Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: 79Ut9sFYJbdRGyXagnrZmhEKoj3wQ19CPa0h1fIJEUM=
Subject key identifier: A1:C1:3A:93:B0:3E:F2:B7:38:CA:B8:AD:DF:6F:17:FF:2B:60:FD:91
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019D2B4E6DF2A7A2D2228E36E4983BA633B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0B6A
Signing time: Thu 26 Mar 2026 18:00:53 +0000
Manifest this update: Thu 26 Mar 2026 18:00:53 +0000
Manifest next update: Fri 27 Mar 2026 18:00:53 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: mGeG7kKnBGstWqoRM7POvKvjUuodbQToRN2MSbFfOnY=)
2: jS-v8sE_nNDS2wE29fkwjQ61v88.roa (hash: Flk+FfCfxIzDWzTQRWNpdyzzfWx1artWupYvhrPXQYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:6d:f2:a7:a2:d2:22:8e:36:e4:98:3b:a6:33:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Mar 26 18:00:53 2026 GMT
Not After : Mar 27 18:00:53 2026 GMT
Subject: CN=a1c13a93b03ef2b738cab8addf6f17ff2b60fd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:9c:40:45:fa:f5:b4:ed:65:29:fd:3f:9d:
c8:3a:a7:72:60:05:9c:08:a3:9d:b8:ae:dd:97:e0:
d1:b5:99:bd:b6:13:94:ff:40:12:48:8a:ca:3c:cc:
5a:12:d7:81:c4:93:f8:ce:75:fa:5d:f4:f8:dd:31:
c8:c8:93:7a:b4:fb:ea:15:2a:04:6a:14:92:0d:65:
d6:11:0a:79:be:41:c6:4f:d0:71:44:f8:63:8e:ba:
a7:5f:aa:e6:c7:c5:e7:37:e4:80:55:ca:49:c2:39:
17:ad:7a:6b:de:c1:83:b7:95:67:ef:60:6a:c8:ee:
ec:2d:b5:a2:05:4a:da:60:e4:36:d2:72:16:de:3f:
4f:a4:4a:52:03:b9:6b:b3:8b:8e:54:e8:bd:9b:4e:
c7:b3:68:da:f8:39:cc:75:60:e9:57:51:2a:83:60:
1f:1b:e4:41:cb:eb:29:45:a3:d1:1c:b0:7e:fa:86:
2c:09:4f:01:5c:ba:4d:2a:ee:a4:c4:90:fc:8c:d2:
c9:f5:a1:c5:34:42:dc:1f:26:bd:43:44:c5:da:28:
fa:e5:d9:dc:fd:cc:15:aa:dc:49:6d:42:ee:2d:e7:
fe:2b:1b:23:25:b1:df:5d:50:e7:98:ac:28:6e:5b:
56:04:35:38:e2:57:2b:b1:ca:24:38:03:76:3d:a4:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C1:3A:93:B0:3E:F2:B7:38:CA:B8:AD:DF:6F:17:FF:2B:60:FD:91
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:06:3e:4b:5d:eb:1e:6f:8f:25:c8:2c:1b:31:32:37:f9:5f:
39:6b:1a:75:77:ba:a9:c4:c4:56:7d:6f:a9:cf:d5:72:80:ac:
dd:f5:24:19:0a:1d:73:6b:dd:00:40:ce:1d:a5:99:bd:4b:9d:
e2:3b:04:41:24:75:25:e5:68:d4:85:dd:f6:22:35:41:ee:8a:
cf:a0:df:f6:c0:26:83:fb:ed:d9:30:b7:55:7d:12:d7:43:ef:
b2:71:f7:36:0c:e2:21:5d:0e:ff:88:5e:7c:aa:ff:f9:0b:02:
7b:1e:53:f6:2f:25:3e:d3:11:48:ae:9e:e3:36:6e:d6:ae:30:
e8:9e:e7:99:40:4e:e0:b8:03:c0:83:59:2a:21:61:1c:69:04:
65:80:9a:19:f8:bc:5d:4e:c6:94:49:fc:f2:49:7a:7a:54:e4:
d0:a8:df:42:a8:63:24:d8:1a:f9:16:c1:8a:97:9d:7f:89:73:
2d:b2:ee:3d:75:10:e7:db:59:40:f1:89:4b:97:c9:4d:2b:9e:
36:a6:98:e5:d2:86:0b:04:c8:c7:fd:1d:66:a9:79:bd:be:c2:
62:16:ea:5b:4a:d1:e0:6d:72:6c:2e:36:39:a9:a8:ec:5f:78:
5a:fb:49:fa:8a:90:82:0e:1f:1c:3c:5a:3a:1f:6c:4f:47:a3:
15:d7:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:48 2026 by rpki-client