Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: xsysP03uwueDBvJnMHF9AtiOBwR8mc/gdzGe8o3nCwY=
Subject key identifier: 5A:F1:7A:58:7A:53:B5:9D:54:EE:24:9F:61:F2:AA:7F:D1:CF:1B:DE
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 019D37F74C64122238CE8FAC60E3BEAEA805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 1548
Signing time: Sun 29 Mar 2026 05:00:46 +0000
Manifest this update: Sun 29 Mar 2026 05:00:46 +0000
Manifest next update: Mon 30 Mar 2026 05:00:46 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: Ro7MYjAEuFTRLoUAZyBTcqU60AVJJCuVA+vSBhJjzSU=)
2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4c:64:12:22:38:ce:8f:ac:60:e3:be:ae:a8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Mar 29 05:00:46 2026 GMT
Not After : Mar 30 05:00:46 2026 GMT
Subject: CN=5af17a587a53b59d54ee249f61f2aa7fd1cf1bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:1e:41:ec:38:30:28:a8:73:36:38:7b:fa:
a0:7a:c5:c6:8b:a5:1d:c9:7e:14:09:f5:76:86:43:
89:98:61:d4:88:d5:87:3a:05:a6:50:e1:dc:18:85:
39:e6:18:ee:ac:09:19:eb:0e:ed:15:a0:b3:ed:fa:
47:16:2a:36:13:30:30:6b:ce:fb:99:3f:e3:8d:64:
b2:cb:2e:de:59:ac:f5:78:d9:cd:2a:e0:42:cf:ab:
3a:d4:0d:e2:d8:18:24:03:72:e8:9a:a7:98:db:7c:
6d:d5:7c:71:35:5c:3e:61:7b:7e:22:6f:c0:32:54:
c5:b1:96:6e:b2:01:cb:6a:50:e2:94:e7:df:f0:eb:
34:8d:75:74:cb:fe:95:d1:8c:ef:2f:54:70:49:1b:
1c:57:05:43:9f:01:c1:c4:6f:a2:9b:82:17:85:3c:
30:23:c7:09:fd:77:0f:56:b0:5a:ee:6f:c8:f0:36:
c5:82:87:c8:51:e2:20:c5:52:30:9d:c5:d2:16:a5:
80:d9:d7:6e:5b:e8:1b:95:8c:63:57:59:ff:c4:76:
b5:a8:0c:d9:65:b0:65:c6:64:0a:13:1a:21:70:35:
b9:bd:55:b1:a4:be:fc:f8:5b:6c:ed:39:77:43:6a:
2c:3f:64:5a:58:88:b1:e7:8b:25:67:14:3e:7a:a3:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F1:7A:58:7A:53:B5:9D:54:EE:24:9F:61:F2:AA:7F:D1:CF:1B:DE
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:10:d0:55:af:b4:5d:2b:62:52:da:a1:e6:eb:88:a6:18:07:
7c:57:6e:f2:2d:f8:5b:86:80:58:66:81:c5:23:be:b8:a6:12:
d4:9b:e1:9d:36:44:dc:5e:11:80:b0:6c:71:da:5b:41:f1:d0:
81:a4:d8:ad:f7:f3:51:7e:4e:1e:39:93:03:76:b8:85:04:d6:
07:19:7c:8c:b7:7c:77:a9:12:4a:05:02:70:27:73:8c:ed:18:
84:9a:30:93:58:67:ab:29:e7:5e:2a:18:73:f0:1e:a8:bc:8f:
0f:c9:ae:6d:3c:8b:22:aa:fc:44:25:3f:da:52:11:22:73:e3:
6d:f4:09:ec:96:a5:e2:35:59:aa:bd:c5:61:71:39:4c:62:10:
c2:ec:1e:95:b3:76:34:4d:fb:64:24:c6:bf:31:6d:d0:08:2b:
09:02:51:63:a7:43:18:b0:0c:c1:48:57:25:14:c9:48:2a:0c:
f0:ce:84:49:5f:d6:c5:46:f1:71:6b:d8:f4:01:99:3a:f5:60:
ae:6e:2f:96:bc:84:b0:2a:65:e1:db:a9:47:dd:24:5a:29:c7:
59:6c:5b:e8:88:78:28:b0:93:a1:2b:62:f8:65:d2:92:93:cf:
51:b0:8e:dd:5c:b5:b3:ef:16:9a:53:d5:93:c1:b2:6b:7b:12:
04:c7:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:15:51 2026 by rpki-client