Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: csWMdzi2bORsoODbr1nE0u5qqFoQVIwSieRELhEGCu0=
Subject key identifier: A1:42:04:CC:33:6F:38:E8:24:85:64:D3:2A:BF:A4:B6:B6:F0:9F:6B
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019D37C0FEF6285D4A9E402A663ACDDD89CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: 8Yhor2VRaJX02+6SvPcz1LZLMgmXJk52/My5IndboyI=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fe:f6:28:5d:4a:9e:40:2a:66:3a:cd:dd:89:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=a14204cc336f38e8248564d32abfa4b6b6f09f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:88:77:7c:c7:ad:fd:fe:c2:6d:9e:28:66:
34:bd:0d:8c:96:77:15:8e:61:38:5c:5b:02:77:d4:
ec:a6:69:0b:93:e8:e2:b8:e5:dd:f6:c5:51:99:46:
ee:92:70:19:87:9f:be:45:31:a7:65:c9:57:74:32:
d1:6b:29:d4:9f:88:f8:b3:ac:84:e3:ac:cb:aa:bb:
38:b7:c2:5b:79:71:45:97:cd:ea:71:2f:81:93:cd:
70:2c:57:65:94:a9:f8:47:6d:d8:8f:23:ae:7e:c7:
b8:18:4e:d4:9f:ae:a7:d9:3c:55:19:df:33:23:2a:
0f:ca:18:b9:2d:f4:72:90:f3:53:e0:03:23:7d:84:
63:f5:ce:c8:f4:49:09:2f:4e:b0:a3:47:3c:1e:27:
b6:b0:41:59:71:43:b3:3d:40:e0:64:2a:9d:01:97:
77:72:07:22:63:50:0e:a1:f2:28:a5:f0:1f:35:70:
2b:6b:e3:e8:1e:41:fd:48:ca:4f:48:b8:80:fb:7b:
e1:3d:c9:89:03:e1:7a:8c:a4:25:83:c0:52:00:31:
95:20:76:10:ed:1c:81:eb:38:94:13:65:72:2e:48:
c3:6c:5d:eb:dc:ca:bd:a0:71:8e:28:90:3d:70:a1:
e1:42:b6:e2:20:f2:b9:4a:c5:4e:53:f6:d4:db:1d:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:42:04:CC:33:6F:38:E8:24:85:64:D3:2A:BF:A4:B6:B6:F0:9F:6B
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:50:5a:d1:e5:f0:40:dd:b9:49:fe:ac:d0:48:e7:20:60:bf:
eb:ee:37:fb:ec:16:1a:c2:d9:b2:80:d1:fe:1f:c6:4e:2d:d4:
e3:c8:11:fe:6e:3d:db:e3:42:b5:2b:06:40:c5:59:02:e4:16:
cc:b7:50:67:22:47:64:42:8d:bd:01:95:8a:a8:3e:d4:ff:3e:
59:9e:54:3b:43:0c:bf:e7:5e:85:fe:2d:95:cd:62:45:d6:8a:
17:24:c7:3d:87:e2:43:e8:64:2f:59:a4:85:04:7b:16:80:fc:
51:a3:27:09:00:89:2d:e9:b1:03:0c:81:12:9f:f2:64:19:19:
b9:c6:7d:19:64:fd:dc:9b:cf:9f:6c:87:4d:29:0c:4b:d2:f6:
ae:12:7f:96:70:61:55:e0:93:91:e1:d4:55:ea:2e:07:fa:81:
e7:9b:db:df:ec:f3:79:97:e2:ae:f3:5c:01:71:db:25:f8:0f:
ab:20:b9:dd:5e:26:29:45:08:aa:d4:59:3d:37:e1:55:02:aa:
98:98:11:97:2e:97:0b:b7:34:07:18:ae:b0:6d:90:01:86:64:
89:17:78:8e:f9:93:8b:6f:28:b3:f4:61:8f:97:9a:ae:fe:fa:
4b:97:70:09:29:0b:be:e2:97:00:c9:6e:ee:ca:40:ac:87:0a:
dc:1a:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:10 2026 by rpki-client