Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: ox+RvSdEErp64aVznfZQ9P1xpEFANMjEaYEUwOiIbI4=
Subject key identifier: 29:8E:C4:D1:BE:9D:92:42:90:09:A7:FE:35:4C:77:50:63:E6:84:84
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019D29291C0CD513E58CAEBBF61D16E4C219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 08:00:53 +0000
Manifest this update: Thu 26 Mar 2026 08:00:53 +0000
Manifest next update: Fri 27 Mar 2026 08:00:53 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: 7kyu52tAxH3qxvidSBXR59XXiKgU8cR7OuISyHPZgD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1c:0c:d5:13:e5:8c:ae:bb:f6:1d:16:e4:c2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Mar 26 08:00:53 2026 GMT
Not After : Mar 27 08:00:53 2026 GMT
Subject: CN=298ec4d1be9d92429009a7fe354c775063e68484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:dd:1c:e1:75:17:62:86:47:d4:01:3b:5d:
63:10:81:7e:39:a6:a9:02:1a:51:74:39:5e:ab:09:
3b:d2:4d:7e:04:ff:fe:8e:be:79:16:d2:19:77:e8:
12:ae:19:b9:90:f9:cb:77:d6:94:fe:4c:f9:ae:39:
42:52:7f:9a:1d:81:71:8c:b7:92:6a:88:49:f0:4c:
ea:b2:67:4b:b0:c3:8a:72:78:88:7e:41:e5:ca:6c:
56:2f:58:35:45:2a:14:92:60:8a:ef:a1:92:30:51:
cd:c2:e1:9b:1c:3d:34:a4:81:03:47:fd:5e:3d:1e:
98:b3:40:20:65:34:50:62:c2:df:2f:53:87:2a:7b:
46:08:52:ff:9a:20:8d:79:68:a9:68:48:2e:5c:b6:
3c:c2:93:be:d7:52:33:6a:d3:b8:64:53:88:05:35:
c8:a0:ca:45:e6:6a:c5:2e:c3:d8:bb:a8:ea:49:d9:
65:81:01:72:de:11:88:0f:e2:42:44:17:9f:aa:35:
8f:26:41:b5:71:fe:7d:de:65:f3:96:47:4e:c6:d4:
57:b1:f2:be:34:b9:3f:47:f7:50:2d:2c:10:bf:8c:
a7:b1:3c:92:3f:28:cf:9d:2c:26:4c:63:9b:ae:21:
4e:5b:94:b3:e7:7a:a6:71:3e:a2:e1:4b:dc:47:ac:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:C4:D1:BE:9D:92:42:90:09:A7:FE:35:4C:77:50:63:E6:84:84
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e8:cd:f3:f6:b2:7c:d6:e9:ae:bf:0b:eb:60:3e:08:53:ed:
83:89:85:4f:31:8c:47:8e:be:2d:4c:c6:ab:0f:34:d7:09:31:
39:bf:8b:7e:b7:1c:63:e5:25:85:08:76:1e:6f:42:cd:d9:e5:
d8:35:e8:51:f7:94:73:24:35:22:81:ad:71:70:d7:d2:8b:85:
01:7c:f8:c6:01:2a:4b:55:9f:44:32:02:54:42:e3:e6:85:99:
a3:88:9c:bf:b8:92:9c:fd:fb:04:3a:e5:5e:01:43:ed:82:a3:
84:9e:80:35:37:8f:38:ce:bc:4a:8d:2c:37:51:c9:9b:8a:3f:
aa:c6:2d:e4:8e:93:52:02:4b:92:05:a7:ad:3b:65:3a:ce:76:
e0:69:7f:07:68:99:86:8b:12:89:f9:71:e5:cf:c1:1a:16:c1:
ac:91:af:89:40:8e:97:b8:81:6d:78:cb:f9:04:e6:62:b8:04:
f0:cb:41:27:7e:d9:d7:a5:21:50:55:2a:91:64:ce:14:76:e6:
f8:cb:b0:e0:e3:25:12:6b:15:1c:09:08:84:ee:08:bf:3f:b6:
ee:12:0f:5a:70:a6:8c:5b:ae:27:92:7e:95:53:22:32:e1:ff:
81:93:12:31:18:1c:35:5c:f3:23:2e:95:35:dc:03:80:a9:58:
99:cb:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:15 2026 by rpki-client