Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier: q3/xTUIAABAcGJaNUHSrB+hZhspdUZBF7L0MOV4KyPM=
Subject key identifier: 44:00:35:DE:22:0D:FB:D8:6A:B5:82:7F:D2:43:D3:F8:4E:A6:76:0E
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial: 019DF0EED80852C44B90F271861633DE3E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number: 1842
Signing time: Mon 04 May 2026 03:01:17 +0000
Manifest this update: Mon 04 May 2026 03:01:17 +0000
Manifest next update: Tue 05 May 2026 03:01:17 +0000
Files and hashes: 1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=)
2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: i7oNwAVzoHbwYNFmCsvqhVvmjVYmqRmrKnB9FmLMn1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f0:ee:d8:08:52:c4:4b:90:f2:71:86:16:33:de:3e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Validity
Not Before: May 4 03:01:17 2026 GMT
Not After : May 5 03:01:17 2026 GMT
Subject: CN=440035de220dfbd86ab5827fd243d3f84ea6760e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:78:d5:a6:2c:30:73:16:3f:59:a5:72:dd:
5f:bc:ac:25:1e:2d:b2:80:f5:c3:bf:c2:0a:40:84:
a0:18:3b:b3:8c:2d:a4:16:56:4e:62:d1:5e:13:c9:
95:ae:bd:54:37:44:05:5e:c7:a7:6f:c8:30:40:39:
d3:e0:b4:5b:05:91:5f:2f:07:22:6a:27:43:4a:31:
88:33:66:5b:c9:86:6d:a0:7c:0c:9e:17:06:3d:64:
4f:87:3c:27:e0:9f:3b:7e:ab:33:e3:48:44:55:21:
00:9e:35:e4:e1:42:65:10:7e:a6:4c:a7:9b:65:3a:
34:44:6e:24:0b:fb:81:95:5b:6b:a8:e8:ed:7f:25:
13:c0:e7:83:b4:30:4a:bf:ee:41:11:d2:fe:de:ec:
39:0b:fe:5f:10:ff:13:f1:42:2e:1d:ae:9c:6b:ad:
f5:a6:50:42:15:47:79:c6:4f:bd:47:ff:b8:63:f3:
af:d6:14:ac:2b:30:2d:e7:ad:e4:d9:9d:e2:0e:62:
7a:99:e3:e8:a1:ed:d0:0e:39:d8:9d:e1:e0:c4:36:
91:d7:21:9b:69:fe:26:d2:b9:4e:15:ee:ac:7c:40:
f4:cd:26:ad:12:b1:62:58:6b:45:d1:59:0a:4a:e9:
ba:65:5a:72:18:e7:05:9c:43:b3:dd:01:32:66:e4:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:00:35:DE:22:0D:FB:D8:6A:B5:82:7F:D2:43:D3:F8:4E:A6:76:0E
X509v3 Authority Key Identifier:
keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:da:ca:5a:b7:bc:b2:ef:7d:6a:3f:cc:1d:a5:e5:96:28:4c:
00:44:b3:62:8f:40:1e:57:02:95:b5:5f:58:c6:57:fb:6b:9f:
78:c2:e6:b7:e6:bf:28:0a:3e:30:03:6e:b4:0b:49:80:62:8f:
fd:60:b5:89:13:5a:05:06:84:ff:02:bf:57:e3:32:22:6b:7f:
44:e1:0c:66:16:aa:74:22:09:4e:8b:cc:39:c1:7f:2a:ab:12:
a7:98:c9:38:86:a6:12:2f:a0:a6:0e:5d:39:14:37:eb:69:ae:
50:c9:fc:5a:d4:ce:7b:dd:be:46:47:48:36:1d:58:00:fa:83:
54:06:17:dd:f1:23:5b:64:2d:e0:31:dd:19:f1:de:a8:82:9b:
d4:03:ed:55:85:d7:23:07:89:9b:92:5f:2d:6f:83:69:d0:ec:
80:6e:c0:fb:d8:8c:fb:5d:66:19:fc:13:78:a0:27:f4:a9:a6:
1a:96:35:83:b2:2c:d4:33:06:0d:b8:f4:b1:b4:58:e4:af:1a:
d4:ae:d5:13:1e:36:36:2e:3d:48:3b:00:28:ec:35:fa:83:e3:
e9:23:0f:50:9c:ab:7b:82:50:2f:02:01:2d:5e:24:eb:ee:df:
fd:9d:44:e2:fa:3e:82:03:cb:a3:3d:90:21:62:88:ef:32:a3:
4b:68:b7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 13:22:05 2026 by rpki-client