Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: IZ7syzFq8Il1q8HkKyiig9D6YXHgzwLv/sQ/Fyk34Nw=
Subject key identifier: E6:5F:3B:8B:BB:ED:60:EE:88:1B:ED:6C:51:8B:FF:83:E0:48:4C:26
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 019D38D2951809602FAB7FB3AF45538F9ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:17 +0000
Manifest this update: Sun 29 Mar 2026 09:00:17 +0000
Manifest next update: Mon 30 Mar 2026 09:00:17 +0000
Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: 42MBubgpr4qhAYWSy/womRPknwDaVtU330G5UQmgv78=)
2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:95:18:09:60:2f:ab:7f:b3:af:45:53:8f:9e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Mar 29 09:00:17 2026 GMT
Not After : Mar 30 09:00:17 2026 GMT
Subject: CN=e65f3b8bbbed60ee881bed6c518bff83e0484c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:74:ce:83:8f:52:a2:2c:bb:6f:af:47:e7:
a3:13:1d:6a:c3:b1:35:70:cb:e3:fb:56:8c:c7:ac:
7f:18:e6:98:17:40:2e:72:03:63:c3:df:7e:e9:fb:
61:43:1a:6a:a7:75:e4:fd:62:b0:f2:9e:bb:5e:f0:
84:2f:10:7c:03:60:93:a1:5b:f4:25:30:6f:fc:2f:
23:0a:65:51:38:d7:f4:a1:be:87:8f:a0:f3:c6:9f:
6b:fa:f4:12:45:f4:6c:9f:99:26:18:3e:9d:c4:ae:
9e:67:56:f9:a4:66:0f:6d:ee:8b:6d:de:7c:5c:27:
79:5f:ae:52:f5:7c:6f:2f:15:d8:da:be:78:59:9d:
f6:bf:09:05:78:36:a7:44:0d:96:2e:98:07:8d:2f:
d0:e8:89:a6:2a:b4:61:ec:6c:ea:71:56:36:8b:b7:
7c:39:84:82:ad:a7:4d:d5:ca:60:50:76:14:cd:2e:
c7:9f:dc:5e:8d:9d:2e:0b:da:ab:52:c2:1e:64:dc:
b0:cd:11:1d:04:2e:b1:65:ea:e5:c0:25:fd:aa:9b:
19:15:1a:14:13:08:d2:ee:50:81:ee:55:f1:ec:3d:
4d:32:5a:60:8d:45:9a:f3:e4:b9:6d:9c:74:50:bc:
62:95:da:3d:ee:8f:d6:96:9d:c1:c1:aa:df:9f:e5:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5F:3B:8B:BB:ED:60:EE:88:1B:ED:6C:51:8B:FF:83:E0:48:4C:26
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:b1:1b:33:c0:50:1f:0c:64:0d:f7:11:08:b6:40:08:e2:
23:8a:99:e1:21:9e:92:1c:fd:c9:55:5e:e3:e5:98:b0:b4:ed:
0b:c4:e3:3a:0e:f9:28:9d:9c:e1:ea:7f:86:c8:aa:c5:23:d8:
44:ba:32:a1:8f:3d:ba:ad:3c:2b:b5:3e:ca:9e:ac:0e:40:02:
1b:e7:23:39:f3:7e:71:f0:ee:93:4b:eb:a6:55:e4:aa:dc:df:
ac:3a:9b:a2:fa:b7:e9:e9:11:69:52:f6:64:1b:71:8c:41:3d:
40:6c:5e:3d:9a:2b:bb:b2:8f:e4:cd:a7:16:5e:78:04:dd:c7:
52:7d:0c:ca:5d:e4:56:35:7c:73:d8:c2:8b:6b:7a:59:ec:64:
4e:b2:7e:88:47:4c:09:14:77:df:40:b0:2a:05:6b:d1:d4:eb:
6a:6a:a6:44:b0:6a:1e:e0:0c:8a:80:f6:7d:8d:7e:5f:72:ff:
12:36:03:c1:19:2f:47:58:84:a4:84:42:f7:4a:8b:bb:50:8a:
29:09:c3:39:50:81:5f:7c:5e:31:cd:9a:b4:f0:9e:6c:ac:80:
61:cc:4d:ff:84:77:e8:55:83:d8:46:cb:fa:ea:29:37:21:9b:
6b:f5:a0:aa:fb:25:e0:7b:12:65:31:ee:af:8b:e6:3b:e6:57:
15:8d:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:11 2026 by rpki-client