Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: aiFIAbsMxefzfNcOHFgImVrIosGkmTafQKk+LJSlPxE=
Subject key identifier: 42:EA:81:B1:71:92:45:28:84:73:AF:F8:9D:A3:C0:58:03:63:0B:B9
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019CBF28BA595327C664B1CBE76137E3FA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 185F
Signing time: Thu 05 Mar 2026 18:00:43 +0000
Manifest this update: Thu 05 Mar 2026 18:00:43 +0000
Manifest next update: Fri 06 Mar 2026 18:00:43 +0000
Files and hashes: 1: B-lpjug3i_155H5tpNIeEGANaS0.roa (hash: 7zDbZ5lI1xUzRK1GHHiuYdnbXCkm2Trf9mO4U6u4Yxw=)
2: JQ-BG16GBmiKTRtWlx0jbggGDzY.roa (hash: Rybx78lS/tFD5mooAKxD5CnTfaalNbrJsTnAOJa1SbI=)
3: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: SsX6VNwmq9UD2Lp+9PiuPbMtXahXgcuM2NGzKfDQnwE=)
4: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:28:ba:59:53:27:c6:64:b1:cb:e7:61:37:e3:fa:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Mar 5 18:00:43 2026 GMT
Not After : Mar 6 18:00:43 2026 GMT
Subject: CN=42ea81b1719245288473aff89da3c05803630bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:d5:bc:21:a9:db:1c:26:38:72:e1:07:5b:
c7:10:3d:dc:24:72:a0:3a:58:17:11:5e:78:ae:35:
7f:61:e6:61:0f:98:63:00:43:fc:ae:20:0d:0b:cd:
f3:f7:ea:8e:ec:33:da:b1:39:f9:65:cf:ef:a0:1c:
47:01:88:2f:c6:43:6a:7c:27:3f:d4:18:4a:a0:a1:
3f:fa:b1:92:a0:ea:17:05:eb:67:ca:1f:40:51:01:
75:66:96:8e:98:d6:13:5a:43:ff:0d:3e:d2:54:50:
e2:23:5d:4f:6c:cd:2b:25:5c:54:dd:47:8a:52:86:
88:89:61:0d:5e:f9:cc:85:02:c2:97:f3:92:bc:9a:
80:f9:e6:4a:20:b4:5f:67:57:21:67:56:4b:65:99:
5e:fa:72:a0:5a:d9:72:97:3a:a8:ea:fe:48:ed:2b:
75:d2:09:4c:ff:47:2d:79:03:c0:90:99:fc:74:cd:
93:4b:ec:10:72:4d:c1:cb:69:ac:1a:40:49:ec:77:
44:2e:7d:1a:a7:f2:d9:0a:4c:83:65:4a:99:ad:76:
54:ef:74:61:26:d5:be:59:0b:62:ab:5e:d0:d7:1a:
06:f8:32:15:d4:00:7e:49:37:46:73:fb:fc:19:01:
5d:cc:50:49:23:aa:6f:43:95:70:18:ba:93:48:6b:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EA:81:B1:71:92:45:28:84:73:AF:F8:9D:A3:C0:58:03:63:0B:B9
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:c2:86:e1:ac:f8:b5:54:07:62:e6:71:8c:82:f9:f8:ab:
f0:bb:28:98:97:32:7b:8e:5f:3b:54:32:cf:0c:d0:f3:66:4d:
43:a2:3d:1a:d3:50:88:37:45:2e:38:4b:c2:c8:ea:2c:c4:84:
8d:de:5f:c9:cd:43:6e:9e:14:d0:f7:cd:c9:af:a0:77:53:23:
c6:7d:7d:57:03:8c:a3:b0:62:98:b2:08:85:1f:51:01:dc:00:
11:47:47:4f:cc:d0:05:13:a0:78:07:10:a2:12:2f:89:ba:7e:
0f:00:d6:ce:0d:fc:95:a0:8d:c4:3e:88:9d:98:34:ef:b6:33:
00:bd:bb:e1:9e:f9:32:38:b2:a9:ed:dd:f8:ff:20:b8:e0:09:
49:46:04:57:d4:b9:2a:dc:9b:80:5d:10:95:b9:90:d0:2e:3a:
37:2d:9c:83:8b:14:ac:06:02:3e:16:00:2c:49:40:ec:35:df:
3e:b2:e0:bd:07:f7:46:a8:26:57:b6:0e:45:f9:48:88:6d:6d:
3d:01:73:a2:5a:d6:50:60:22:d4:2b:14:1c:15:95:23:66:60:
bb:10:59:8c:22:14:11:c7:61:dd:6a:87:b0:c6:5e:fd:c6:8e:
45:19:5c:67:b2:de:e8:e0:bd:89:4b:db:eb:1b:67:4b:11:fc:
b4:3e:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:02:47 2026 by rpki-client