1:f9:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D3:2C:32:74:0B:46:3C:B8:09:1A:23:E0:2E:67:3B:66:3E:0A:B7
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3a:27:66:2c:b4:2e:36:0b:95:17:94:90:06:72:16:57:47:
39:d3:f7:3b:63:d5:b8:04:b4:ce:84:7f:37:21:c2:ab:2e:0f:
ac:c2:4f:97:22:22:e4:a5:b4:fa:c7:06:b0:0c:bb:c7:50:05:
c6:8a:28:1c:e7:12:ba:ba:2e:87:c3:cd:ec:d3:ca:65:47:41:
0a:0e:0d:fe:f3:ae:cf:56:59:ee:2e:a1:84:2a:11:2e:1b:c6:
11:0c:97:fd:88:16:4b:3a:8b:0d:53:ef:d4:95:0d:63:d1:40:
73:28:2e:9a:54:88:40:11:54:5b:22:0e:6d:bb:80:52:78:29:
44:94:de:01:38:cd:63:8e:90:2b:36:8f:ba:dd:fd:13:21:e0:
f4:94:e6:c8:de:d1:b0:3b:ee:fd:11:4e:f1:ea:7a:03:16:b4:
0f:b3:ee:8d:d1:60:e6:21:1d:ad:ee:1a:ae:28:e0:4a:25:c6:
5f:1a:1c:88:07:7e:cf:7b:7f:63:2e:c3:4a:8f:7c:f5:68:e7:
f8:fc:04:8d:e7:13:0e:20:17:a8:23:e4:2b:4a:94:0c:e5:d3:
26:54:02:d3:f7:4f:c4:f7:55:ba:d5:42:10:be:d7:66:d3:61:
69:6d:47:6a:49:2b:9d:5d:09:16:2a:a0:d1:e8:c1:56:fb:c9:
67:5f:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:23:20 2026 by rpki-client