Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: E/VAlDQTV3I2UtpiPkEk6OfSwqYI5Vym/q4Dp9Z06IU=
Subject key identifier: F4:32:5A:54:FA:06:1B:D3:81:4D:1C:DB:F5:06:96:70:A4:4D:14:5D
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 019D38D2B9226BB270B74899D74ED90EE5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 1662
Signing time: Sun 29 Mar 2026 09:00:27 +0000
Manifest this update: Sun 29 Mar 2026 09:00:27 +0000
Manifest next update: Mon 30 Mar 2026 09:00:27 +0000
Files and hashes: 1: APVxqKMvg7zk562Taso55LCZ43Y.roa (hash: K7kMK7uyiBjgsAZ37sxGRIvYHh9oEyISagZHLGa6SXw=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: Cy47/GYY4kR9dAJ0tq6EuoO4A76txJCsz8SEQIZui+g=)
3: UuN7zLVfjwqep8H3gp4uYYBDSlA.roa (hash: c5uP03tTxyD1867dntdszqVBZixLRyo48/FXuLG4BU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b9:22:6b:b2:70:b7:48:99:d7:4e:d9:0e:e5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Mar 29 09:00:27 2026 GMT
Not After : Mar 30 09:00:27 2026 GMT
Subject: CN=f4325a54fa061bd3814d1cdbf5069670a44d145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:f0:66:22:59:f9:b8:33:a3:f2:95:bd:43:
c1:54:bf:a8:fa:ea:75:43:2e:df:0e:fa:89:36:54:
e6:b0:54:03:63:ac:da:e4:6b:06:3e:53:a4:fe:78:
93:18:98:b9:50:a7:11:f3:28:d6:23:6f:ae:6e:dc:
44:3f:a6:25:da:53:ce:e6:45:34:6b:12:21:0b:1b:
73:27:b6:dc:3f:2a:2b:ab:8d:94:56:13:e5:5e:9c:
b5:0d:75:f4:2d:2c:f2:ed:7d:09:32:1d:f4:ad:cf:
c2:49:8b:e1:60:6a:22:3d:12:d3:46:ec:41:27:5e:
f6:dc:6c:05:9c:58:79:ed:9a:e3:87:b3:a2:a3:7b:
85:eb:cd:5b:72:85:2e:88:06:41:48:a9:40:09:a0:
35:cc:37:00:41:36:06:a2:ed:1d:19:92:4b:09:f6:
0d:01:cf:d2:30:ba:22:1b:2d:dd:19:dc:89:e7:c4:
a8:1d:04:53:a6:a4:9e:51:f4:c0:06:e7:48:90:98:
a1:da:72:4b:b8:eb:bf:17:3d:3a:a6:c7:55:94:54:
f8:18:c8:bd:96:06:86:32:7c:37:e9:1c:72:3e:c1:
78:73:ef:6c:e9:61:0e:21:b4:df:3f:a8:c3:d6:3a:
5e:50:6f:e7:b9:27:56:44:8a:53:7b:13:e9:09:16:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:5A:54:FA:06:1B:D3:81:4D:1C:DB:F5:06:96:70:A4:4D:14:5D
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ff:b2:32:e4:09:d1:c7:60:6f:7c:ef:ce:88:5b:98:c6:61:
c0:18:02:02:9f:53:97:ff:82:dc:0d:b7:3d:5d:09:01:34:42:
cb:07:38:9d:fd:3b:88:e9:64:f8:22:6d:a6:24:60:29:24:a7:
72:27:f4:f5:f9:68:6c:fa:2c:e6:5d:20:fa:af:56:5d:bf:0a:
80:fe:c7:a9:d9:c5:3c:53:13:6d:b9:81:6e:a6:9b:58:f2:20:
fb:25:1e:b3:1b:8b:6a:ab:14:c4:aa:6b:79:bf:3f:81:a7:33:
73:30:39:4e:13:b1:94:ce:0f:19:8b:68:66:5f:22:88:ba:1e:
f7:de:4c:ce:79:7d:53:75:69:77:13:5c:3d:f9:21:b3:29:a1:
05:9f:da:21:b7:a8:62:a0:75:94:b2:b3:da:8a:f6:77:ea:a9:
22:33:14:8f:20:f0:6e:0d:11:3e:be:39:a0:a3:48:2e:57:ec:
ab:8e:de:b9:5d:33:3b:0a:e1:8e:e2:ac:9e:cc:bf:43:21:6c:
58:fc:03:1a:d1:b3:65:43:37:f6:c0:c5:60:61:50:a7:d7:3f:
55:a8:92:f4:bb:b5:c0:e3:af:b1:3a:b5:c6:7b:7d:a7:2b:b8:
04:a5:c2:ec:ae:c7:4e:61:04:a9:61:87:bc:13:15:8c:3a:76:
f4:b4:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:06:57 2026 by rpki-client