Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: y2d5CooGOPIDxxe/aZoyppIJpoZlMvAzbe0FMgygF8E=
Subject key identifier: BB:43:0B:B6:01:FA:85:79:2E:1F:42:6C:42:FF:13:4B:F6:92:2C:C7
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 019D273B2ED95AD987302B9684146A223002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 0CE1
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: 1-0rpJ3YEaAi9o2lzWV5eBX7W0iE.roa (hash: seOih4wjhJ6V5ThAImMQ9eV74z3GC26duBl8NYe046I=)
2: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: vIyINI+mhLTtGPquP5lggDAhBx8zgqpLQm4IWDFx2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2e:d9:5a:d9:87:30:2b:96:84:14:6a:22:30:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=bb430bb601fa85792e1f426c42ff134bf6922cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:e4:f7:2e:03:5b:77:08:8c:48:6b:0e:dc:
0b:6e:31:68:17:34:fb:ac:99:2d:77:28:5d:70:f2:
a9:cb:00:ed:8e:7d:63:a4:fb:59:47:ed:c6:64:16:
83:b1:d1:71:2a:4d:30:e1:7a:2e:26:77:60:fb:63:
fe:66:2e:f4:83:5e:3b:05:61:9c:70:b7:9b:7e:a2:
c0:a4:60:01:1e:ea:2a:67:e6:07:26:bb:0a:94:2e:
a8:8f:0f:f8:8d:7a:9b:d6:ac:6d:57:f0:9f:4d:cf:
77:51:ed:e8:31:8b:db:e9:b3:76:3d:19:9b:0b:ca:
07:e0:4d:48:3d:4e:b6:49:8d:f9:28:27:70:38:b1:
6f:54:22:07:37:17:3b:d1:6d:2c:4c:61:f0:4b:7b:
ad:23:4e:06:17:57:70:d9:f3:ad:f0:44:8a:e5:62:
c3:99:87:17:7d:ea:49:f8:a0:b7:b2:8c:d0:10:43:
71:b5:b7:4d:ed:b7:80:25:b3:21:ea:ca:c2:26:59:
a8:2b:a2:b2:ab:bb:71:0a:07:19:1d:c3:19:e1:c2:
b6:b9:11:ec:9b:f1:58:21:f8:30:07:dd:5d:36:13:
89:5c:16:98:fe:5d:95:b8:72:a9:88:09:14:b4:22:
a9:42:dd:e4:ab:43:ae:28:52:b9:40:20:0d:5f:27:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:0B:B6:01:FA:85:79:2E:1F:42:6C:42:FF:13:4B:F6:92:2C:C7
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:17:e1:02:46:95:1a:fb:f9:84:5f:be:ff:fa:c6:4a:9a:
c4:0e:d9:e1:ec:43:7e:08:3a:b4:d0:c4:4b:4d:ab:31:54:ff:
72:74:4f:62:3f:32:f9:91:9a:af:2d:d2:63:b6:00:8d:0f:eb:
92:48:5d:00:72:bf:0b:be:da:e9:d5:de:02:0b:8d:a3:3b:f7:
fa:c2:a7:d3:ac:dd:b3:94:45:10:75:51:b5:b7:8f:bb:e4:59:
60:b8:1d:df:61:bb:68:7b:dd:6c:ff:af:fc:d7:3c:40:d1:c1:
8c:9d:16:96:97:fc:c9:79:4c:37:bf:a1:dc:4b:fe:7f:33:e0:
95:93:8a:f4:ae:f4:10:6d:e8:53:87:d0:94:1a:22:6b:99:2f:
4a:9d:32:21:75:28:30:0d:3e:ce:69:39:45:08:6a:8b:28:5a:
3b:20:f0:b1:be:96:f3:ec:d1:bd:4a:26:7a:66:54:89:95:87:
b2:c8:8d:9c:14:4e:8a:c5:af:4c:76:b1:f0:f0:84:82:89:b1:
36:61:46:c8:95:e0:32:27:37:f4:cf:d6:d1:36:cc:3c:aa:06:
33:25:61:2a:ff:de:f3:20:ef:e6:9a:cc:b0:e3:74:cf:d0:0c:
25:5e:87:57:c1:aa:d5:06:1c:1e:fa:4c:0f:d8:77:b9:76:5c:
10:e8:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:15 2026 by rpki-client