Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: QIdCe2DqWnqRLrOKQikccT7IVAyo3Es6iirzUR19z4Q=
Subject key identifier: 29:1C:13:CD:85:E0:D2:24:AA:99:BF:2B:F1:E5:ED:96:44:58:22:25
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 019D3A537F9D80E7168CFF0C516AC05B6D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 16:00:43 +0000
Manifest this update: Sun 29 Mar 2026 16:00:43 +0000
Manifest next update: Mon 30 Mar 2026 16:00:43 +0000
Files and hashes: 1: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: ygJKzZqXuEe/FKPe0pi9swiea1kNO7D0/FA7GHP09tU=)
2: TY-6wIosCGnW66OWe0_NroPMbeI.roa (hash: nXhbRc2aX8mNZLPnZ6EyWqXf/5jOIvwFHTTVaDOKJ7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:7f:9d:80:e7:16:8c:ff:0c:51:6a:c0:5b:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Mar 29 16:00:43 2026 GMT
Not After : Mar 30 16:00:43 2026 GMT
Subject: CN=291c13cd85e0d224aa99bf2bf1e5ed9644582225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:c0:7b:b1:66:8c:22:ed:4b:91:63:26:5e:
be:a4:d9:4b:09:c7:4c:ea:7c:e2:32:71:90:1c:1e:
8e:45:15:03:24:9b:dc:90:cb:cf:44:c8:4f:2d:11:
70:61:ca:d2:7e:e4:bc:8d:eb:f9:fd:88:b1:a0:e5:
1d:22:6b:1b:c3:f5:1c:d4:33:30:9c:86:db:31:1d:
a6:b5:ee:b2:55:cf:b5:fe:b4:9e:8a:95:28:45:06:
f5:51:9c:a0:d2:56:8a:9a:0f:03:57:8c:58:1b:e3:
53:10:ee:ac:24:b3:56:fd:54:4c:79:a5:7f:7b:84:
b0:a4:73:4e:db:a8:0e:62:d0:bb:c0:4a:7e:3d:55:
b8:75:2e:61:14:7e:57:b6:24:64:99:e1:3f:cb:8e:
07:32:ac:c6:95:4a:02:63:48:87:aa:fc:53:16:e3:
48:71:08:d8:28:9a:c7:19:33:20:9b:99:07:50:43:
9c:68:d5:0e:b7:4e:26:47:41:a6:f6:b0:1f:04:aa:
8c:ce:8d:5c:4f:21:11:b3:f4:c5:25:ae:ae:f7:e5:
69:94:92:2b:c1:3a:03:77:9f:1c:56:e5:67:5a:52:
d4:4d:71:61:cd:5d:9f:ee:7b:36:af:4a:73:49:5a:
2b:ea:8c:ea:81:96:89:84:7d:8e:6a:b7:f4:c7:2f:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1C:13:CD:85:E0:D2:24:AA:99:BF:2B:F1:E5:ED:96:44:58:22:25
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d4:c6:9d:3c:50:4c:ed:d7:f4:c7:0a:f7:53:15:a4:a9:10:
d6:de:06:37:3a:fa:53:8e:2d:f1:30:ea:c0:c1:45:ac:45:07:
a9:dc:ed:26:97:a2:70:db:1b:2d:e5:64:9e:cb:22:db:d2:5a:
0a:16:b2:84:f6:86:ca:88:2a:1c:21:4e:b3:04:0e:cf:fa:37:
34:7a:a8:6b:51:8f:88:e7:20:59:57:76:e4:6d:fc:a4:28:fb:
74:1e:09:dc:68:64:88:6b:00:ae:4a:d0:94:b0:79:7f:e0:b9:
3d:bf:0b:3f:f1:db:ad:99:c4:90:90:1d:4d:06:6f:f2:46:96:
78:d3:bb:78:7e:b4:6e:5e:78:ca:f2:44:00:1d:d3:b9:53:f5:
03:38:77:01:c4:34:68:4c:e7:2a:0d:01:82:b3:80:eb:01:34:
df:41:cd:04:9c:07:f5:f9:ae:95:eb:71:a7:46:b6:e5:fb:04:
bc:e8:62:d3:10:d6:0d:6b:cd:5f:a9:66:64:ed:22:59:fd:35:
f8:76:14:34:8e:c2:b8:7d:48:9c:fa:ae:5a:23:c0:21:8f:88:
74:31:1a:36:1d:d3:b1:91:e6:4e:eb:21:0f:f6:90:6b:45:7d:
00:dd:5b:dd:6d:fa:79:35:c2:d1:93:da:0a:8f:dc:9d:f9:5d:
55:20:24:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:41:56 2026 by rpki-client