Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: ZPMoGyJvy+kx6l0xDOAVDocSC7fqjTja4GzVW9uLbe0=
Subject key identifier: 10:1A:46:CB:28:5E:36:91:A9:AC:D7:67:A3:B0:E1:93:A8:61:D3:02
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 019D3865C3DF786F49656EE0AB29AC8F90DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: KVd8UU1QCGLbelU8FBZ3BjTJf_M.roa (hash: e0wcDwUSIAfCnaYto4Jivp2KjPS/q2XzRg7RSdokzyQ=)
2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: rER+4VxTmC8N9slLN9RgdzchT2g7Id1wby/x90JfF4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c3:df:78:6f:49:65:6e:e0:ab:29:ac:8f:90:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=101a46cb285e3691a9acd767a3b0e193a861d302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:0b:92:c6:b4:3f:92:2a:d0:da:04:5d:63:
c1:ea:14:df:8e:c0:58:d0:3f:07:4d:4e:0b:6e:a1:
c6:19:30:28:2e:5c:4f:b3:f5:15:09:fc:d9:4f:9f:
15:ee:46:58:bb:68:c2:aa:a6:c2:50:d8:fb:ee:cd:
31:bd:85:d9:af:ea:db:d9:35:fc:4c:d3:54:3a:19:
a7:e3:35:d7:25:9b:82:26:57:c2:0d:2a:0f:22:7e:
41:42:e1:cb:88:63:19:5c:69:5a:fe:46:21:3a:f2:
a0:45:5f:b2:62:fc:94:d1:e0:26:83:48:16:f8:e4:
da:c8:76:bb:a5:5e:92:31:ed:57:3c:93:f8:a2:f3:
fc:a4:8a:10:d1:df:95:84:9d:7d:99:b7:f6:e0:36:
e2:cb:7f:6e:dd:40:02:cf:e9:a7:e9:1a:ea:a9:68:
2c:80:c3:02:9b:df:d9:87:c6:cf:e6:90:eb:79:f7:
b0:93:cd:b5:67:b5:21:6e:41:d3:b9:41:eb:e7:a7:
09:94:91:36:07:ee:fd:63:9d:b8:e5:3c:69:28:27:
9d:73:dd:87:35:5f:0d:b1:a8:71:14:3a:ab:d1:84:
1f:3d:77:3b:ff:40:ca:d8:9b:8d:fb:62:a8:2e:31:
55:db:5c:04:99:fd:3d:98:1c:56:97:d5:c2:77:93:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:46:CB:28:5E:36:91:A9:AC:D7:67:A3:B0:E1:93:A8:61:D3:02
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:15:33:12:2e:45:8a:8d:3f:a2:b9:a6:2c:04:9e:3b:3c:a6:
28:6c:9a:b2:b5:69:89:10:b1:ba:c5:01:ef:b2:01:64:24:5a:
3e:63:00:c5:99:63:10:ae:4c:9b:a9:4d:72:a8:25:fb:62:37:
61:db:0e:d9:db:0c:7e:6a:9f:4f:43:6e:2d:ee:5f:2f:81:1e:
0a:d5:55:2c:72:e4:ed:ca:00:5e:14:fc:48:14:4c:fa:92:64:
0e:49:8d:4d:71:ea:e3:81:b2:a3:bd:6f:20:53:88:22:c0:bf:
46:18:21:1d:c7:5f:b8:5c:d9:5c:e2:d2:63:a6:6d:f1:30:75:
a3:09:55:43:a2:07:2e:b2:83:f2:9c:93:b8:94:f4:f3:72:8a:
25:f4:49:89:ae:25:57:2e:c9:7a:b5:36:c8:d8:5f:c2:ad:bc:
f6:47:63:13:eb:75:a5:f8:9f:fe:92:fc:a9:b4:c6:96:32:93:
46:61:4f:de:a9:65:47:09:33:83:97:42:97:22:80:ff:e3:80:
5f:7d:9a:21:47:8d:e7:d8:7d:d1:01:5b:53:26:2f:10:58:8c:
3f:b1:42:73:4b:6f:c9:34:46:c1:88:1e:c7:ee:d5:a0:df:3d:
ae:7c:74:1e:af:65:6a:81:bf:e1:1f:b7:bd:90:72:47:59:d1:
24:42:0a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:46 2026 by rpki-client