Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File: QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier: ibWvybzap1UPNRhN+/QKh/imIbf5ptEp7d4lU4y6Z6s=
Subject key identifier: DC:98:3B:61:6C:C7:82:C1:5E:21:A2:78:AC:E6:C0:DC:C9:7B:57:07
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial: 019D389BA56074039EE1CF8CE54034ABC2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number: 153C
Signing time: Sun 29 Mar 2026 08:00:17 +0000
Manifest this update: Sun 29 Mar 2026 08:00:17 +0000
Manifest next update: Mon 30 Mar 2026 08:00:17 +0000
Files and hashes: 1: 3PqCBsnwrek6Q6n5klUn2vxcEVE.roa (hash: SqGyC3AtR5IMiR3v88dUPZnBKw3fI3oEx2k+/NhUD6Y=)
2: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: n6YGNHWVqj4od081s4sJcZChAvt7htlEFpc7C58KZxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a5:60:74:03:9e:e1:cf:8c:e5:40:34:ab:c2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Validity
Not Before: Mar 29 08:00:17 2026 GMT
Not After : Mar 30 08:00:17 2026 GMT
Subject: CN=dc983b616cc782c15e21a278ace6c0dcc97b5707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:39:61:04:de:c3:62:61:17:d2:b2:e6:63:
ea:9e:cd:16:65:ae:1c:28:2d:8f:83:5a:2e:22:89:
54:46:92:ea:c3:2b:9f:93:94:9b:ed:86:00:cb:d4:
b9:2d:de:6f:cc:24:28:67:69:bd:4f:18:28:50:3f:
66:4c:d2:5e:ac:94:c8:6b:4d:d8:cd:ac:62:0c:c9:
11:5f:82:69:38:06:8b:b6:c8:5b:09:0e:37:7d:e5:
45:fc:a4:3d:3f:5e:c2:50:6a:36:24:dd:d6:49:f0:
64:ba:49:18:5e:94:83:ee:52:c5:d6:4e:96:98:7f:
a7:23:81:35:fd:b8:b7:23:b6:09:50:7f:ce:e6:21:
76:b3:cc:d5:3e:d9:e6:8b:c8:f9:e4:06:e5:5b:a9:
d1:a3:9d:45:f7:47:56:18:60:6a:c9:a3:60:d2:25:
3c:09:63:c5:f1:ab:be:c1:e8:c3:d2:34:55:03:72:
6a:28:71:3e:91:3b:27:52:83:b6:87:ec:6a:1c:a5:
b8:e3:cc:91:d8:d2:5c:0b:5d:eb:fd:35:8a:85:17:
4d:48:c9:af:0e:49:7d:92:4e:a2:05:55:7e:12:f4:
0a:a3:95:0f:f1:20:9a:75:4b:6b:2a:b8:53:8a:75:
6f:6e:18:52:e7:f7:98:b9:60:e8:94:c2:76:c1:44:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:3B:61:6C:C7:82:C1:5E:21:A2:78:AC:E6:C0:DC:C9:7B:57:07
X509v3 Authority Key Identifier:
keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:18:ff:1a:65:40:81:46:86:14:80:ee:e3:a1:ea:15:22:
23:d5:4c:1b:4f:2a:e4:64:95:5c:ef:53:cd:2b:ea:a7:dc:a7:
0a:88:bf:78:b5:c8:32:cc:0f:e4:81:b0:a6:a7:b3:26:ba:97:
18:0f:7d:cb:8a:6a:eb:7c:60:48:61:51:f2:0d:7f:02:3b:5a:
71:65:64:b3:b0:17:a5:af:8b:0a:e0:62:d0:84:2c:f6:82:24:
5d:46:81:d9:e6:eb:40:2f:c7:d3:14:22:b7:d1:71:76:99:33:
d1:d1:47:8b:58:9f:51:fc:80:d2:90:2e:7b:6a:7c:05:d0:a3:
66:a1:83:e4:51:80:77:3d:ca:3e:6b:2e:81:a3:14:fb:cd:58:
80:31:78:5e:99:6d:e1:48:28:ea:e3:fe:13:a7:c8:97:fa:52:
84:50:f2:16:4c:f6:45:64:e1:b3:37:3d:de:f0:17:f8:9a:5b:
f7:95:82:9f:0b:52:75:43:69:aa:ee:d6:68:49:44:09:8e:0f:
30:c5:23:db:c8:3e:7b:3a:66:24:24:38:78:8f:f4:6a:77:16:
29:d6:4b:26:40:4d:f3:bd:b6:5f:96:71:bc:95:14:ed:66:03:
6c:bb:cd:0b:3d:a9:cb:8f:49:47:41:f0:8f:29:a3:f9:84:18:
14:4f:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:12 2026 by rpki-client