Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File: QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier: 0RNe04OyHtKdvDsg8BzDCq9H5zWEBIM3KpmqJObKAf8=
Subject key identifier: 61:E4:A3:B9:32:F8:A2:62:94:55:8E:95:F5:C3:56:AA:62:D1:AB:FE
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019D25841DFFDD2625C35C5D9C9A79C2034D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number: 189D
Signing time: Wed 25 Mar 2026 15:01:48 +0000
Manifest this update: Wed 25 Mar 2026 15:01:48 +0000
Manifest next update: Thu 26 Mar 2026 15:01:48 +0000
Files and hashes: 1: 1Cl0aMxYJUQofTs8jhJi8Z3tcrI.roa (hash: jZVvi8ZT1AvnHScx7k4KswKgUZ3UXUEyUbpLzBDmLbE=)
2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: SiCFp+A787pDK0qFm9h0MwZzDNBz0BP3aIiuaSJAwsc=)
3: YXLIHJqG-SjnWz2mCVVJ_ezTKSs.roa (hash: Mhnp5e3BJ7gjsyOPcctRIJrsmbal4VQexixZEqreufU=)
4: oJ7mg0Skc1TPbaAf8JVEuf2GmxY.roa (hash: Kcp7e66VbgmjHJFlZwdRCM4aHhG4oTWDRzXk2Vy002s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:1d:ff:dd:26:25:c3:5c:5d:9c:9a:79:c2:03:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Mar 25 15:01:48 2026 GMT
Not After : Mar 26 15:01:48 2026 GMT
Subject: CN=61e4a3b932f8a26294558e95f5c356aa62d1abfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:4e:15:94:04:26:20:65:e8:50:c8:5b:7e:
9b:ec:fc:5f:81:70:6a:04:7f:cd:d5:f9:b3:de:2a:
cb:27:37:3c:df:04:2e:74:f2:d4:29:2f:42:c3:bb:
4b:3a:14:04:4c:3a:52:82:b6:b1:72:c9:da:03:0b:
b3:f0:1b:53:cb:d3:3c:19:59:d3:50:9f:43:10:a7:
de:24:41:24:b1:39:9a:45:bc:14:42:8f:8e:8b:54:
6e:82:a7:3d:d1:f2:d4:0b:b0:1f:c8:c4:e0:e3:59:
0f:3d:2f:c6:73:89:72:8f:2c:d8:9e:75:fd:23:ca:
3a:64:5a:48:99:cd:51:8c:22:96:d7:2b:2c:08:79:
a3:f2:00:c3:86:e9:63:6e:48:44:b5:0a:c3:70:8a:
63:31:61:5b:02:60:52:f6:ca:8e:fa:8f:67:5c:fc:
b5:16:24:44:92:42:a6:d1:7b:7e:e3:5f:9e:61:31:
80:cb:7c:04:fd:02:a1:31:80:13:b7:1a:db:8b:4b:
21:ec:54:25:61:cd:2a:3b:b2:59:14:e4:7b:7e:3a:
25:cc:dc:aa:4d:fa:3f:86:2c:78:c7:c4:4e:dc:f8:
a7:20:45:90:5e:fd:48:f0:c9:18:e3:51:46:8c:19:
2d:82:c5:20:01:d1:6c:b6:d9:27:b4:28:e7:c2:9b:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E4:A3:B9:32:F8:A2:62:94:55:8E:95:F5:C3:56:AA:62:D1:AB:FE
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f9:0e:d2:d5:14:f6:95:fc:04:25:84:2a:e7:67:0f:f0:61:
4c:df:a8:f8:ac:22:65:13:93:42:e6:9d:34:70:3f:53:29:7b:
38:d1:83:fe:59:33:78:7d:4b:9d:23:ce:a8:78:99:00:0e:a7:
10:9f:b2:2e:61:ce:fc:81:b2:84:ab:ba:6a:1d:13:42:69:84:
a3:5c:c3:c4:df:e1:6e:c4:ca:61:a9:f2:0b:6c:b7:80:af:95:
73:c1:6f:b2:02:de:b0:af:fa:2d:c4:27:e9:46:7b:81:1b:f7:
45:80:7f:e1:4b:96:4b:53:79:b5:c3:71:68:c4:f2:5b:01:3f:
10:45:06:da:82:2f:25:e6:df:97:b2:cb:91:ac:aa:8c:d5:7e:
5b:26:ab:50:8c:da:c7:0d:c4:e0:c0:29:c9:a0:1f:07:08:c2:
e7:c4:09:aa:b4:88:d8:3c:1d:f4:b0:7a:99:d8:18:ac:d5:2b:
20:4f:a6:39:24:25:4e:a0:86:3e:6e:a0:3c:ce:ea:41:69:01:
b4:34:c9:19:4d:c3:11:e6:06:b4:f5:8a:37:68:9d:2b:1e:1d:
38:ce:99:58:79:93:d2:d9:7c:ca:ec:98:fb:97:da:dd:05:c2:
74:0c:c0:2f:ff:77:a6:67:43:5a:07:2a:f9:1a:13:40:96:88:
23:a3:0b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:22 2026 by rpki-client