Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: gWtDApHPtRGVqX8WehOiijT6MXF4jhcdeGxlB0B/qA8=
Subject key identifier: 6E:82:C0:04:A5:57:7B:40:2C:56:A8:6A:58:43:0B:58:6B:17:42:54
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 019D394104C6E99E6E91A3B6BD304E1D4D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 14DF
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: XWAw/Hp7C1L766r4YWoV5KbTvNNDzxhirKHpnyCdKYA=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:04:c6:e9:9e:6e:91:a3:b6:bd:30:4e:1d:4d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=6e82c004a5577b402c56a86a58430b586b174254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:45:7f:aa:c9:b2:3c:02:b0:bf:29:5f:46:
59:82:0d:0b:29:df:5c:32:48:a2:49:4a:5c:21:02:
20:53:28:8a:ca:46:d0:d1:b7:e1:31:b2:99:2c:e9:
73:29:2b:a0:67:9b:54:fe:9c:bf:99:c7:f3:26:0d:
05:b0:6c:7d:a3:47:ad:ab:9b:56:85:a8:05:74:75:
cd:58:79:c8:c1:9f:54:66:e1:87:f0:d8:71:4c:88:
57:92:12:50:45:49:ee:86:96:d9:82:35:4d:d0:b1:
cd:9c:43:1a:59:77:3d:78:cf:77:d8:3b:8a:31:09:
d2:84:92:7c:bd:25:8a:cd:fa:24:c8:14:3b:57:55:
03:29:1c:2e:9d:6c:cc:5c:fb:bc:f0:5f:72:6b:54:
14:dd:96:5e:c8:2d:73:05:34:45:f1:fb:5d:f1:ed:
ef:87:5a:64:68:99:08:86:3f:39:30:62:63:dd:3c:
3b:24:3d:95:f3:58:55:35:9b:cb:00:82:51:db:76:
08:df:5e:02:96:71:42:a7:79:a2:f9:16:a9:18:7f:
47:a2:88:e6:c3:e8:14:55:67:cc:ba:94:94:a2:68:
30:b1:55:8b:98:8b:d8:65:e5:05:5a:7e:9d:b5:57:
11:eb:74:71:9a:89:7a:ae:cf:15:1e:dc:58:b4:8f:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:82:C0:04:A5:57:7B:40:2C:56:A8:6A:58:43:0B:58:6B:17:42:54
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f9:f8:b9:03:bc:83:59:bd:e2:24:12:2b:37:41:51:ff:66:
0a:32:67:0e:49:7d:aa:00:54:e5:a7:d2:49:16:61:1e:37:eb:
e3:8a:96:2f:bc:d2:8d:bd:b8:08:70:2c:5a:eb:3f:62:17:fc:
65:04:cc:db:0b:1c:6a:60:a9:34:50:26:fa:d8:a0:b9:16:77:
e1:34:41:44:87:47:19:ac:66:10:6f:e3:fb:54:76:f0:7f:66:
3a:22:48:6a:74:2d:f7:d3:46:64:49:6e:08:77:39:ac:73:9f:
8b:b2:67:7d:db:24:ce:3e:bb:cb:e5:b0:31:73:a4:69:ba:d7:
8c:f5:fd:aa:82:b6:9c:2e:7e:85:ad:fb:7b:ec:98:6a:c9:ba:
63:09:6e:cd:2c:2c:cd:be:f3:cd:26:c7:f4:14:01:33:08:30:
8a:06:1d:06:e7:3b:8c:c4:e0:b2:aa:c5:70:73:51:9d:b0:5a:
49:82:8c:e2:87:1b:59:04:d5:6e:1a:1a:cf:c3:c8:0c:a9:dd:
f5:9c:cd:1b:a7:56:1a:fb:0f:f8:35:9b:43:6b:e2:89:93:b7:
4a:f1:81:86:5b:5f:12:13:68:04:52:ef:a3:59:92:a8:94:1b:
f6:5b:ab:78:f2:6b:ed:f5:e7:b9:00:84:e7:1c:6b:9e:fb:2e:
79:2a:64:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:48 2026 by rpki-client