Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: d4amL3QxaDTvgLuCZsEzfRds/9Rcwme9bGuSDCrRnvs=
Subject key identifier: F2:6E:7F:68:A5:52:EE:B8:D2:1E:68:3F:00:59:A2:FA:3F:65:AB:C8
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 019D25F19DB021F1DE89E5A1A3DABDFD7DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 160F
Signing time: Wed 25 Mar 2026 17:01:24 +0000
Manifest this update: Wed 25 Mar 2026 17:01:24 +0000
Manifest next update: Thu 26 Mar 2026 17:01:24 +0000
Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
2: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: zTHJvG3nfgDKx7u1s7mZzYT5b8s5H5q7cMHJ1euyw4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9d:b0:21:f1:de:89:e5:a1:a3:da:bd:fd:7d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Mar 25 17:01:24 2026 GMT
Not After : Mar 26 17:01:24 2026 GMT
Subject: CN=f26e7f68a552eeb8d21e683f0059a2fa3f65abc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:91:d9:62:14:f4:df:39:45:6a:6e:61:15:
e6:06:2a:e3:95:85:3e:e5:fd:e3:fb:66:63:fe:70:
5c:16:c4:cc:74:83:64:85:5f:7b:e1:92:a3:bb:f7:
b5:2b:e6:85:f6:8c:91:20:f2:c8:bf:7b:20:bf:b5:
b4:98:26:22:10:ab:18:41:e8:75:61:a6:ad:87:fb:
fe:d9:48:5e:54:da:7d:42:cf:28:b1:44:43:7b:a5:
fc:8b:f9:2b:10:d9:cd:57:05:18:6d:e2:79:69:54:
e7:f4:2c:fe:8c:f4:57:ef:fb:d6:94:50:2e:3c:25:
4f:f4:2e:5e:ee:ba:87:6f:07:5c:e0:93:a3:94:38:
6a:5a:72:9c:7f:4b:43:49:07:31:9e:64:b0:c3:45:
72:9f:b1:00:0b:62:18:70:c2:d6:19:db:bc:3b:fc:
cf:6e:c9:bc:f7:a1:e3:8a:bd:c0:ea:83:5c:78:0e:
d0:fd:70:b5:61:8f:65:28:0b:1a:cf:6e:8e:28:e8:
de:5d:2e:07:ab:72:d4:86:40:f3:65:58:31:62:ad:
0f:34:2a:d4:f8:fb:8c:b7:71:5f:05:e4:dc:60:a6:
e3:b8:0e:c3:d0:6a:1c:67:e0:4b:dd:c4:43:60:03:
4e:de:5a:1d:e8:dc:b4:71:02:91:dd:8c:50:da:28:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:7F:68:A5:52:EE:B8:D2:1E:68:3F:00:59:A2:FA:3F:65:AB:C8
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e0:c5:5f:b6:b3:90:13:03:44:36:ae:8d:81:9e:a0:12:4f:
d5:8b:07:25:dc:fa:76:98:7c:7e:e3:dc:13:99:18:5f:46:76:
58:f3:6c:e6:f8:a1:c4:42:ea:53:7d:5b:4f:7b:f8:b9:d3:fb:
29:b6:10:06:3b:26:32:3f:74:4c:b6:01:32:4d:8a:61:2a:0c:
17:fe:ee:64:53:40:1f:89:ba:b4:a6:9b:93:03:b5:d3:47:4a:
ca:90:09:6b:a7:29:69:4d:e0:00:cb:2e:ec:19:d9:45:bd:9e:
f0:bc:5e:f2:2b:34:59:99:97:34:68:29:91:5c:92:53:f8:18:
a8:65:5d:0a:d7:e2:fc:4f:bc:86:3f:98:33:32:43:bf:81:45:
2b:68:19:aa:65:a0:4e:5b:a8:e7:9a:38:cc:42:c6:60:10:ca:
2a:75:97:f5:b4:89:da:fb:dc:01:77:20:9e:86:83:08:00:bb:
d7:40:3f:8a:fd:9d:cc:a1:4c:54:08:d2:70:92:55:b9:b7:3b:
4d:dc:0b:f5:38:1f:ba:f4:13:2a:72:f2:14:c5:f6:15:99:d5:
ec:63:ed:1c:8a:f3:9e:67:c1:34:cc:ed:3d:85:a8:35:40:a3:
e1:5a:cd:78:13:8c:46:2c:80:94:e2:cb:c0:bb:81:39:ba:f3:
39:c5:ac:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:28 2026 by rpki-client