Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier: m+7t+dWv5Bav+TwaIAeggfaEUo6qX3s/PwO/hPeBYb0=
Subject key identifier: 63:EF:1D:E1:3C:7B:E1:14:65:46:C1:DB:1E:62:16:A7:22:31:E9:AB
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial: 019D26CCEF569131AE6BD659305B34E2D833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number: 058C
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: RHDG1u1EPF7tazqR2v1v8VeCKRz0Zx7vrZtyFklgGQU=)
2: lex0MSfafX69jgAmgDrAWYS2f9Y.roa (hash: i/FMA/z6OJZHxVdVZzVnuaqiacIER1savYD4hQ1WM2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ef:56:91:31:ae:6b:d6:59:30:5b:34:e2:d8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=63ef1de13c7be1146546c1db1e6216a72231e9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3e:e2:12:ba:5f:5e:db:30:dd:89:f8:d1:fe:
ad:76:06:e3:ff:61:d2:24:96:7f:64:f4:2d:e6:7d:
90:68:0b:dc:00:3b:64:c6:c4:9e:57:1c:1c:f3:6b:
13:5d:f1:1b:5d:7a:c3:0e:4c:a7:a9:63:05:2c:c5:
1d:90:0d:96:bb:b6:f7:e0:68:09:95:df:23:19:87:
d0:0b:d5:56:d6:6d:51:ad:54:a2:c8:cf:d9:44:a9:
9a:57:5d:e4:5a:d0:64:98:dd:77:56:5b:37:51:8c:
86:d4:a8:13:57:df:c9:0a:3b:3d:f3:16:26:d3:5f:
41:64:d9:4e:3d:6a:78:b4:04:d9:d3:0f:2b:c1:04:
92:65:79:78:79:fb:5b:9a:8d:a1:8e:9c:b8:3b:73:
69:1f:73:76:38:5e:03:7d:76:e5:7e:11:69:38:ea:
a4:9b:34:1f:97:10:1f:f1:93:7a:12:5e:4e:71:d4:
62:a0:cb:c2:0e:93:5c:78:0b:10:8d:78:ea:f7:cb:
45:d6:95:29:ef:9b:43:13:ed:1a:92:ec:36:88:08:
7a:0c:e5:a7:a7:de:28:b0:3d:ff:91:cc:67:f4:b4:
37:a1:2a:32:aa:71:ba:e2:22:73:e2:f4:39:39:a4:
4c:7b:ca:83:d2:09:e8:5d:ca:54:77:5f:4c:54:28:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:1D:E1:3C:7B:E1:14:65:46:C1:DB:1E:62:16:A7:22:31:E9:AB
X509v3 Authority Key Identifier:
keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:87:5d:dd:fb:af:b6:ff:cd:2d:01:86:43:29:8f:59:13:77:
dc:bf:00:cd:d3:1c:be:8f:91:c9:b4:7f:ca:33:d8:9f:c6:b0:
13:52:aa:c1:cc:72:d7:1d:b7:f3:d4:97:16:1a:b2:fe:64:f4:
e7:ac:71:84:f9:5b:1c:0a:39:fc:cc:19:50:fc:4f:64:c5:e3:
42:6c:e7:5a:0d:5b:0d:9b:4c:9a:63:08:d9:9e:83:e4:27:f3:
15:77:67:1e:4e:3a:05:54:4c:58:c4:07:9d:49:6a:46:87:4c:
73:37:84:5f:73:10:85:e8:05:7d:33:d8:2b:7b:2f:14:19:4a:
96:89:53:ee:b6:9e:a4:a4:40:29:f3:ea:86:7d:e3:39:8a:ed:
1e:94:1e:95:d7:ab:89:5e:eb:e9:22:a3:7e:96:8d:17:74:8b:
a9:75:27:45:33:33:38:b0:5f:94:37:4c:27:07:8e:89:0a:41:
b0:93:d5:d7:12:1a:b1:89:2e:75:ad:e2:e8:a7:6f:f9:33:63:
bc:3c:47:69:55:70:13:12:9a:e9:2d:d9:37:87:22:e2:50:a2:
22:35:94:37:cd:eb:01:9c:73:d5:eb:96:bf:8a:ca:30:55:5a:
24:73:6e:ad:86:de:25:4f:1b:f5:b0:c2:fd:b2:81:85:ca:44:
fd:e6:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:57 2026 by rpki-client