Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: NJ7IrrsPmVZNbsiRKXpmbLx9NRoLYkbxUVsJgQcyI4g=
Subject key identifier: DE:15:9A:85:98:6D:B5:63:EE:D8:F9:AF:70:0E:52:03:B8:DF:20:2C
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 019CE7B6B393D0917C9B2308BE77106E85CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 186A
Signing time: Fri 13 Mar 2026 15:00:36 +0000
Manifest this update: Fri 13 Mar 2026 15:00:36 +0000
Manifest next update: Sat 14 Mar 2026 15:00:36 +0000
Files and hashes: 1: 16Of3nkjMP8UdSS9id5ZJPl_uic.roa (hash: 3kAPeMDB74ONzDFPUBPrWjZx5ADHmGueRoPekMbbEgg=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: wSAXcHQZd/D0pcULvc4DJLOYTy+tEpjd8b7psEWnH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b6:b3:93:d0:91:7c:9b:23:08:be:77:10:6e:85:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Mar 13 15:00:36 2026 GMT
Not After : Mar 14 15:00:36 2026 GMT
Subject: CN=de159a85986db563eed8f9af700e5203b8df202c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:96:3e:16:45:03:97:e0:e1:96:c4:2d:dd:
d4:cb:2b:6a:b5:f1:12:53:64:f6:4d:a3:1c:c2:70:
a6:83:03:40:32:d7:90:3f:64:9e:4e:01:78:5f:2a:
ed:65:b2:cb:97:c5:85:02:44:f9:43:90:42:b2:81:
ae:58:35:8d:c8:be:28:8f:6d:1c:7b:85:e5:65:85:
da:a8:4d:5c:10:1f:67:dc:1e:7e:10:e1:ca:35:4a:
c8:62:24:a1:3f:70:46:fb:0b:20:19:1a:31:12:6a:
4a:48:a7:f8:30:5b:44:0c:2f:61:fc:19:62:56:aa:
60:95:7e:d8:db:b1:d6:be:fb:b3:cd:b7:64:81:af:
d8:a6:18:13:8a:76:3f:77:93:d1:82:25:8e:5b:95:
da:61:74:d5:11:5a:d2:1c:81:b7:24:1c:65:2a:f4:
c9:94:23:dc:81:16:24:c5:fb:e4:85:db:31:a9:40:
6b:4b:9b:5e:19:6c:24:c8:22:9d:d0:17:8b:a6:04:
41:21:4e:5a:ca:8d:c9:2e:12:c8:a0:83:1c:29:3d:
c1:05:b0:74:83:c2:46:87:36:57:2c:60:b6:d8:cb:
22:dd:f2:a4:bd:c5:53:ee:4a:29:02:70:8a:df:b4:
76:d2:8e:30:06:d4:ca:15:1c:96:95:15:69:d4:35:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:9A:85:98:6D:B5:63:EE:D8:F9:AF:70:0E:52:03:B8:DF:20:2C
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ac:b0:9d:6a:db:f6:5a:40:bd:1e:50:e5:71:10:67:a3:c4:
cb:d8:41:ae:61:1b:04:25:1b:06:6d:45:af:85:ff:b0:84:25:
d7:30:c9:8d:de:01:27:2d:0d:e4:0d:98:48:85:33:e9:be:f0:
92:2d:bf:43:81:82:40:72:8e:58:ee:8d:95:71:58:a0:44:ac:
6c:cf:de:85:0f:b5:92:8f:b7:b3:eb:81:a9:e9:e6:8d:9d:60:
00:a5:9f:3b:ff:82:e6:bb:cf:3c:fa:cf:ee:b7:45:77:bb:6e:
93:1a:ec:91:42:ae:24:95:af:af:7a:90:f0:59:8b:cd:41:d4:
6c:07:d7:ac:31:4d:a3:1d:47:10:ab:24:81:ef:23:25:e8:fc:
87:fc:bd:5c:3b:55:62:58:2f:12:0a:4e:c5:eb:f4:4a:5b:56:
d0:73:ed:8b:b5:ea:ab:b4:0a:9d:6d:f1:d7:b3:a1:ce:59:2d:
44:c0:b1:27:b3:c2:20:68:78:82:1a:2a:ce:bf:82:83:c7:02:
0d:8c:02:2d:2d:8d:48:a2:b6:ea:76:85:c9:b9:a4:de:12:73:
a5:14:ca:6d:31:88:2a:6b:75:9e:7d:3a:2b:04:41:03:72:02:
61:8b:3a:e6:e6:88:53:09:0a:47:63:f3:9a:1f:83:35:08:37:
ab:01:a1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:58:36 2026 by rpki-client