Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: AH4rjvlyheWyZ+w0U/j4SnJC05A9GYIQdSrOoAFPcLo=
Subject key identifier: 79:44:36:1A:09:F1:5C:0C:60:41:6B:06:C9:29:C5:21:16:1C:00:67
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 019D273AE108FF178065339A61E5D5103527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 115F
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: LKLzayTx02NKt4IYLkBu7eAzfMQ.roa (hash: mj+HEmIxR6MSV3YLRBJoyixi3pfyWUn/3aiy0wIfWXE=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: zRObCZQDWcGXX1yVKf5bdTS+i0v83HYaNvsf1LQRXK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e1:08:ff:17:80:65:33:9a:61:e5:d5:10:35:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=7944361a09f15c0c60416b06c929c521161c0067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:08:e2:d0:01:03:9c:8a:09:f0:7a:bc:0f:
6c:bc:c8:25:59:2f:64:f3:36:53:97:46:82:11:c0:
53:2b:2d:cb:47:2a:96:8c:b7:25:c7:da:f0:80:ce:
50:99:d3:96:e4:a3:6c:a4:27:63:aa:02:3e:77:f3:
f1:5b:74:4b:a0:cd:fb:0f:ec:2e:7d:69:21:e5:20:
99:1d:ed:c2:8a:ff:00:3b:a3:5a:20:fc:41:4d:f5:
76:57:02:46:7d:6c:36:dd:13:92:ec:a4:f6:1c:21:
e5:f0:93:2e:d2:6d:08:5b:4d:41:7f:b3:f7:91:2b:
82:35:c8:fd:d8:70:da:c6:d3:84:92:e0:86:56:b3:
da:10:20:c6:31:23:8b:cc:ce:64:63:46:08:4d:47:
c5:ba:07:71:b0:06:7e:ff:f7:b6:4a:63:b9:e9:b5:
91:6c:b6:9b:5a:d8:11:be:c6:81:eb:68:da:c9:d1:
82:04:1c:e6:1b:b5:b2:f9:6a:df:d4:c5:25:50:1c:
a0:9e:7b:62:9c:cf:bc:de:be:b7:98:43:d4:a6:fb:
48:da:52:da:9d:a8:06:38:47:7f:d5:e7:08:f6:92:
3d:e8:53:af:d3:94:f6:b1:14:c8:1a:53:6f:28:a2:
2f:61:de:d7:5e:4a:71:35:ce:4f:dc:8b:64:c3:44:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:36:1A:09:F1:5C:0C:60:41:6B:06:C9:29:C5:21:16:1C:00:67
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:77:2e:58:87:d9:49:d0:1f:93:bb:fd:ea:06:84:22:13:30:
7d:3b:6a:c1:c6:1d:68:a4:58:24:60:a2:5e:a1:61:41:53:79:
be:ae:1a:26:83:bb:6b:13:d5:2a:fc:d7:05:5e:5c:5f:d7:c2:
c4:57:84:86:16:46:d3:ff:f3:93:c0:2c:bc:ed:a8:df:9f:3b:
80:ca:55:9e:2a:00:b8:1f:e7:51:33:28:68:dc:61:63:01:89:
9d:12:79:98:3c:0f:e3:43:99:15:a4:ce:36:58:55:dd:f5:d1:
3d:e6:53:9c:2c:e1:1c:5d:bf:cb:ea:a4:81:f5:7a:5a:1f:00:
e5:d9:fd:49:1c:40:2b:fa:b1:ed:75:ac:d6:24:0f:c8:14:f7:
95:42:a9:03:ea:6b:66:fb:b6:5e:6e:8e:2a:ce:86:e1:da:95:
d4:17:7a:1c:f9:8e:64:2e:dc:7f:6e:b9:a9:98:4c:b7:df:e7:
90:4f:7f:2e:41:32:f8:9e:9b:63:f0:15:29:72:d3:0f:30:94:
de:04:54:b3:17:ee:b9:42:98:c3:63:25:67:7d:02:bd:72:88:
a5:f3:b5:8a:73:a8:0b:de:26:7a:3f:ba:5e:b9:f3:2b:55:ec:
d1:7b:8f:11:72:97:4b:9c:9c:e1:4f:4c:78:50:49:84:9d:5d:
cb:a9:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:23 2026 by rpki-client