Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: RpjVA8G+TsUI0VIEhOoEEhRWPg9ZICsHvqDKf0i/+YA=
Subject key identifier: 06:AC:49:D2:2F:21:54:05:ED:E1:B5:FD:06:A2:09:A2:C2:16:0C:0C
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019CC8D1345040982F8058AA49C59E0EE4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 15EA
Signing time: Sat 07 Mar 2026 15:01:19 +0000
Manifest this update: Sat 07 Mar 2026 15:01:19 +0000
Manifest next update: Sun 08 Mar 2026 15:01:19 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: Spmd4SFe2Bw5iAwzhk3MTC3m+SKBeDP2AHclsVVfsaM=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d1:34:50:40:98:2f:80:58:aa:49:c5:9e:0e:e4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Mar 7 15:01:19 2026 GMT
Not After : Mar 8 15:01:19 2026 GMT
Subject: CN=06ac49d22f215405ede1b5fd06a209a2c2160c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:46:79:ea:5d:18:1d:3f:40:74:71:57:a5:
fa:8f:cd:b6:1d:e8:25:95:a5:d9:05:5c:9f:59:15:
2d:97:cb:14:5b:3e:1f:c8:a3:8e:6b:d6:fb:3e:d7:
4f:23:d1:1b:c8:60:0f:2b:e6:5e:f4:cc:d4:93:ed:
86:a6:81:52:27:ae:c0:46:70:fc:09:a4:fc:f5:74:
17:2e:8a:b9:4e:6f:10:c3:86:82:2b:74:6a:29:b6:
96:4a:82:e6:58:f4:e6:4d:b4:4f:de:99:64:ed:b8:
bc:df:b0:3d:17:c1:3d:ab:97:74:3a:37:c9:a6:b2:
bb:53:05:24:87:7f:ef:71:40:f2:3c:ba:4d:53:68:
6b:93:c8:83:cc:f2:8a:51:86:4d:95:29:39:01:09:
c1:d6:7e:e4:1d:00:0a:10:b6:b2:8f:1d:0b:ba:e1:
58:dc:44:0d:71:70:df:51:a8:1a:97:a1:60:a5:95:
79:af:b5:22:49:b3:dc:c8:a9:08:07:04:38:46:dd:
d7:f9:18:6a:77:9c:d6:7a:d5:a1:d7:28:6a:d2:fc:
05:28:ff:2f:6d:b9:5f:28:d2:fc:64:70:6b:8b:10:
df:11:00:9d:70:16:73:99:6e:b9:fd:62:16:ee:48:
a0:85:3d:1e:07:a5:ae:d6:66:6c:b1:0c:33:7a:ac:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AC:49:D2:2F:21:54:05:ED:E1:B5:FD:06:A2:09:A2:C2:16:0C:0C
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cf:51:e7:6b:01:92:c1:84:7a:59:5e:36:4f:1f:4f:c5:a7:
3d:6b:1d:72:d2:82:8a:0b:61:9f:28:04:6c:ae:2d:27:42:54:
12:f0:d1:27:86:48:b1:84:ed:52:b7:bd:90:33:c4:60:67:2c:
81:70:eb:53:de:94:91:fd:64:be:8a:f1:94:35:20:2d:20:41:
9a:64:aa:03:1c:69:48:be:58:cd:ba:c0:46:36:0f:7e:02:ac:
e7:fe:46:88:66:66:cb:63:3f:f4:da:79:a9:67:b5:f6:a1:e4:
63:9f:82:10:93:8a:b0:41:61:67:b9:9b:62:a5:71:b1:20:d0:
10:fe:f0:b1:01:88:57:18:cb:4b:bd:db:47:fc:18:0f:d1:79:
d5:4d:ed:e0:51:91:41:24:73:a0:08:66:6a:61:f6:c9:c6:c1:
d8:7e:02:3a:89:30:90:db:dc:72:54:b7:e1:80:90:ed:99:99:
fc:29:c9:e6:62:2f:89:0e:7b:a9:50:9f:65:c1:97:d4:c1:c1:
61:56:0b:19:91:55:4c:eb:53:47:5f:12:90:4d:04:6e:87:ab:
29:cf:38:93:6f:24:c9:86:aa:1d:ca:dd:58:4f:20:c9:92:03:
f8:99:bf:e4:ad:53:45:97:29:e6:d5:bd:29:69:63:a9:54:2d:
cb:c9:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:04:27 2026 by rpki-client