Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: TGtOHYjdg3cKdiutK2DdXwD4ocYh/hZEEeIKQLJQ/80=
Subject key identifier: 34:23:E2:E9:87:E4:F4:A8:6A:05:45:9F:2E:D5:B5:17:53:BE:BF:55
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019D26289EE15AF3830DF2274B5C815EAC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 158C
Signing time: Wed 25 Mar 2026 18:01:29 +0000
Manifest this update: Wed 25 Mar 2026 18:01:29 +0000
Manifest next update: Thu 26 Mar 2026 18:01:29 +0000
Files and hashes: 1: 7AZcdK-2iSMlF0mV6xbUMSO3Xnw.roa (hash: G5rGJtONXIdV22l8uGfiFrqq42pAnIm3ZbpijKWWsuw=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: GIJrwXNrIqgvcJ9JTiATw6QovOWapcV3JE7249Y0mPo=)
3: SED4pOneSK1Nz4GXJ8sxeamW4bA.roa (hash: rv2mx30pNaTbk2/jVNoTsekRApJk2qpOrI2G/ZbcQfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:9e:e1:5a:f3:83:0d:f2:27:4b:5c:81:5e:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Mar 25 18:01:29 2026 GMT
Not After : Mar 26 18:01:29 2026 GMT
Subject: CN=3423e2e987e4f4a86a05459f2ed5b51753bebf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:6d:25:c8:db:ca:c4:57:c7:81:cc:9b:25:
3f:17:8d:d9:fb:73:a5:c7:2a:e7:e5:97:97:71:0e:
75:f5:73:a3:ab:8b:b7:41:f2:f1:7c:9c:1c:61:0f:
80:07:02:54:9b:6d:4f:28:10:09:9a:2f:e0:ef:0c:
c2:80:5a:72:ab:e1:c9:c9:be:68:41:3c:de:39:dd:
cd:af:05:25:58:76:3e:06:5f:73:13:1a:ca:db:9a:
60:46:92:f2:1d:26:5c:55:b9:79:41:ac:33:40:98:
0b:e1:7e:23:c9:24:c7:1e:77:f9:98:d7:a7:bf:16:
31:3d:6a:92:f1:0f:3f:bf:06:79:e2:bb:09:35:4b:
fa:35:a7:6c:ed:68:01:60:45:f3:d8:66:fc:8f:78:
46:69:92:f2:e2:40:c4:40:13:64:2e:38:8c:09:7c:
ad:66:50:f4:dd:00:98:8f:e0:ed:55:94:9a:58:5e:
46:7d:14:d6:8c:ac:07:d7:5d:aa:d8:7f:08:35:1f:
4a:34:fb:62:14:22:83:b9:6b:40:7b:44:4e:c5:33:
8c:81:8c:00:cc:3c:6e:76:ad:00:e5:60:da:1c:0c:
02:59:84:df:f5:0f:26:03:a9:8d:8d:bf:a0:99:c8:
92:c0:02:fe:65:c4:f5:99:f5:66:17:41:55:13:12:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:E2:E9:87:E4:F4:A8:6A:05:45:9F:2E:D5:B5:17:53:BE:BF:55
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:70:4f:6f:be:98:40:cb:20:e6:f1:14:02:a5:d2:f6:0f:a8:
b4:f3:eb:d1:34:e7:3b:6a:97:98:b6:b5:44:7b:04:8e:86:dc:
5a:53:36:f4:4b:65:4e:ba:31:43:62:52:90:25:8c:57:e4:79:
a6:a4:92:c3:ad:ff:b9:49:3f:a4:53:a7:38:86:1e:3a:65:d1:
80:47:d8:4f:62:29:41:d6:62:33:52:a8:61:f8:10:8e:f0:02:
c8:78:be:f1:15:46:9e:2f:d8:d6:ab:4c:5e:62:02:60:83:23:
94:d0:4c:7b:5b:b5:0e:fa:62:76:45:80:89:2b:1b:37:64:05:
59:2a:4a:dc:9c:6c:70:98:39:87:c6:a4:f8:82:00:c6:81:66:
45:5b:30:0e:89:9a:a2:f9:a1:46:fd:a2:f5:2c:d6:f8:e3:4e:
1e:1f:7f:47:c1:01:67:f1:40:25:c8:49:a2:68:b8:94:c7:b6:
38:e4:06:1f:3e:fb:af:41:da:3c:b9:e3:4a:d2:71:78:9b:15:
66:41:4c:46:47:31:0e:5c:d6:b3:54:98:b0:88:40:d7:a9:c7:
d2:7e:a8:cb:b1:59:b0:cc:81:74:04:cd:8f:fe:9e:05:c0:d2:
2b:c6:ad:4d:cc:a9:be:7e:b7:2b:4a:8b:30:e5:cd:31:45:14:
38:48:10:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:32 2026 by rpki-client