Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: NdqdjlEPLURHKvDR+4zdRspsIJD78z5grGe5rL76pzE=
Subject key identifier: 20:49:20:C9:D3:21:CD:90:6C:E8:22:79:BD:24:CC:0D:83:D7:E3:5D
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019D382E1C371C82FD4FC682C4C887776321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 156A
Signing time: Sun 29 Mar 2026 06:00:39 +0000
Manifest this update: Sun 29 Mar 2026 06:00:39 +0000
Manifest next update: Mon 30 Mar 2026 06:00:39 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: Dv4tEkQXy9bGVCB27dBTlXMxtrH3ayb8XUiNbcNR3tQ=)
2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1c:37:1c:82:fd:4f:c6:82:c4:c8:87:77:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Mar 29 06:00:39 2026 GMT
Not After : Mar 30 06:00:39 2026 GMT
Subject: CN=204920c9d321cd906ce82279bd24cc0d83d7e35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:3a:76:41:7a:80:41:d0:ae:5d:58:7c:25:
7d:19:88:3e:95:89:74:11:49:50:94:d8:af:24:07:
da:86:38:6d:6a:f4:89:09:60:4d:97:1b:ef:44:fe:
40:00:99:dc:33:8b:b5:07:6a:28:c6:e0:ba:58:28:
ff:15:54:37:96:42:3f:14:74:d2:99:e2:88:8f:d7:
69:4a:e5:87:68:df:74:d9:48:3e:e4:64:8a:5f:41:
6b:6d:ed:36:cb:f8:08:bc:68:ff:aa:f9:d9:7e:35:
1d:ae:58:c6:6e:fb:72:a9:f0:39:bc:d5:b2:48:2e:
7b:ef:c6:3d:f7:f2:23:f1:46:3f:89:a7:5f:af:2f:
97:0b:e5:b7:0b:dc:90:7c:16:a0:1e:64:68:81:0b:
8d:f7:a3:4e:a7:af:a5:63:f5:05:bd:5e:76:01:65:
28:1d:cc:e3:cf:a3:67:eb:c8:21:e4:fa:b2:6e:d8:
3d:31:fd:be:03:48:51:aa:80:39:52:82:f5:19:53:
64:1a:7b:b4:08:78:8c:cc:23:4e:c1:f8:9e:51:00:
57:91:30:2d:5c:57:ef:1c:0c:a2:fb:f9:c0:84:2a:
d9:79:06:0d:fb:e1:a8:fb:e5:e0:d0:4a:41:37:97:
ab:2b:39:04:00:fa:bb:62:d2:d1:e2:ff:4a:f7:8a:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:49:20:C9:D3:21:CD:90:6C:E8:22:79:BD:24:CC:0D:83:D7:E3:5D
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f6:45:c3:c8:b4:1c:8c:2a:74:b1:9b:49:ee:dc:b9:05:a2:
2d:04:97:e3:ed:e5:6a:40:3c:b1:fc:40:80:a2:ae:b2:ce:39:
75:16:9d:43:df:01:0a:44:ce:60:23:99:d3:52:6b:6f:a6:29:
0a:46:e9:46:a3:7b:01:0e:b7:e1:ac:3a:50:ed:d5:12:7e:03:
17:5b:07:69:db:bf:02:2a:55:4b:e3:3c:10:74:ca:49:26:81:
ba:7b:e3:54:95:bb:1a:a0:cc:cc:63:3d:a3:a1:9b:83:89:3b:
11:d1:04:fd:56:fa:5a:81:59:d7:59:92:01:c3:43:dc:86:b7:
f3:25:75:f4:f4:38:c9:6c:96:c0:01:c2:89:32:50:ed:26:27:
97:be:7e:64:ee:fd:01:b3:d2:2e:07:d5:08:59:c6:a9:9c:12:
ee:6f:ac:e6:bb:0b:bc:85:03:7e:9f:6d:b7:5e:8a:84:31:86:
69:0a:c1:b6:29:6d:68:be:f9:00:64:f5:f2:4c:f7:9e:dd:46:
c7:f6:4f:ee:03:67:b8:76:6c:69:39:f5:5e:c7:25:e6:3d:56:
c1:6f:b3:12:46:98:0a:14:ba:41:8a:66:fe:7b:d6:84:db:94:
8e:7e:3b:de:62:26:87:c8:d9:79:0d:54:12:bb:a3:5d:17:db:
fc:61:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:12 2026 by rpki-client