Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier: EDIJwCdRLIuSeo8bcCCgB8SBsIse8XWWp2NEEcKybn8=
Subject key identifier: FD:F3:A2:54:4B:BC:C2:A8:EF:DC:B3:52:A3:01:10:F4:08:24:48:C0
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 019D2960A3B0D0F04F8B27DBB81C3AD81DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number: 1710
Signing time: Thu 26 Mar 2026 09:01:32 +0000
Manifest this update: Thu 26 Mar 2026 09:01:32 +0000
Manifest next update: Fri 27 Mar 2026 09:01:32 +0000
Files and hashes: 1: 6E7-9daevK2MkkP9J_irNaIbJPM.roa (hash: nqBQWE4qRj5lWqiwp2QfZYIRYl9NsKmCq2MDZGildvE=)
2: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: Rsj0QLbsPu3xLVXNwXJ6tvuPjG0oIdLZ3E8Wp+SbYLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:a3:b0:d0:f0:4f:8b:27:db:b8:1c:3a:d8:1d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Mar 26 09:01:32 2026 GMT
Not After : Mar 27 09:01:32 2026 GMT
Subject: CN=fdf3a2544bbcc2a8efdcb352a30110f4082448c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:30:df:2b:80:6d:18:f3:e0:48:79:5e:19:
9a:19:38:c1:82:ce:06:d3:6b:b7:6d:b3:5f:15:6a:
55:4f:81:5f:2a:32:4c:b8:a8:a3:2b:fb:20:26:27:
f2:80:71:1f:63:ee:21:51:ae:c7:5e:f0:57:89:1e:
eb:d3:1d:d4:cc:6a:92:6b:a6:cf:f5:b7:81:b6:5c:
ba:a4:c4:1b:cd:e7:55:e7:bf:f2:7f:34:9f:cd:15:
93:d0:fd:70:f7:2f:2c:17:28:70:6d:5c:44:69:35:
21:01:90:dd:60:02:61:70:f3:0f:59:28:e9:e4:35:
05:e3:10:d3:21:1d:5a:b5:ac:66:61:e9:41:db:9a:
47:84:7c:79:cc:a5:f0:9c:3e:b1:19:3e:a2:bc:64:
f3:62:f3:19:9f:b2:01:af:fd:c3:31:9d:25:dd:de:
f1:71:c8:08:c5:4a:32:8b:71:01:9a:a8:21:fc:9e:
1b:8b:51:ac:21:a3:18:ee:76:d0:8b:da:21:73:d5:
c3:e4:6c:d1:eb:28:ea:56:1d:8e:80:2c:f9:d4:22:
89:ec:16:c7:e7:e3:60:10:9e:89:88:29:7f:b4:67:
8d:30:d9:67:7b:77:da:f6:c8:8a:43:a6:1a:fc:3a:
f9:42:57:44:4b:73:f8:f5:08:7c:7b:0b:76:eb:0c:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F3:A2:54:4B:BC:C2:A8:EF:DC:B3:52:A3:01:10:F4:08:24:48:C0
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e9:c0:fa:cd:2b:25:db:be:62:d3:a8:be:ee:2b:99:04:9b:
a9:df:83:3b:c9:9d:08:13:d1:8e:fe:da:68:6e:72:84:ee:95:
48:c0:ed:5c:fa:80:b3:58:64:ad:fe:69:0b:8c:c9:3f:93:ab:
d4:0b:d8:43:43:ab:35:ac:14:86:82:26:22:64:f7:f7:d4:e9:
8d:96:d0:64:85:01:9f:cc:b0:8b:8b:c8:ce:15:70:59:ec:81:
79:3d:cc:4e:20:67:59:06:45:8d:47:00:1a:4b:a5:ce:e3:51:
88:36:d8:f5:3f:ea:52:74:b1:55:d3:ab:ba:cb:69:16:e1:dc:
34:8d:b3:44:b0:7d:e5:96:93:ad:5d:2a:6f:ef:52:e2:35:9d:
7d:90:1a:51:a9:f7:0f:b1:52:50:3c:3f:f1:92:34:9e:d0:55:
75:c4:f9:25:b4:6f:7f:c6:38:2c:03:d1:9f:95:5c:7f:06:a9:
91:cf:32:16:64:29:42:ab:92:1b:33:e2:71:50:e4:82:2d:16:
38:6f:92:34:12:4a:32:46:5f:eb:38:d1:c2:31:1a:a0:ec:12:
70:43:d8:14:d5:a0:d4:cd:2f:eb:be:a3:95:5c:bc:17:dd:ab:
ad:37:25:4e:31:80:dc:ab:c1:19:d6:8e:c5:15:1f:e9:0e:d3:
b4:2d:6c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:24 2026 by rpki-client