Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: uul8FiiSgXau3SZbKe8jRL7DR+9DNiZ9B5elWEhl0Kw=
Subject key identifier: CA:F5:5F:57:98:54:99:8B:57:35:32:0D:0A:5F:FC:16:27:EF:EF:EB
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 019D29614BCBAB5B96F2B1AC001F29849EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 165A
Signing time: Thu 26 Mar 2026 09:02:15 +0000
Manifest this update: Thu 26 Mar 2026 09:02:15 +0000
Manifest next update: Fri 27 Mar 2026 09:02:15 +0000
Files and hashes: 1: APVxqKMvg7zk562Taso55LCZ43Y.roa (hash: K7kMK7uyiBjgsAZ37sxGRIvYHh9oEyISagZHLGa6SXw=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: 1zbnyf7x7UrmwhyyBWqRQ4g+MfomFImC5z5WFWJE3xY=)
3: UuN7zLVfjwqep8H3gp4uYYBDSlA.roa (hash: c5uP03tTxyD1867dntdszqVBZixLRyo48/FXuLG4BU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:4b:cb:ab:5b:96:f2:b1:ac:00:1f:29:84:9e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Mar 26 09:02:15 2026 GMT
Not After : Mar 27 09:02:15 2026 GMT
Subject: CN=caf55f579854998b5735320d0a5ffc1627efefeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:d5:31:b8:75:9d:af:d5:37:e8:2b:88:46:
da:58:07:de:c5:ec:30:1c:fb:5d:70:b4:c8:c4:ad:
0f:40:be:32:1b:79:93:c4:e3:8e:f8:d5:d1:84:12:
7d:b4:17:57:a6:13:de:f6:24:f6:ff:77:92:bc:b0:
4c:c5:d0:2b:65:12:b3:87:d4:c2:4b:c9:9b:99:6f:
3e:fa:c4:9c:b8:68:50:97:ff:27:99:3c:32:3f:e9:
a7:69:4e:b8:66:00:08:3f:50:4f:8e:0e:f7:02:62:
16:c3:1d:46:b7:6e:67:15:96:5c:f0:d2:29:6e:2e:
96:84:9a:40:92:42:02:35:67:b0:4c:4e:df:d1:e9:
2a:2c:bd:79:b9:70:0c:41:ae:f8:36:a5:42:da:8c:
bc:13:d2:71:0f:15:b0:66:52:20:c7:04:b8:99:87:
6b:39:a1:8b:17:ba:e4:38:a1:67:21:1d:8c:af:c3:
cb:7b:b0:08:2a:78:e8:2c:26:b0:37:41:43:7a:57:
a7:81:1e:b9:02:16:4f:eb:69:f2:17:6f:bc:3b:5e:
57:4f:0d:10:5f:a4:94:f8:ba:92:77:ca:c8:c9:33:
1f:fc:58:60:50:4e:f7:dd:4d:31:25:d8:7c:42:ce:
df:a6:d9:1f:c4:7c:86:77:d9:34:6d:f9:ad:24:39:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:5F:57:98:54:99:8B:57:35:32:0D:0A:5F:FC:16:27:EF:EF:EB
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cb:ab:53:f9:d9:5f:9c:38:ef:d4:c9:9b:0d:6c:92:ea:34:
15:fe:bc:87:cd:62:47:20:df:01:59:64:51:bb:70:ec:a2:c0:
6a:e5:0b:d6:b0:de:15:61:12:a0:e7:10:43:bf:ab:69:a1:8f:
8a:6d:0e:03:fd:f0:c8:bf:c1:58:15:b2:a1:0f:52:42:84:71:
a9:8d:5e:c5:b0:2e:ca:12:c9:0d:c7:09:55:56:07:e8:20:d7:
c6:ad:3b:d8:db:53:b7:75:b7:f0:2a:14:0e:66:ac:63:44:3d:
8f:cb:8d:b9:1c:d3:7b:38:2e:a3:6f:32:f5:3c:bc:87:5b:7f:
c8:5c:22:b4:8f:51:32:87:b6:2d:15:bb:a4:e6:f8:85:05:59:
de:6d:cb:52:97:11:48:fc:e9:54:af:99:ae:2c:af:48:2e:88:
0a:d2:10:ed:df:98:0e:50:da:41:88:a1:75:21:e6:84:ee:84:
c5:45:ad:bd:6e:4a:d7:8e:d6:ec:6b:03:ac:cc:e2:35:6e:23:
b0:7b:29:5e:b6:58:e3:25:7b:d8:2d:b2:2c:82:5b:12:5e:93:
36:10:4d:0e:39:91:f6:ee:9a:a4:53:dc:94:f7:70:8a:77:2b:
31:44:0c:cb:06:db:98:0c:a6:6a:df:da:26:5d:b8:97:9d:70:
ba:27:5e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:49:19 2026 by rpki-client