Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
File: QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json)
Hash identifier: 9QN8DSrITRwAmLBR3fT42zJ/OHGybxPMmYUMUcYO8uQ=
Subject key identifier: 88:E6:26:1B:58:5E:8B:1B:DB:FE:DC:05:F8:4C:48:4D:7C:FA:E4:9B
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 019D3A53F75B35D7AD6B5A4021944958EC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
Manifest number: 0553
Signing time: Sun 29 Mar 2026 16:01:14 +0000
Manifest this update: Sun 29 Mar 2026 16:01:14 +0000
Manifest next update: Mon 30 Mar 2026 16:01:14 +0000
Files and hashes: 1: 3xGw1rop8564t3-bxbU_RkP9FKQ.roa (hash: yfLjzKJGeMwVRP+KK+Z2T+JHoQEZVG5MrcsyFlDcLWA=)
2: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: fkNIIVjk/ApMEAe+jol96slL77h7ntqIeCfyWF5AHSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:f7:5b:35:d7:ad:6b:5a:40:21:94:49:58:ec:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Mar 29 16:01:14 2026 GMT
Not After : Mar 30 16:01:14 2026 GMT
Subject: CN=88e6261b585e8b1bdbfedc05f84c484d7cfae49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:0e:13:f7:d9:00:b4:84:fe:10:2a:74:39:
ed:e9:c7:50:73:59:6b:35:d2:88:0e:70:e3:5e:5d:
a2:63:3b:da:fc:83:92:ce:d0:57:dd:68:d0:b6:87:
d0:be:25:b2:b2:d5:a5:88:9a:28:35:8c:49:e1:a4:
84:dd:e4:72:aa:e4:41:79:9b:b9:da:d7:bd:ce:13:
0c:61:ef:18:be:1a:e7:cd:14:8e:df:de:65:8e:cf:
93:fa:86:80:99:69:47:c7:56:80:78:b3:67:81:30:
44:15:3d:fd:7d:50:af:ff:ca:4a:df:a7:02:f0:42:
15:a5:96:8e:68:99:27:18:4b:e0:df:ad:30:d0:6e:
fd:c6:3e:f2:d1:c8:23:d0:38:06:82:3c:0d:85:3a:
5f:64:15:50:ce:2e:6a:91:51:fe:50:48:23:6f:13:
4b:0e:e2:5a:2b:a4:e5:22:93:c9:ce:61:3c:75:cc:
ce:04:28:21:7a:ed:63:d8:c0:7e:a2:13:a9:c8:78:
eb:68:4f:56:f3:e1:6a:30:ce:3d:86:cc:8c:15:09:
50:35:8a:8b:41:40:65:a6:62:96:41:c6:19:fc:cb:
b2:eb:8f:50:7a:5d:74:e6:4f:c4:37:6b:ac:d2:8f:
5e:0c:cc:33:cf:97:1f:09:84:e8:1b:10:d7:76:1e:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E6:26:1B:58:5E:8B:1B:DB:FE:DC:05:F8:4C:48:4D:7C:FA:E4:9B
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:51:55:99:75:b1:52:11:b0:53:e1:bb:ae:57:40:b2:1d:81:
6e:bd:94:1f:79:9a:14:80:d3:73:c7:7a:51:2b:e7:5e:5b:15:
48:90:f5:c8:af:58:38:87:0a:c8:eb:14:8d:1f:aa:c9:81:32:
16:70:71:ea:32:bf:28:04:a1:02:c4:62:2c:17:68:d0:19:75:
ca:8a:34:aa:f8:9b:27:8b:9f:73:f8:c1:8f:5f:0f:46:c1:70:
8e:d3:76:3e:48:17:ee:17:80:a7:c9:20:a3:89:26:47:ec:c4:
ec:5b:9c:15:78:d2:3a:c3:d6:26:8e:86:18:3b:9e:87:40:d0:
99:84:a0:d3:be:ad:0e:91:78:6f:ea:62:8b:bb:43:e7:20:d0:
05:d2:a5:fd:e4:02:74:50:88:1b:10:86:cc:f4:8c:b0:43:e4:
92:27:20:80:ca:3f:41:d1:71:8e:89:05:17:fd:56:1a:7a:7b:
0f:ce:a7:b2:23:4d:f8:ac:35:99:8b:17:16:43:4a:98:b8:97:
ad:68:09:54:c6:cd:e8:17:fb:54:92:db:a4:24:9e:9b:b6:e7:
da:1c:59:78:ad:c6:6b:ac:d0:bc:aa:80:a8:ed:c1:da:19:83:
9e:ce:82:2e:99:71:f7:11:ad:c5:cc:08:c5:5e:82:a9:26:2b:
7a:2d:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:14 2026 by rpki-client