Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
File: QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft (raw, json)
Hash identifier: jikHU7GpvmYmbJomEAY6EoabPsxLuguZKFmlhf/gPs8=
Subject key identifier: CB:1D:EF:DB:81:B9:A9:7C:CC:72:EA:B8:75:30:05:42:4A:78:D4:D5
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial: 019D389BC492EDC9BAB5D5AFE120FCFDB210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl (hash: cDfHtA99ewdptUUVSQvnSxuutVI//83IhoMk1XD50/E=)
2: vvBOQ04V9GOEp_xWifhOTx36DlE.roa (hash: kyJgbX8RGqWByplGJZ1fz/UdnF/eQPqYIRllvHcTi70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c4:92:ed:c9:ba:b5:d5:af:e1:20:fc:fd:b2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=cb1defdb81b9a97ccc72eab8753005424a78d4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:94:f2:73:53:02:ec:3d:91:6c:ff:9f:93:
77:8a:58:a8:7b:71:2b:fa:bd:83:18:49:00:da:21:
b0:a3:bd:fd:86:a2:c0:99:73:53:c0:93:1c:5f:26:
15:cb:22:b1:34:55:e9:b0:58:f0:52:a0:2b:31:f7:
64:f4:7e:34:b6:bd:d6:d4:5e:75:c2:b8:8d:65:e2:
aa:4c:82:d4:61:31:01:bb:2f:96:3c:50:46:74:5f:
7c:47:75:3d:5d:f8:25:64:a9:bd:72:22:8a:b0:57:
7e:b2:63:ed:46:79:9b:53:e6:fe:2f:a3:84:96:96:
b7:10:53:41:9b:f5:5b:55:f8:e2:a6:8d:5c:09:17:
a7:81:fc:11:5a:43:c5:43:9b:90:44:86:1a:2c:db:
59:54:d0:dc:36:4b:9e:aa:01:d8:ec:2f:e5:16:30:
b5:a7:a5:d8:40:b2:95:a3:bc:6d:bd:41:05:bd:b7:
d4:14:17:52:99:be:52:96:06:3a:52:d8:ab:31:5d:
c3:2f:b3:16:2c:18:ea:38:e4:b2:52:db:3d:0f:16:
0c:ef:b2:92:03:fe:78:27:e5:79:67:31:18:61:6d:
ba:52:94:71:3f:83:9a:e5:8e:db:45:9d:83:d8:0a:
9b:6f:65:c0:16:2e:c8:92:98:eb:90:01:de:83:89:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1D:EF:DB:81:B9:A9:7C:CC:72:EA:B8:75:30:05:42:4A:78:D4:D5
X509v3 Authority Key Identifier:
keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9d:cf:a0:75:5f:93:51:38:11:20:eb:1c:0f:15:9e:50:87:
81:4a:12:52:7a:9b:c4:e6:d2:8c:b3:48:5a:59:66:ec:2e:c7:
92:28:7d:6a:20:03:9f:80:1e:24:8e:a8:0a:0e:00:3c:52:45:
cd:d5:1c:41:1f:61:d8:fe:44:a6:8a:43:bc:1c:8d:48:94:26:
e0:a2:9d:bb:00:fe:c3:37:00:28:66:20:2f:4e:50:a6:af:f3:
1c:72:19:c2:31:90:83:e4:4b:e5:4c:a0:e3:cb:60:fa:6f:ab:
19:25:f3:af:c3:48:c4:71:94:c3:24:81:aa:30:25:bd:ad:32:
76:65:ef:df:4d:ff:40:18:d6:94:be:f1:44:90:a2:5f:c6:8f:
f7:7c:20:79:67:4b:39:8d:44:f4:45:85:ec:1a:86:90:2a:52:
9d:7a:db:a6:63:77:56:8d:56:52:71:92:86:3e:d1:45:fa:37:
79:52:47:10:89:ae:77:cf:56:2e:ea:70:94:72:c5:fc:01:8a:
2c:86:f1:1e:ad:bd:9f:1d:b2:79:35:41:3d:33:be:5e:fd:3d:
fb:69:a8:17:5b:ec:2d:24:1f:c6:dc:2b:c0:b0:ba:c9:97:d7:
b5:d9:c5:a9:bb:4b:2a:96:16:3e:62:14:f5:c2:7e:52:1b:a4:
84:d7:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:54 2026 by rpki-client