Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: /nYfO2RSTz4H3DAiRgV4WbWYNwphwFhgJ2Q42irNG88=
Subject key identifier: AB:10:0E:BB:D4:05:2D:AF:6C:54:0B:1A:22:12:96:94:B9:09:69:BA
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 019D389C4C3824D41EDDAC22E489B2E7A8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: eASSP26tOSYBPNmj3L7eSvSdcxoo12mgqoDzIA7Cz7Q=)
2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4c:38:24:d4:1e:dd:ac:22:e4:89:b2:e7:a8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=ab100ebbd4052daf6c540b1a22129694b90969ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:a9:57:98:2d:72:96:66:3d:44:09:34:90:
9a:ef:28:3b:a2:7f:72:59:b2:35:04:71:48:6a:18:
ef:6f:cb:93:d6:51:a4:60:4f:7a:c6:29:89:06:de:
87:c7:e6:1d:99:2e:81:2a:4b:2e:1f:21:75:48:65:
21:87:f6:b2:a3:c5:ab:e0:99:1c:1d:7d:9b:0e:e4:
5a:41:02:a8:b0:d7:4f:44:98:cc:78:84:dd:28:ea:
47:66:21:50:94:29:b4:43:b0:a2:7f:67:ba:10:74:
63:67:25:b3:22:f5:9c:99:07:6b:3f:b6:e2:70:be:
93:63:13:99:e4:d2:44:c7:29:cb:e3:0d:4d:5b:49:
15:45:dc:38:90:30:d2:bf:74:e2:1f:1c:15:52:1f:
88:73:50:ed:12:33:7b:5a:43:88:93:99:c9:b4:27:
83:ed:e4:f4:1e:eb:02:f6:d6:88:db:bd:fa:a1:de:
eb:4c:c7:7c:06:37:15:5f:c4:b9:37:e8:bb:71:7f:
7f:dd:df:86:1e:e4:29:1b:ea:2b:fe:57:6a:45:3f:
c6:13:27:c1:54:fe:4a:ae:cf:55:ba:de:9b:10:c2:
ce:47:a9:57:a2:44:c8:55:89:67:4c:84:19:ce:3f:
0f:a3:04:ee:13:76:3f:34:02:66:09:3c:79:cd:8c:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:0E:BB:D4:05:2D:AF:6C:54:0B:1A:22:12:96:94:B9:09:69:BA
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fb:f0:0a:80:88:6b:6d:05:26:b2:1a:b9:42:fe:a5:bf:3c:
53:50:86:0a:97:88:85:f0:b5:a6:4e:70:ce:e0:a5:30:f4:75:
6f:38:dd:93:40:c5:c4:36:de:52:9a:ff:ba:d7:ef:ed:19:2d:
ef:04:cd:22:a0:f1:7a:13:06:a5:31:d2:81:c4:0c:8b:11:85:
e8:fb:c3:21:8a:34:f3:80:da:fa:aa:29:6e:74:15:5e:07:b3:
41:d8:c5:5c:f8:e3:13:d0:e4:50:61:95:a5:b9:50:ef:81:65:
b0:c9:a4:94:5d:bc:c1:81:27:b4:93:b5:a3:40:a2:b6:b3:ba:
4d:4d:13:a4:0a:11:41:92:26:b5:da:83:75:cb:04:9f:d0:98:
48:b1:e4:3c:24:68:25:b3:9e:5d:64:e4:ba:4e:d7:88:43:f9:
4b:a9:c9:54:76:11:66:11:51:f7:32:92:2a:04:f7:79:6a:1b:
60:8f:9b:fb:c8:1f:2d:da:17:92:17:b2:0f:ab:86:80:8a:23:
92:4e:98:78:ab:68:86:15:b8:b1:6a:58:c2:0f:6a:1d:a4:99:
01:2b:eb:2d:39:fe:5d:ac:c2:b7:55:19:df:09:8c:c0:14:5a:
6c:7b:8a:ad:99:e9:c4:c7:c5:77:d8:e1:6c:a7:d1:16:f9:e7:
e0:f1:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:52 2026 by rpki-client