Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: E4FDQdMUMWpm3I+DR/Z9i/SspVO8M2HKU1xburubrTA=
Subject key identifier: 31:94:9F:B4:8D:B4:17:60:ED:A1:DD:BA:E4:AE:09:E8:E4:24:3B:08
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 019D389BC32320DD3D7FDC3402A74420704C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 0EAD
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: 59RtX01acF61mVfjTXMBr6iadY6gXv6HT1NGBhLMZDI=)
2: yaEEybz2NfCWEApyu2Dzx2yLpcI.roa (hash: j2pzI49xHsyv/Ol3MBefWz6almNV2xHEmt1n4qjR/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c3:23:20:dd:3d:7f:dc:34:02:a7:44:20:70:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=31949fb48db41760eda1ddbae4ae09e8e4243b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:16:78:b8:fa:d8:b8:f5:73:4a:11:56:7a:
cf:e2:f5:ae:90:73:08:2d:44:86:c3:37:ba:d7:ae:
80:e7:f3:92:47:f5:55:ad:80:f5:40:56:37:d5:c5:
d3:40:4d:ff:81:f7:72:a0:86:d5:4b:d9:d6:b2:57:
14:d3:ab:81:a2:7a:24:d6:61:c2:5c:9d:b8:ed:da:
c3:7f:d8:a7:50:65:5b:ed:78:37:e9:b7:0e:87:65:
91:27:63:a8:4c:ec:9c:6b:e9:64:54:0d:5b:a6:70:
01:7e:83:69:01:ce:84:3c:c5:3c:1e:72:6c:0c:f4:
2f:a4:48:eb:fd:3d:0f:6a:2a:c1:29:9b:96:30:3f:
6a:3f:fb:7a:07:99:a1:22:4b:9c:89:24:e3:fe:ec:
61:5c:6f:ce:c8:69:aa:65:e9:4e:20:18:05:6b:05:
34:74:e9:c8:31:cc:5e:a6:51:88:ff:a2:09:13:8e:
e3:e0:4f:2c:19:76:3c:60:88:f6:4f:60:0d:6e:77:
81:a8:22:62:ab:b5:48:2a:ea:a9:1b:a8:e6:d6:40:
8f:2d:40:e4:b1:4e:bc:33:64:e8:5f:44:da:be:84:
e2:e5:9c:2c:ce:fa:04:e7:22:c4:83:a0:c7:06:9f:
50:a8:5c:33:d0:f0:1f:64:c8:45:e4:7e:18:02:f6:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:94:9F:B4:8D:B4:17:60:ED:A1:DD:BA:E4:AE:09:E8:E4:24:3B:08
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:bb:75:03:a0:09:e9:f2:6a:18:fa:88:a1:11:82:83:1e:69:
e1:62:3b:41:77:da:da:28:f3:a4:c9:7a:19:89:16:26:28:03:
ce:e1:c8:49:24:d3:72:13:15:10:ff:47:3d:62:ee:0e:ab:67:
7d:b3:bd:f5:19:73:50:d0:95:9b:ba:95:05:00:68:59:a9:0a:
db:f9:04:0c:d7:70:1a:ac:05:36:a6:a6:be:97:2a:f4:3d:a0:
a4:0b:9f:28:d3:a0:83:3f:8a:35:0a:94:06:40:01:40:5c:37:
91:80:fb:8a:e6:ef:f2:f6:da:94:c4:86:0a:f4:1d:f3:4e:7b:
c5:be:0e:bf:e7:43:f9:56:50:0b:5b:09:62:4f:03:dc:bc:cf:
85:27:be:af:4c:de:53:82:5a:9d:33:39:c5:f1:cd:07:01:7d:
89:77:0b:80:ba:f0:5e:06:3c:b7:f4:09:29:80:97:fd:71:dd:
f4:bb:87:f8:35:b5:74:f6:21:fc:0d:dc:ea:14:a7:1e:52:fd:
cf:70:44:11:65:a4:b2:07:17:30:47:05:25:09:f4:47:2b:7b:
d8:8a:18:e0:c4:27:15:73:d3:cd:6c:dd:de:44:49:db:4b:15:
4a:00:f4:e7:93:2f:11:da:4d:05:b8:0d:f9:79:f0:8c:94:78:
d3:2a:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:04 2026 by rpki-client