Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: 4hSeF+DigdFV64MNSkfYgrshFIFvvMb6y1VGz9iykW4=
Subject key identifier: D4:BF:FA:6E:4D:83:70:BB:5A:BF:A0:A0:56:48:5E:C5:AB:72:10:99
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 019D2816E1D7EFC926C351AC8BC27AD2B4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 11A5
Signing time: Thu 26 Mar 2026 03:01:21 +0000
Manifest this update: Thu 26 Mar 2026 03:01:21 +0000
Manifest next update: Fri 27 Mar 2026 03:01:21 +0000
Files and hashes: 1: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: iv26elowaNYgpnjf9BXdTlYdB5zkvO1ZAjmRX6aig+4=)
2: qDecB_BWF1K9skoTX1OzF0T-DQQ.roa (hash: AAPazeOH0UyI2v6icXzRiwrdFOTR+zzuLsPnN6L+as4=)
3: tPolntRW3EVoA5WCEpAsWda33Aw.roa (hash: R4nNUtjVrvsZ3qcmSOyRAEFItuX7aMB4GwPwNz7Vta4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e1:d7:ef:c9:26:c3:51:ac:8b:c2:7a:d2:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Mar 26 03:01:21 2026 GMT
Not After : Mar 27 03:01:21 2026 GMT
Subject: CN=d4bffa6e4d8370bb5abfa0a056485ec5ab721099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:0e:cf:ab:ad:0e:98:4c:01:f4:2d:ac:28:
75:b8:22:63:1b:5b:57:64:08:ef:f7:01:32:1c:b5:
e0:62:4e:80:75:ce:0f:9b:59:cd:a9:69:a4:ec:b0:
b9:6c:02:96:0a:57:90:b2:76:32:c8:f6:a2:8e:83:
32:24:c3:9c:47:6f:02:92:f7:d3:bc:7f:3e:89:2f:
6d:f2:43:41:eb:df:20:65:9c:cf:13:b3:e6:e7:b6:
09:5e:14:69:be:c7:9d:9c:03:25:29:a1:ad:84:38:
99:26:8e:62:76:e8:e9:f8:81:2d:84:a3:12:90:f3:
7d:c7:26:95:11:e7:41:03:35:34:1b:4e:df:6a:0d:
7f:92:8d:0b:4f:83:5a:50:47:04:39:27:31:03:9c:
1c:1f:3c:25:11:de:06:b9:af:08:1e:85:eb:15:15:
e2:6e:a1:fa:9d:15:b9:80:ae:b3:d2:16:26:0b:9b:
1d:75:b6:d3:ee:bc:88:e1:5a:26:35:94:59:a4:62:
15:11:42:56:b8:8e:fc:aa:c3:de:29:4b:64:b2:b2:
87:de:6c:e2:73:09:c4:e9:ce:43:0e:47:b2:2d:80:
7d:1e:61:a2:8f:95:06:22:08:24:2e:09:03:a6:0c:
5d:72:63:84:7a:a6:90:90:f1:de:77:7c:2a:c1:49:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:FA:6E:4D:83:70:BB:5A:BF:A0:A0:56:48:5E:C5:AB:72:10:99
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0f:5f:b5:c5:48:1c:47:bb:db:57:03:4e:d3:65:cf:91:ed:
9c:57:a6:df:dc:51:7d:68:cb:05:0d:e6:f0:ce:93:f9:d2:55:
ee:48:03:c9:2c:1b:0d:32:c3:e0:89:28:ad:ab:f9:9e:f6:38:
2a:df:28:e8:04:ee:ce:cd:e2:a2:3c:61:43:0b:cc:1f:5c:74:
84:9e:bf:5f:75:7c:27:03:e1:3b:cd:0c:b8:69:8e:f5:25:44:
71:27:bb:1f:6a:2b:c0:55:55:bb:f8:d8:26:e2:2f:d1:e8:14:
0f:bb:44:01:92:05:c7:6d:12:da:5b:dc:48:31:c7:9c:3b:83:
97:84:86:9f:07:43:1a:50:f9:f2:ef:e5:d1:04:aa:1d:96:04:
3d:47:97:ea:87:6f:72:e7:46:80:8a:88:85:2c:9d:40:3a:e4:
9e:e7:2d:17:4a:c5:29:6c:7f:63:7c:3c:66:59:df:66:34:e8:
3b:6f:3b:f1:91:0f:33:05:00:e9:57:11:30:f7:f6:19:f7:d2:
34:c3:04:b7:36:3a:0a:e7:35:4c:d6:0b:8f:65:3b:e1:2d:fa:
82:f0:6f:d9:01:4e:9d:d0:0a:83:69:c5:58:19:6d:8e:57:1f:
7b:cb:28:3a:0b:39:40:e5:c1:a4:ad:c8:35:38:91:79:98:35:
12:a4:9b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:03 2026 by rpki-client