Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: SVfy4I8czlBkuzPMiOWiJyURNw4+sHqTQdC1AuxwrOA=
Subject key identifier: 64:37:C8:F8:6E:EA:B3:BD:C4:2C:3C:CE:04:C9:15:1C:92:F2:62:85
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019D3977E116D1DA23A502B95C0F3B01A7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 1596
Signing time: Sun 29 Mar 2026 12:00:50 +0000
Manifest this update: Sun 29 Mar 2026 12:00:50 +0000
Manifest next update: Mon 30 Mar 2026 12:00:50 +0000
Files and hashes: 1: 7AZcdK-2iSMlF0mV6xbUMSO3Xnw.roa (hash: G5rGJtONXIdV22l8uGfiFrqq42pAnIm3ZbpijKWWsuw=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: o8YS2zDQNddJYUDIPP+4q8T1GWE6510aUeehIXwnAkk=)
3: SED4pOneSK1Nz4GXJ8sxeamW4bA.roa (hash: rv2mx30pNaTbk2/jVNoTsekRApJk2qpOrI2G/ZbcQfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e1:16:d1:da:23:a5:02:b9:5c:0f:3b:01:a7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Mar 29 12:00:50 2026 GMT
Not After : Mar 30 12:00:50 2026 GMT
Subject: CN=6437c8f86eeab3bdc42c3cce04c9151c92f26285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:48:2d:3e:46:28:af:18:a6:5d:92:e8:5e:
b6:0d:1c:6d:ef:c9:a2:e5:f3:8b:fe:d8:4c:bd:1e:
bf:96:eb:fc:4c:6d:67:eb:8c:bf:dd:f4:3f:8d:53:
7d:15:e0:2b:41:2c:c4:eb:9f:2f:5b:f5:e2:60:43:
d2:31:d0:de:4e:e6:25:c3:8e:44:67:48:be:14:d8:
74:a9:f0:a2:4b:06:dc:a1:e9:67:be:25:05:5a:2d:
86:55:50:79:19:b8:63:85:cd:c2:4f:ed:95:07:1a:
99:11:37:42:00:4e:8d:ec:21:2e:78:4b:99:12:fa:
fd:61:73:aa:60:f5:30:6e:5a:78:eb:4f:d8:d8:cc:
3d:e9:79:c3:96:bd:7b:20:08:e2:e8:74:2b:e3:9f:
e9:6b:01:54:b2:7a:76:4e:b7:4f:f6:5f:0d:49:01:
8a:02:6a:bf:1f:31:24:c8:f6:4b:5e:78:bd:0c:17:
39:12:43:04:13:98:3a:6e:47:83:ef:19:22:5e:08:
83:a9:b4:b1:2a:e4:a9:bd:1a:62:05:29:4c:43:e7:
8f:bf:9c:5c:78:95:24:d7:2b:8c:a9:64:0d:a4:9e:
c5:8b:2e:58:12:b8:75:0a:c0:24:06:ff:eb:ba:28:
67:8c:8b:f2:76:2f:6c:ad:69:43:c8:ec:ac:be:e7:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:37:C8:F8:6E:EA:B3:BD:C4:2C:3C:CE:04:C9:15:1C:92:F2:62:85
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a8:ca:ef:f0:95:50:b8:35:27:7c:2b:46:d0:5d:2b:94:83:
5c:63:82:8c:c0:1d:82:b3:f8:1a:d7:06:79:61:ae:1b:0c:46:
56:24:92:f3:5b:05:27:29:d4:92:1f:c2:61:9d:07:23:7a:3a:
79:14:6f:82:8f:34:7f:54:50:0e:67:b4:66:35:81:64:3f:fa:
bd:a4:59:48:b1:b0:ab:c3:5d:50:2e:d5:b3:fc:ab:8d:d8:eb:
f9:bc:63:97:6e:93:e2:03:b1:02:0e:9c:84:4e:f0:14:27:55:
6c:82:cf:8c:a8:a1:ef:b9:c9:a1:53:95:aa:d0:f9:8a:59:8c:
60:d0:fa:be:c6:29:99:92:96:9d:87:74:41:8d:ca:09:72:c3:
8f:67:80:85:9b:1c:18:a5:b5:92:b9:8e:34:2b:05:17:c8:85:
e0:b6:97:c6:ae:a3:e8:56:53:1b:9c:b8:0c:e6:45:0f:71:5c:
0b:ed:6c:00:69:30:c9:c2:0b:40:37:e1:b7:ba:e1:c2:df:94:
1b:a8:19:24:ae:33:7c:4b:1b:c4:f9:3b:6e:1c:e4:c6:86:a1:
55:f1:d4:6f:58:d4:27:73:53:4f:89:5d:d6:32:ae:50:bb:b8:
da:98:ff:1c:ec:4f:d8:11:30:00:da:0f:94:c5:aa:50:95:8a:
57:cc:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:04 2026 by rpki-client