Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: yaAZS3M+YcnpIirNp4JO90JGPThspio4D6NoEi29P1I=
Subject key identifier: 29:29:0D:AB:54:B4:3B:65:54:CA:AA:79:21:EC:E6:B7:93:29:0D:4D
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019D0778D3281A44731F2C8AA3B7C3275F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 155D
Signing time: Thu 19 Mar 2026 19:00:51 +0000
Manifest this update: Thu 19 Mar 2026 19:00:51 +0000
Manifest next update: Fri 20 Mar 2026 19:00:51 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: qvptEiQQ8frBeUiERDti/0NfFuUqc5mbfwktkQ3dhV4=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:78:d3:28:1a:44:73:1f:2c:8a:a3:b7:c3:27:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Mar 19 19:00:51 2026 GMT
Not After : Mar 20 19:00:51 2026 GMT
Subject: CN=29290dab54b43b6554caaa7921ece6b793290d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:ae:ee:0a:8d:9c:7a:32:eb:84:86:ae:06:
04:28:79:eb:6c:c8:a6:d2:a3:07:5c:b0:e9:2e:0c:
3f:5a:14:85:f5:99:6a:17:a2:fa:38:e5:42:03:d8:
e2:9f:04:4f:5f:50:44:41:d5:b2:9d:88:5f:1a:66:
31:36:bd:e0:a5:b6:55:ac:0d:df:0e:5b:4a:c8:6b:
f3:d3:76:64:f1:82:40:88:21:11:1f:c9:e4:1b:86:
60:0c:03:7d:93:79:c1:db:36:30:84:59:cf:e4:49:
30:23:ef:9a:77:e5:29:2b:c4:e3:36:55:5e:89:0c:
9e:4f:10:05:54:ce:30:f3:b5:bb:09:30:61:19:8f:
c9:fe:42:96:d0:a9:7c:c1:e0:02:df:3d:d3:94:7e:
11:e8:30:21:08:94:ec:c5:15:d2:2f:4d:2b:e5:6c:
a2:74:c7:81:80:af:49:7c:4b:87:b5:29:30:82:39:
61:ed:dc:fe:57:28:81:5e:b8:16:21:6b:72:c7:f0:
4f:1b:57:a6:ef:92:13:69:eb:15:71:b4:61:ca:b7:
3d:1e:5b:c7:67:76:3b:73:22:ad:de:ea:70:53:c8:
f7:77:d4:21:44:0e:64:1e:c1:86:fc:e3:e5:d5:b4:
c2:a8:49:88:30:63:2c:0a:c7:c4:03:30:79:4a:36:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:0D:AB:54:B4:3B:65:54:CA:AA:79:21:EC:E6:B7:93:29:0D:4D
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:31:b1:93:79:46:97:89:46:aa:49:a2:2a:2c:52:e1:f6:22:
cf:05:ed:26:a1:28:b3:e5:cb:20:83:ea:40:a5:a8:05:57:af:
70:5a:9a:16:19:22:ab:0c:cb:6f:2f:fd:de:13:cf:1d:0c:e9:
19:4c:8e:10:a5:b0:99:bc:04:f0:4b:20:97:10:fb:8c:5e:0b:
34:c4:ea:cd:f9:5a:24:62:01:a0:0d:89:68:d3:f4:a3:a7:e7:
41:fb:10:83:8a:04:57:81:30:d6:6d:81:bf:15:01:39:92:c8:
e7:70:c1:92:67:fa:6b:11:37:6d:31:f7:c7:27:c6:5d:70:8f:
45:ac:7c:e0:77:a2:99:1e:3b:51:b2:07:e6:1b:82:4d:6f:2c:
8b:7f:1e:44:2b:50:22:b4:3d:64:3d:36:f7:0a:0f:bb:b2:14:
85:3b:f1:fd:6a:ce:02:99:a6:60:73:25:e0:f2:38:af:b6:f5:
92:f7:4e:b4:6f:b4:2c:11:99:f4:59:5c:29:67:aa:41:c0:80:
61:da:10:c0:a4:97:74:ed:27:4e:b5:d8:24:7b:c5:8e:2b:75:
bc:ca:54:66:aa:36:59:d1:44:7f:29:7e:8a:cb:92:a5:83:79:
ce:19:ea:c5:4f:8e:22:72:e1:23:50:24:a0:62:8e:db:bc:ce:
2a:40:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:16:31 2026 by rpki-client