Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: SRlcEARlyiyflpOohbFyTZNEttl4G0m9gn65zkToEi0=
Subject key identifier: EE:D3:C5:47:D7:7B:AD:67:EF:99:FC:56:E2:48:8C:BA:C2:DB:9C:38
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 019CE5FEF57D0ABEEC77C2F334B07043EA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0DC2
Signing time: Fri 13 Mar 2026 07:00:17 +0000
Manifest this update: Fri 13 Mar 2026 07:00:17 +0000
Manifest next update: Sat 14 Mar 2026 07:00:17 +0000
Files and hashes: 1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: HsEP9PzFFhprbW87fnU4BVffRGN+70JQ9lEPWtKKXVs=)
3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fe:f5:7d:0a:be:ec:77:c2:f3:34:b0:70:43:ea:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Mar 13 07:00:17 2026 GMT
Not After : Mar 14 07:00:17 2026 GMT
Subject: CN=eed3c547d77bad67ef99fc56e2488cbac2db9c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:6a:8a:f5:68:70:69:28:82:ac:d6:1a:a4:
a0:b0:07:58:90:76:4a:56:31:5d:c4:3b:50:12:c4:
ce:be:ef:23:e7:6d:33:a6:9a:09:fa:75:b2:23:17:
61:f2:58:dd:f7:18:20:c3:70:ea:82:75:a8:d7:eb:
aa:d1:0e:bd:b9:67:b4:d3:70:be:20:b1:ce:aa:0f:
47:89:66:24:87:4f:76:cf:c8:b8:ed:f0:7b:8c:7e:
f9:60:7e:8b:ff:c7:a1:a9:ff:02:81:ed:98:2b:87:
a2:51:5e:9f:ef:84:66:1d:a7:ab:ce:57:13:3b:ed:
23:2f:68:33:26:b1:7b:c5:50:a6:19:7b:25:09:63:
e2:e8:4f:80:1f:3b:89:c1:34:0d:32:67:34:ed:81:
70:99:73:b1:fc:09:61:5e:04:21:db:cd:d3:97:f8:
a6:b7:ff:c7:9e:f3:ab:a0:5d:e6:d6:98:16:7e:32:
e9:d2:5c:87:aa:79:39:d4:be:0c:79:98:7f:7b:09:
7a:5c:1d:9a:98:57:c0:6c:2e:21:e8:de:a0:9f:19:
d3:c7:e4:0f:03:09:9d:39:7f:b6:7e:0e:c9:a0:a0:
2c:7f:58:cc:27:d7:12:be:5e:29:20:18:ac:db:1d:
16:02:86:24:1e:99:6b:9c:76:ee:80:9b:e2:3c:21:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:C5:47:D7:7B:AD:67:EF:99:FC:56:E2:48:8C:BA:C2:DB:9C:38
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a2:71:11:47:4c:05:3a:a1:4d:be:d5:47:47:64:94:8a:9e:
40:21:53:69:ee:16:78:08:c8:3e:da:0b:b6:b4:bc:c6:69:b2:
f8:0b:fd:3d:fc:14:de:43:2c:c8:f4:bf:bc:ea:65:49:67:d8:
e7:1e:58:4d:b3:75:95:b7:22:69:0a:60:19:1c:a8:42:e3:25:
de:ff:19:e8:a1:14:7e:b7:65:f8:cf:37:e4:92:44:c8:c3:78:
5c:c3:72:54:4d:90:d9:4d:20:b3:ba:14:25:25:08:88:c8:97:
3d:ad:f8:76:56:42:16:33:d2:14:1d:0b:93:58:27:cd:fa:cf:
80:12:ac:d4:c4:cd:70:1c:e3:6f:06:a6:69:ab:3f:1e:28:d0:
9a:33:9b:a9:2d:e5:5b:38:5a:6f:31:d0:0d:3b:6a:0c:f0:5b:
61:8b:02:44:d2:da:2c:ff:65:e1:82:e5:36:93:a0:da:fb:11:
cd:77:74:68:dc:59:1f:91:1b:b8:24:1b:6d:c1:2c:cb:21:4c:
95:62:2e:2d:c1:1a:6e:af:5d:34:99:ad:c9:0b:18:d2:10:41:
6f:30:b5:e1:1c:a8:52:69:b9:de:ff:5f:94:2a:8f:e5:bf:a7:
45:bc:3a:ea:05:08:9a:0c:4d:11:b4:d6:57:52:1d:58:6a:49:
8c:b4:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:32:50 2026 by rpki-client