Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: YtmS4GUO2+HJp42qAIrlHbsYhf0blGz8ObBE1VNR19M=
Subject key identifier: 80:EA:72:4F:CA:B1:F9:51:07:8B:96:FB:98:36:C5:0B:27:AE:67:45
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 019D29973E161EECA421613511318FC8A581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 143E
Signing time: Thu 26 Mar 2026 10:01:10 +0000
Manifest this update: Thu 26 Mar 2026 10:01:10 +0000
Manifest next update: Fri 27 Mar 2026 10:01:10 +0000
Files and hashes: 1: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: 3jcb+aMqhirWt9bPsKdta7ddwvaFbJHe8DXjmo8REPY=)
2: S9AoFvnjp3ZfWPaRfcjLBtxjKJw.roa (hash: KcKMRfjEJimpg3wHDTAgPJLLtBV5jQ0bUr2ldkt0t+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:3e:16:1e:ec:a4:21:61:35:11:31:8f:c8:a5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Mar 26 10:01:10 2026 GMT
Not After : Mar 27 10:01:10 2026 GMT
Subject: CN=80ea724fcab1f951078b96fb9836c50b27ae6745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:cf:4f:b3:c3:e8:83:a4:a7:73:9c:04:b7:
f8:c1:e3:9f:52:da:5e:6e:e4:b1:64:34:ac:f4:76:
4e:f0:9f:f6:55:d9:d7:f4:d0:46:b4:d5:a8:41:a2:
0f:f5:42:e2:66:4e:a2:3c:56:1a:2d:a1:18:c6:08:
26:97:68:b1:20:dc:3b:5f:fe:7a:09:41:9a:b6:27:
63:3c:ba:d4:1c:53:ab:0b:a0:0e:ea:cf:0b:de:73:
89:eb:3d:36:89:41:df:20:c0:4c:f9:97:28:f0:b1:
8f:dd:96:0b:d8:05:0b:9e:2c:5b:d9:30:c1:ec:b5:
62:8c:7f:15:62:9b:c6:e4:5b:fa:7d:fb:0f:f7:92:
1b:b5:2e:5f:aa:86:49:21:23:55:b0:a8:ed:0c:a0:
69:ea:d5:80:c7:f4:0c:d3:9d:af:a3:ca:b7:4b:b6:
35:d1:80:70:64:37:2d:e0:a8:d4:7c:99:c8:0d:a3:
e3:88:da:e4:50:54:30:cf:cc:7f:6d:73:2e:b5:ba:
6d:9f:c9:21:27:6a:c8:3f:38:51:9c:9e:2b:f5:69:
20:f9:6c:50:19:a8:c7:5a:9f:c1:a1:e1:6e:63:03:
4d:62:bc:6a:42:df:7c:b7:83:55:97:8f:f8:8d:e1:
5b:90:c4:26:8a:c2:9d:80:f4:1a:80:44:c4:c5:19:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EA:72:4F:CA:B1:F9:51:07:8B:96:FB:98:36:C5:0B:27:AE:67:45
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b8:11:e5:96:0c:05:64:2c:49:59:6e:e9:f8:df:51:cc:32:
93:d6:90:6f:c9:62:57:9d:90:8d:33:33:4a:b4:46:76:bf:9b:
2d:fb:85:d6:1d:17:4f:8f:33:31:a9:5e:37:b8:9d:a7:b6:d2:
3c:01:e5:43:1c:95:44:fe:83:44:33:15:e7:cc:6a:f4:38:2b:
9b:12:2c:cb:c9:d3:86:da:4b:fd:e2:9b:cd:55:58:00:d5:64:
69:15:5c:cd:f3:8a:7e:21:c4:96:fe:ec:91:ee:05:be:6d:f0:
dd:c6:9b:42:ea:5b:58:a8:89:0f:f0:64:0c:a6:a4:95:76:1d:
4f:af:24:e9:76:3e:6b:7e:06:fa:8d:34:06:73:de:f0:a3:b8:
c3:18:2f:5e:60:07:ee:1b:b2:83:6a:94:39:9b:52:53:07:de:
7d:f3:6c:ee:59:e7:9d:22:95:b3:c3:ec:72:e8:8f:f5:2e:a3:
a0:e1:12:f1:ae:06:10:24:c9:c2:ee:e5:6b:b5:90:03:02:86:
35:de:ad:d0:2f:17:21:3f:76:bc:d6:00:2d:22:fc:fd:fd:2d:
ae:de:e7:e2:bf:5b:79:4e:c4:26:13:c7:7d:57:cd:00:65:ce:
83:a1:71:c2:9d:ef:af:e6:7a:b6:e8:d3:50:a5:73:3e:0f:8a:
0d:ff:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:20 2026 by rpki-client