Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: tCKkxAhvIXCRsyLH6uW23TJMWwnAYuMuoc9I9B862CU=
Subject key identifier: F2:5D:03:18:AF:28:C7:1A:27:D3:B0:5B:70:78:55:C6:03:F7:16:B6
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019D2771F17530E82DB0F3486A8A3CC4803D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 161B
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: p0hZQCIViJIp4yMRmDl+kutq99Fzcsh9XyLjxK/Xp1w=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f1:75:30:e8:2d:b0:f3:48:6a:8a:3c:c4:80:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=f25d0318af28c71a27d3b05b707855c603f716b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:2b:fe:a7:14:3c:a1:9e:70:65:a4:6b:16:
fa:e0:5d:35:58:54:db:69:98:97:04:ca:48:71:76:
d7:07:07:74:f1:08:bd:ff:3b:2a:07:9e:04:b8:4e:
03:e1:43:89:e2:a0:bd:a6:bc:d5:16:9b:26:c7:b9:
18:74:9f:e4:f6:49:b2:55:94:ee:b7:ba:e8:04:12:
0e:c3:d0:ec:26:7b:7b:b3:0c:1e:b1:a5:ef:e2:f1:
9c:58:73:58:eb:eb:1b:49:39:c8:8b:bd:01:e2:f6:
02:4b:0f:24:7a:c1:a1:3d:2d:c5:c4:8b:6c:f3:3c:
d3:d1:7e:59:b5:7c:a5:6a:a5:9a:9c:43:1e:8e:bc:
c5:3f:db:5c:79:11:56:7d:40:95:2c:4a:15:39:96:
71:90:b3:65:85:96:88:ab:ef:14:09:b7:d7:ef:e2:
36:78:24:bb:40:51:a8:90:dc:61:56:4d:61:44:ae:
66:e5:cc:19:fa:53:06:da:c4:8f:11:86:df:e7:b2:
e2:14:36:f8:5f:2c:77:71:7e:05:62:03:dd:2a:0f:
74:09:4f:1e:3c:d4:34:da:b7:c4:8a:4e:70:04:cf:
b2:55:d7:f2:52:bb:be:a8:7d:41:65:dc:f9:b5:1b:
a5:30:c5:6f:86:98:76:d3:45:af:c3:56:c6:70:1b:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:03:18:AF:28:C7:1A:27:D3:B0:5B:70:78:55:C6:03:F7:16:B6
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:03:7c:5c:ec:d7:ec:a3:f9:20:fc:79:5d:c8:40:6c:8a:b4:
06:44:7d:90:b4:58:67:7f:cb:a0:1c:21:33:e7:5c:89:03:b2:
5b:39:ac:4c:d3:23:7d:90:3b:d0:f9:a7:f6:47:96:98:d6:31:
4e:42:d7:e7:e6:99:cb:c7:15:f2:81:5e:d4:88:7d:93:15:bd:
ac:a9:f8:f9:16:2d:77:df:ef:e4:71:d9:90:7f:e8:19:5f:63:
4d:aa:49:7b:3d:27:46:72:42:ce:c2:a6:3b:9c:50:93:1d:f9:
57:7c:51:d3:4a:10:16:66:52:b0:ad:96:9e:67:54:a6:52:29:
2f:77:60:02:10:39:28:ea:33:90:af:bd:f7:60:19:0d:e6:0c:
04:3f:6c:5b:28:b1:4f:1e:71:fc:7c:bb:91:5a:9c:04:7d:cc:
d6:79:e2:56:ec:85:20:34:2d:b8:12:d3:b7:5b:58:13:7e:83:
6a:8a:79:b7:c4:38:19:d7:94:cb:5b:a2:18:fd:a4:56:39:34:
67:7f:1d:1f:ec:97:27:ea:39:fc:ad:46:cb:13:4c:73:6e:cb:
ba:20:20:15:18:9a:c7:6f:21:c7:b0:73:31:ab:f9:b4:d1:09:
31:37:46:df:05:c6:ae:6e:0c:4b:c6:a1:5f:77:12:96:ad:3e:
3f:84:44:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:15 2026 by rpki-client