Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: FNPPPYQYmWDF2dXG05/3dbT6AR2MWN7w9zhlhfPHdFw=
Subject key identifier: 17:2D:BD:E7:3F:CC:85:F1:EA:37:ED:5B:3A:91:0B:5C:7D:81:15:1A
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019CE47F45536B197BF60B4664B49C27BF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1795
Signing time: Fri 13 Mar 2026 00:01:11 +0000
Manifest this update: Fri 13 Mar 2026 00:01:11 +0000
Manifest next update: Sat 14 Mar 2026 00:01:11 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: ngOatM87AiXNH857/g3rQxYpbRHC/2JCeBKt0F+5OCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:45:53:6b:19:7b:f6:0b:46:64:b4:9c:27:bf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Mar 13 00:01:11 2026 GMT
Not After : Mar 14 00:01:11 2026 GMT
Subject: CN=172dbde73fcc85f1ea37ed5b3a910b5c7d81151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:63:c2:e4:d2:ec:57:b6:f9:3e:2f:ff:2f:
79:07:5d:8c:fb:4f:1f:fa:68:4f:aa:cd:22:47:84:
a7:7c:13:f7:66:4f:e6:34:aa:bb:51:7d:04:18:53:
62:a2:28:36:24:d3:35:f7:51:4b:28:ff:7a:06:72:
f9:08:2c:c9:7e:df:8a:f3:c9:59:cd:96:5a:ac:ab:
4f:5f:cd:5b:96:02:d3:c5:f7:55:2c:be:dc:78:83:
e3:a5:b4:ab:84:0a:5f:86:03:0e:8a:72:e8:c5:1f:
9d:89:10:a3:a2:90:de:eb:94:59:9c:f8:1e:d7:ce:
36:fe:18:b7:84:c5:ec:df:94:82:d7:5c:86:d0:e8:
5c:95:40:b7:78:68:e9:12:e6:71:cd:8a:97:12:ce:
2d:c2:51:0c:e4:98:23:f3:ef:c1:ea:6b:47:f5:13:
ca:ad:08:07:a7:03:d6:32:3e:4c:d3:3f:d1:7b:f9:
21:47:8f:a9:65:54:d8:fd:4b:2f:78:d6:66:0f:b9:
55:23:b0:fe:fa:87:9f:d0:81:75:55:63:36:ad:f2:
83:84:c5:24:ee:ee:c1:6c:a0:46:b8:a1:a7:6c:24:
29:bd:3c:af:71:f3:f2:3b:d9:5a:62:d6:a4:9d:4d:
74:15:e9:d3:d2:3d:91:6f:15:1a:2f:65:16:5a:40:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:BD:E7:3F:CC:85:F1:EA:37:ED:5B:3A:91:0B:5C:7D:81:15:1A
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f0:57:10:5e:35:fd:81:92:25:52:29:fd:12:0c:59:b7:03:
79:71:ac:b4:37:93:48:06:1f:06:14:b2:10:59:e6:e0:56:87:
4e:8d:48:7e:19:f0:a9:3a:95:0a:f4:8c:f4:ce:12:8c:93:28:
66:5e:42:d1:d1:65:1e:0e:de:83:7c:ad:b5:b4:26:e5:8e:31:
5e:f1:99:74:03:ef:b6:df:f3:de:4d:63:04:8a:c2:eb:d0:35:
87:72:51:2f:9b:ba:6b:f9:70:19:d1:ca:65:21:07:0e:f7:14:
d9:6d:a6:8a:15:c4:99:d3:36:59:ce:bb:a7:db:5b:fa:f2:71:
2c:bb:68:ba:54:7b:5e:ac:40:d1:24:e5:5c:92:56:a1:ae:72:
90:ce:3b:38:08:c8:c7:4f:e7:29:dd:10:d2:d2:5a:c0:e6:8e:
35:05:59:86:a6:44:3f:df:60:84:a0:e1:25:2a:6d:34:0d:d1:
0b:0a:c7:ec:89:f9:1c:52:0c:14:21:5f:91:e9:05:24:bc:62:
e1:b5:0f:d5:3c:59:da:2a:9a:1f:3e:ae:a4:d5:45:88:0a:a8:
43:6a:b7:14:d0:d0:a6:9e:70:ea:66:c5:f7:8d:f0:f6:5b:35:
90:33:16:12:41:86:ac:b5:83:25:45:a6:f5:79:d6:34:35:a9:
55:8b:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:40:19 2026 by rpki-client