Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: O41WVkGtdZRiaIdnUS5wyCLsq81oPK+wkPXwQj80/Sc=
Subject key identifier: 87:F5:42:F6:A9:40:67:98:64:7E:39:3B:FF:11:3A:F5:55:D7:EB:F8
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 019D38D3875BA3B53BD247B88527B6255558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 13AB
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: Oo4gFkzjIU8mj7STDhYVI8RT1sV7mq+7uyuVYrZzCZA=)
2: VcfqWg7FbQqb-Uja1uMxHMYRwIk.roa (hash: Lj+UoxvlbBzpt+4S58JMbON1coh0nlAf0RSoB4fN3M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:87:5b:a3:b5:3b:d2:47:b8:85:27:b6:25:55:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=87f542f6a9406798647e393bff113af555d7ebf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:fe:cc:f8:dc:3c:7a:ec:8b:b4:93:27:fb:
5a:1f:76:dc:48:a4:d5:02:04:39:ab:e0:75:ac:f0:
c3:c6:43:68:6e:64:bd:08:5a:eb:36:7f:65:d9:01:
e6:b2:b9:59:60:2d:5a:5b:7c:01:83:22:a7:4e:0c:
3f:0a:91:86:82:b3:dd:ef:60:8b:c8:82:18:f1:0b:
88:e7:60:0c:d4:d0:97:f4:6f:3a:f0:2d:ab:72:1b:
06:a2:db:ef:f8:eb:f2:97:f8:02:a1:29:3d:b2:f0:
34:8d:b9:8b:be:de:ad:1c:b9:20:14:78:ad:fc:a4:
4e:48:91:5e:d8:fc:df:76:7c:8d:9d:3d:dd:14:06:
4f:4a:9b:6d:82:1f:4d:06:64:2a:09:54:51:a0:4e:
0e:7e:43:9f:6e:b5:d0:52:3a:1d:cc:aa:aa:f1:81:
10:a0:9d:f1:6b:b6:c8:0d:7b:ca:d8:72:91:e9:ce:
e3:0e:97:3e:6a:5e:08:81:c2:ea:09:c9:b1:9a:41:
b5:0b:77:88:c9:3f:5b:c4:f0:8a:32:dc:86:88:2a:
17:e6:60:c2:b0:55:9c:21:ec:26:bf:8d:bd:a7:91:
53:ad:89:73:2d:1e:38:86:5f:7a:6f:15:77:53:cd:
91:0b:2e:75:92:31:54:04:0b:ac:d3:19:18:a4:bc:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:42:F6:A9:40:67:98:64:7E:39:3B:FF:11:3A:F5:55:D7:EB:F8
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d5:0a:70:f7:f1:de:30:2a:b0:33:80:92:57:0d:58:c1:c2:
20:e6:50:d2:dd:9c:c4:a2:6e:4c:a3:d9:02:8e:6c:35:d1:17:
5a:eb:d7:26:d3:d0:8c:3b:3c:ba:ff:fb:94:23:0a:92:7f:c5:
ad:db:62:99:9a:6f:92:fd:5b:69:0c:94:d3:34:f0:f3:db:61:
82:86:67:ce:43:98:d3:fb:fc:c1:e7:67:59:2b:3f:67:28:94:
af:23:4a:8f:36:a6:b9:35:c9:32:90:5a:09:8a:b9:15:c7:80:
b5:61:a0:a5:cf:6f:83:8d:fd:bb:69:14:ce:a1:bf:57:22:66:
d7:de:96:15:de:32:21:d8:1e:23:d5:17:5f:41:32:df:e0:68:
66:83:e8:ec:11:f5:fe:58:25:bd:74:b8:2d:a5:76:ec:c6:61:
2c:e0:bb:57:ac:d6:b7:65:43:ef:27:4f:1d:53:3a:fe:10:94:
81:0e:46:e4:37:9d:c3:34:cd:15:11:c9:9e:cd:64:39:95:dc:
f3:4d:70:1b:f5:44:31:10:18:61:d5:cf:9f:a2:c5:dc:e8:c6:
bf:5d:08:df:22:51:b8:2d:ac:de:e8:cf:bc:2d:83:82:5a:9e:
36:99:94:e3:d7:31:e2:a1:9f:da:3b:67:f1:48:49:1e:c9:a7:
a1:ca:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:56 2026 by rpki-client