Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: aS7OHxu1Z/fFS5SgrZWr1I8kiOY8VuwJ/EAzKKglZcs=
Subject key identifier: 11:6D:54:82:FF:F1:9C:E1:A8:4C:CD:C5:19:6F:8D:BD:9C:DA:50:66
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 019CE3A2F86B5744411A56707DC0A5AE0E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 057C
Signing time: Thu 12 Mar 2026 20:00:34 +0000
Manifest this update: Thu 12 Mar 2026 20:00:34 +0000
Manifest next update: Fri 13 Mar 2026 20:00:34 +0000
Files and hashes: 1: 17zD_45Ojk85pCPTQUH6kHV39wg.roa (hash: 2aOFgr3OtXXpdP6T9v8he8K/GmBIDnp5QHJOyXnb+rI=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: cMPzgPHRj1udu+M5vvLyzF0yyB/7K2czQGycxFDqwwY=)
3: tVgtWKf3hovbROlWOuakv2HBNcQ.roa (hash: tZH+J6Wky64drRqnuI4atQm17bvmIikThIiw7SOfunU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a2:f8:6b:57:44:41:1a:56:70:7d:c0:a5:ae:0e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Mar 12 20:00:34 2026 GMT
Not After : Mar 13 20:00:34 2026 GMT
Subject: CN=116d5482fff19ce1a84ccdc5196f8dbd9cda5066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:33:21:b2:38:eb:c3:ff:ad:d9:44:53:4c:
f0:95:eb:2b:a7:9f:20:95:0e:37:2a:eb:8e:38:f3:
90:0b:07:88:14:5f:6b:b1:ef:53:5a:98:30:42:e4:
c2:b1:c9:3b:4d:94:29:aa:d0:d6:52:77:55:75:17:
9e:7d:3c:81:31:0f:6b:d4:ba:e1:d8:9e:44:60:f7:
00:30:f4:59:0a:3f:3e:3f:32:b5:da:3e:a2:46:63:
dd:ba:dd:d4:07:83:bb:51:a6:5f:08:c2:97:42:c2:
30:bc:50:1e:e4:ba:54:95:d1:4d:7d:bc:f9:20:1e:
e8:93:40:dc:8e:f1:08:81:d0:85:32:31:e7:1a:3d:
0d:a4:81:5f:a7:26:07:0d:b6:a3:97:cc:d5:0f:f6:
83:22:ba:a0:c9:aa:02:ab:10:33:42:96:b3:7e:ec:
7c:5a:e5:5e:f2:02:fd:ae:e1:2f:8d:b5:aa:14:ee:
48:9c:6d:17:f2:79:a4:a3:4e:25:4e:30:ce:b5:6c:
9d:ea:bc:01:9f:5b:a4:0a:31:d3:34:4a:f6:3d:38:
9f:56:56:4c:12:eb:e4:0b:37:cf:5e:5d:0c:74:f0:
34:bb:9e:18:6f:ac:3f:65:9f:1e:f9:42:81:52:ed:
dd:10:a3:0f:6f:33:86:1b:71:d6:f9:58:c7:31:3c:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6D:54:82:FF:F1:9C:E1:A8:4C:CD:C5:19:6F:8D:BD:9C:DA:50:66
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:68:7c:e5:f4:7d:1f:89:31:e1:59:80:21:77:41:9b:13:64:
9d:0a:1f:29:60:32:38:83:e5:6d:67:af:61:23:fb:21:58:bc:
f0:20:7a:42:91:d9:5c:0d:04:6f:ef:ea:97:67:0a:75:a8:14:
e1:94:7f:3d:a7:b0:32:ce:db:3a:eb:f0:8f:07:8d:ea:5b:61:
87:c9:fc:4c:47:9d:96:27:ec:4c:a3:77:79:90:f5:50:f2:21:
93:86:bb:78:4a:b5:40:91:b3:28:fc:b8:0e:07:1b:fa:61:2c:
78:b5:eb:1d:5e:16:a1:4c:d6:a1:01:25:14:18:25:d8:1a:35:
8c:83:9c:36:5d:71:c7:95:09:00:f6:ce:5c:f6:a5:9c:c5:13:
60:6e:cc:b4:8f:37:53:ee:39:8d:3a:59:a7:c7:f2:99:5f:25:
af:b4:a1:0b:f3:42:38:3a:75:90:ec:43:0d:14:e2:fe:11:e4:
c7:d8:5e:bb:24:51:bb:20:16:36:17:e4:d5:e3:18:c3:4f:9d:
91:f5:40:39:86:a9:b7:36:44:65:b4:a9:07:3b:cf:ae:c1:90:
00:f9:09:db:cb:27:23:74:c4:01:4c:33:50:c1:fc:da:08:fd:
c8:9b:83:23:ad:f2:f0:ab:82:7a:3a:e2:46:aa:20:b7:ec:6d:
9f:7a:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:13:47 2026 by rpki-client