Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: GCNhMTYD+AQfE6Ub/NbSk/PIMD5utxuyj9JNoXC3oWs=
Subject key identifier: 5B:CF:4C:DF:53:85:DE:26:68:99:FF:5D:2F:59:AD:23:FC:D5:11:8D
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 019D29607B84BBB446F6416C361F4090175C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:21 +0000
Manifest this update: Thu 26 Mar 2026 09:01:21 +0000
Manifest next update: Fri 27 Mar 2026 09:01:21 +0000
Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: aCn+3bSMS3Cxl/ol4dKfZXm1RDO7buEsQV4buuSvS78=)
2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7b:84:bb:b4:46:f6:41:6c:36:1f:40:90:17:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Mar 26 09:01:21 2026 GMT
Not After : Mar 27 09:01:21 2026 GMT
Subject: CN=5bcf4cdf5385de266899ff5d2f59ad23fcd5118d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:ad:48:b6:00:1d:6b:0d:98:75:f2:d8:0a:
f5:71:25:a1:af:5a:26:a0:c1:41:2b:22:29:34:35:
9c:d7:a6:8b:20:7a:9b:46:23:1d:12:46:7f:8b:ee:
e5:46:e2:9b:01:bb:51:2e:d7:04:53:74:99:c5:c1:
b6:3c:20:5c:a7:51:b0:4d:b0:2f:7b:7e:a4:59:9b:
de:98:19:4c:ee:36:4a:be:df:8a:d9:65:68:e8:1b:
09:43:32:4b:0f:d6:a4:a3:41:45:b0:cb:db:31:9b:
39:9a:a3:a6:da:f2:5f:ef:bc:27:6a:6a:42:21:7f:
e0:f0:4a:3a:31:3b:95:60:11:64:24:ac:46:ea:30:
51:63:d0:a7:8b:89:5b:44:52:ba:fd:18:1c:04:69:
df:b1:d1:b7:f3:e8:63:3d:ff:f6:08:03:0c:d9:f3:
a5:fa:1a:af:d7:0e:4a:f1:6b:81:eb:7d:96:fd:42:
3d:cb:95:db:8d:5b:13:5e:15:9a:c5:74:e0:07:fa:
86:d5:af:bb:97:8d:94:09:1f:43:12:15:37:44:bb:
fb:a5:18:2c:7d:28:91:74:cd:ce:8e:5f:98:bc:e7:
be:a2:d8:16:95:c4:b2:d6:d7:7e:9e:cf:90:29:06:
96:78:58:7c:ca:0a:45:17:3c:eb:76:db:1f:22:05:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:4C:DF:53:85:DE:26:68:99:FF:5D:2F:59:AD:23:FC:D5:11:8D
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2d:29:ec:a3:a9:9e:bb:b8:fa:84:6d:4e:4c:a3:7b:b6:b8:
ef:0b:2a:1c:10:be:d6:ed:5b:d6:da:5b:33:7c:c3:78:d9:7b:
93:7d:0f:0b:75:78:0b:d8:b6:61:6d:55:68:64:b8:c6:24:02:
0b:f2:0c:aa:34:0f:f5:d7:c5:3e:63:e2:1c:fc:65:64:f8:73:
b9:10:0e:9e:1b:89:54:8e:39:68:0d:56:76:8a:d8:1e:0d:a6:
02:98:41:8a:45:f1:c1:a3:06:21:7b:e4:46:a5:fb:fd:da:d6:
59:3d:e9:1f:5a:59:31:a5:07:14:cd:d7:fc:1c:2a:fd:86:6f:
bd:43:6b:43:fd:7c:4c:0b:d1:d3:8b:4e:8f:a6:5f:73:3e:26:
2f:09:ab:c8:6c:67:86:ab:20:ee:7e:48:84:d5:3c:96:f5:9a:
9f:54:41:29:20:49:09:49:b1:8b:76:17:12:ec:ef:06:b2:44:
44:7d:a7:f6:8f:c5:73:e2:5e:4f:ca:1d:57:98:d1:17:18:73:
51:0b:50:82:5b:72:ff:22:75:96:f0:ef:ec:81:1f:cf:47:b9:
b1:05:0f:e1:c5:89:36:a9:dc:e5:86:9e:e6:e2:e5:43:d4:8d:
fc:7d:f6:95:39:1d:c6:d1:0d:ef:27:2d:71:7f:96:12:0d:8f:
17:5f:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:47 2026 by rpki-client