Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: vn2ls3xMM0HY400hrwJfkH4X2FX6Bpl+hgZU/SHWPqs=
Subject key identifier: D1:96:EF:67:93:7A:E0:AD:84:28:0E:FC:B3:B4:C6:3F:E7:73:4F:ED
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019CCA88356708136297C5F8B2A65A5FBF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1855
Signing time: Sat 07 Mar 2026 23:00:49 +0000
Manifest this update: Sat 07 Mar 2026 23:00:49 +0000
Manifest next update: Sun 08 Mar 2026 23:00:49 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: gyu7N0koNLRma3tWvKfLP8JcaVVMICvSVYcQ276cLxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:88:35:67:08:13:62:97:c5:f8:b2:a6:5a:5f:bf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Mar 7 23:00:49 2026 GMT
Not After : Mar 8 23:00:49 2026 GMT
Subject: CN=d196ef67937ae0ad84280efcb3b4c63fe7734fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0a:b7:03:8d:1c:74:aa:4a:30:23:9d:0c:b0:
21:72:51:95:9d:ab:b5:35:c7:0d:a4:8d:8c:8b:e5:
20:9a:7a:30:76:cf:f6:12:76:62:52:42:af:50:91:
00:00:d6:3f:59:1d:7a:5e:1f:77:45:92:06:6e:6a:
32:00:6f:9c:91:57:df:b1:37:30:6e:8d:73:1b:48:
05:8c:04:37:f0:5f:56:45:75:71:cf:08:aa:59:30:
10:b7:33:17:28:0e:ba:89:da:e6:0d:d8:81:77:a9:
ba:7b:f9:6c:fb:20:79:7e:c1:91:14:3b:01:93:13:
62:bf:b4:78:2c:f6:29:04:b5:78:8e:51:ce:c4:5d:
6e:a1:67:4f:d6:94:f8:5c:ed:b7:35:f7:78:d3:42:
b5:c1:1c:33:ca:83:27:fd:a7:f6:ae:35:d2:39:97:
68:9b:7a:fb:b9:58:1c:4b:be:ca:1c:31:70:7c:31:
2d:af:20:80:58:c1:fe:87:73:76:d2:a2:7b:ac:f0:
3e:75:7b:42:03:d6:60:ec:7c:60:d2:db:1d:ef:7f:
09:1d:1e:7c:6c:cf:5b:bf:5e:79:a3:db:db:9e:aa:
e9:66:8b:84:02:dc:a9:18:9b:19:0d:38:c4:52:4f:
0c:c3:56:21:6b:5c:d2:55:98:c7:44:fd:d9:27:2c:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:EF:67:93:7A:E0:AD:84:28:0E:FC:B3:B4:C6:3F:E7:73:4F:ED
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b9:02:a1:99:a8:f5:23:27:2b:8a:23:8a:f8:a6:ec:f2:4f:
07:3e:ea:44:8f:dd:cc:0e:ae:e9:ae:b1:39:37:0c:10:01:ef:
10:77:ea:94:4d:b5:53:05:fb:5f:93:6d:92:4c:48:2b:36:55:
fe:61:5a:ce:f3:df:0b:4b:d3:cd:b2:37:d0:c6:c0:c1:4f:6f:
fb:35:7b:e5:45:f5:c3:ed:36:b8:b8:93:23:1a:a6:1f:30:ee:
ca:a4:dc:50:d9:39:25:89:0f:3a:10:39:75:ee:17:dd:78:56:
55:ca:d4:f3:9d:3b:e9:b8:ac:a3:8c:01:26:a3:ad:7d:1e:a9:
ef:d9:9e:68:80:41:d1:9a:9c:90:d5:ab:af:70:af:97:b0:a1:
ef:7d:a6:d5:bd:f5:63:c1:4f:07:87:56:2a:36:b6:94:e1:b5:
42:c3:70:c3:45:45:aa:83:66:73:2d:13:f4:ec:c7:de:72:81:
d6:b8:0d:1b:94:17:64:3b:5d:6f:b4:c6:3f:e1:57:69:32:7e:
b8:24:0c:29:a5:24:50:e6:1a:88:b9:d0:38:1d:43:2f:37:7c:
e4:33:98:e1:7b:9f:31:17:a4:a8:27:86:5f:02:93:a2:90:d7:
ee:73:b9:90:8b:cb:ca:fd:a4:94:88:81:67:77:97:ba:c1:89:
eb:0b:16:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:12:52 2026 by rpki-client