Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: yIb1VTkGSW9Gk15cfWrlsT73ardzc386m0pOYV3nDUo=
Subject key identifier: F8:B1:D4:3C:36:4C:28:74:D8:C1:94:CC:FE:25:10:44:04:03:ED:74
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 019D3AC0FD9E02AA6340825F86741554E985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0F50
Signing time: Sun 29 Mar 2026 18:00:19 +0000
Manifest this update: Sun 29 Mar 2026 18:00:19 +0000
Manifest next update: Mon 30 Mar 2026 18:00:19 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: nQQFrFbL7VgQyH09PIM+LJGPC4Q6xpIDfuWtG612Ox0=)
2: pUvKtFdAlsMAiyEbWzX8FfKf3Zs.roa (hash: mTXSXjoGjQ2auSz+bUbQx6Ihly9Sl/4nc+Gp/ABHXAA=)
3: qV4gR6WxquLOT56bwfJU7xHJRNM.roa (hash: n0V/wW/NrF8CEjksLZ9W1qLNO23nhbEeWjftcQzvrnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c0:fd:9e:02:aa:63:40:82:5f:86:74:15:54:e9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Mar 29 18:00:19 2026 GMT
Not After : Mar 30 18:00:19 2026 GMT
Subject: CN=f8b1d43c364c2874d8c194ccfe2510440403ed74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:8c:7e:ed:52:f3:ff:5f:c9:0a:8e:67:9a:
ca:bf:d5:56:44:73:3d:a1:64:85:a2:e7:00:22:e4:
e3:e7:b1:3b:a0:53:4f:45:24:6f:bb:c5:8c:a1:65:
3b:56:d8:10:32:25:b4:2a:1e:7a:59:dc:83:43:90:
a0:16:a6:cc:76:63:03:67:a4:92:69:99:14:77:fd:
55:ed:51:f6:07:d8:20:e0:ec:46:5b:0c:d3:61:96:
27:7e:fe:33:c3:53:19:bf:23:2b:32:5d:28:93:75:
4c:2f:97:05:00:41:c4:8a:02:8a:70:83:24:c9:1e:
a7:2c:fd:59:b7:18:25:a1:ad:9f:6c:6e:d1:dc:bd:
c2:f8:ca:7d:33:be:0a:c2:6d:d3:aa:03:84:78:90:
e6:c0:4b:56:c9:6f:22:2b:10:8a:b3:c6:46:d8:09:
b1:04:d2:3a:07:d2:76:a6:8f:d8:54:18:64:fc:5d:
ba:a2:4c:cd:bb:81:55:e5:f2:e0:4f:13:94:b5:1b:
74:c0:5a:b4:77:d8:7c:b3:93:6e:33:b3:ec:71:2f:
7b:a1:04:8b:b7:4f:24:91:0c:66:51:03:a7:17:a6:
a4:3e:1b:85:54:b6:b4:ed:6d:a7:ee:1e:15:2e:87:
e1:a7:9e:2c:8d:06:8d:85:14:8c:43:49:c6:c5:7f:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:D4:3C:36:4C:28:74:D8:C1:94:CC:FE:25:10:44:04:03:ED:74
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f3:2e:12:06:af:d8:23:88:4a:71:5a:7f:b7:c6:99:ad:b6:
3f:62:63:17:c8:78:93:3b:4c:56:b9:17:ab:bd:cb:62:47:9a:
5b:ae:e3:4e:27:ac:17:02:94:cf:c0:a7:81:aa:d7:15:c3:14:
2e:c6:69:f8:93:51:9c:15:e4:2b:a7:a7:80:18:9f:f3:13:59:
cb:31:e8:11:9b:f6:11:c0:cc:cf:fc:85:ee:d0:52:a1:fd:92:
36:c4:2d:4f:28:43:72:17:2c:cc:46:97:8a:3a:b6:a8:70:cb:
95:20:df:41:b0:0f:a2:62:73:b2:60:16:b5:32:85:99:4d:1b:
4b:ae:d0:a3:a8:79:3b:a2:b5:40:cc:e2:c8:b3:ed:85:5f:28:
70:fe:da:95:ac:83:06:07:fd:18:55:50:11:ab:3d:6d:3c:32:
0b:f0:4c:38:36:9c:db:f1:aa:5c:22:61:79:60:86:aa:f3:e8:
bd:29:a0:a8:25:ac:c9:57:29:aa:b4:7f:ce:92:2d:60:e7:87:
da:ed:f5:8a:a4:f9:f0:aa:30:5d:fe:42:66:65:bc:73:fd:53:
46:bf:56:fb:37:a0:91:cd:fd:47:78:98:3c:50:01:fa:06:e6:
5d:8a:c2:9a:97:70:f7:30:bd:12:3a:b7:07:70:e1:cc:87:89:
78:82:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:46 2026 by rpki-client