Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier: EB2pokjs9mZXNaAXkZUc3lwk/p+2ffCEpDGTFs1ze3Q=
Subject key identifier: 62:FA:07:8F:62:05:2F:8B:09:53:9F:DB:42:94:9F:85:ED:B1:2A:BA
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial: 019D39AE969EE032D9AFACAC90DD51FF73E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number: 046E
Signing time: Sun 29 Mar 2026 13:00:36 +0000
Manifest this update: Sun 29 Mar 2026 13:00:36 +0000
Manifest next update: Mon 30 Mar 2026 13:00:36 +0000
Files and hashes: 1: Is0EtUEGPtj5iPMrI__B634d_Gg.roa (hash: UcnAE32bQjXyoFuSdzK7Ox1KjdWOO+CqE8BXmt6ncsQ=)
2: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: CkHKas4i7x3kcLeQo0MK718VF9AISxCYc4ZwT1EwBLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:96:9e:e0:32:d9:af:ac:ac:90:dd:51:ff:73:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Validity
Not Before: Mar 29 13:00:36 2026 GMT
Not After : Mar 30 13:00:36 2026 GMT
Subject: CN=62fa078f62052f8b09539fdb42949f85edb12aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:5e:6c:85:8e:b5:5b:3f:0c:9e:6f:43:51:
11:25:cb:ee:d3:bb:52:40:0e:a9:90:54:cc:63:e4:
0d:06:a7:5e:54:03:71:0c:76:d3:66:6d:d8:aa:49:
89:6d:20:1e:85:0a:38:af:b9:98:ad:d3:22:bf:93:
98:42:dc:a7:8d:c3:f9:67:36:45:b1:7c:b3:3c:a4:
fe:5d:e9:50:ca:7e:a0:ad:d0:2e:c9:b5:5e:28:dd:
55:14:b5:92:3c:30:1e:6c:ee:c5:69:f8:63:c0:b7:
53:b8:18:d3:57:49:31:4d:97:88:85:9f:15:fe:2d:
aa:cc:ea:5b:c1:5f:37:78:8c:85:21:05:a9:fc:9a:
9c:fe:e3:19:7a:6a:93:66:d2:2b:f5:c5:90:65:42:
65:bd:79:99:91:41:e2:e9:be:ab:01:fd:70:de:57:
f1:8e:a9:ed:09:cb:1f:dd:f9:38:c0:06:b6:78:48:
00:54:00:87:18:17:97:e0:41:41:f7:62:6f:00:42:
27:a8:80:2b:9e:3f:72:ef:62:46:ad:90:26:11:65:
88:0d:02:47:d5:a3:b0:90:61:49:0d:03:10:92:3f:
9f:d7:49:76:23:9f:a5:e9:7a:6f:f7:f3:9e:96:b9:
3c:72:37:d4:a0:3d:57:d2:57:b7:80:a4:43:06:a8:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:07:8F:62:05:2F:8B:09:53:9F:DB:42:94:9F:85:ED:B1:2A:BA
X509v3 Authority Key Identifier:
keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:05:9e:f8:5c:f6:a3:a9:69:f7:0f:56:ea:45:89:91:7d:bd:
52:ad:0d:3b:f9:06:e2:a4:bf:a5:0a:8c:9a:3f:6d:78:c4:13:
df:8e:2c:af:dd:dd:11:52:80:d1:6f:f2:9d:c4:0e:90:b8:69:
f3:74:7d:60:82:a7:7a:6b:4f:f0:89:75:d7:e2:22:e4:eb:13:
0c:5b:ed:bd:7e:ef:b2:a6:27:06:7b:3d:a5:87:4b:19:1c:3c:
b5:78:c0:a8:cc:7a:88:ed:f8:b6:71:50:42:a4:cb:ad:bd:aa:
71:bc:bb:bc:ef:c6:a0:e4:94:1d:28:49:2c:67:5a:c6:54:f6:
ae:91:d6:3e:71:a1:65:0d:1b:ee:ad:a3:7d:77:06:2a:5c:68:
ec:3c:4c:85:82:70:b5:dc:d7:52:dd:22:f4:29:0a:70:43:2d:
2b:30:35:5a:67:8a:6c:36:60:9b:84:5a:cb:fa:63:c8:a6:a0:
11:7c:1f:34:f2:62:86:d6:cf:2d:97:08:ae:dc:b8:8f:e0:08:
4a:df:5a:45:58:9f:9d:08:95:b3:d3:bf:fa:06:0d:48:82:9e:
42:1a:91:82:0b:73:ea:cb:f1:32:d6:2d:41:53:60:3c:39:d7:
86:1b:8a:a8:ab:14:fd:75:b0:7c:ed:81:71:77:0b:88:37:11:
7a:e8:2f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:02 2026 by rpki-client