Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier: vLjuwDwM6D+ZninQIr1t/XTwBPFI284zFLY6nPkvbpE=
Subject key identifier: 41:27:B7:13:EE:2B:AF:C5:3A:AF:34:2C:2E:CD:54:AB:37:40:5A:ED
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 019D3977DF2749174264D317E7560A849B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 12:00:50 +0000
Manifest this update: Sun 29 Mar 2026 12:00:50 +0000
Manifest next update: Mon 30 Mar 2026 12:00:50 +0000
Files and hashes: 1: Dxm0EoxGp2ndo74sPdVeeXzoflk.roa (hash: yNKkIjFKgCoECJezorrDtiFQ2gdUXVgat36+B1ETObs=)
2: OMxShmSN_MmgdqjB3FCH456QPyw.roa (hash: Vm7cRKSz6QpnQGwyuo2jJgMyLFID06ztzYaKVdmY098=)
3: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: 7z3EuNbOTUIvG+KsunuyFYSGukSfLmVhgSHZ2UjS4gM=)
4: VLAKggAmP_2e5ujcu_orpJmGymk.roa (hash: R7zarhFK+F6qeI1f2Us/zQph/cT5R9wLEpRj2LShETc=)
5: g_4YB2ktK_BZdQW2jisjb57z4v4.roa (hash: FrWnOJyYlT2BDuUH41B6UfYjVVUxab5ezAoKnJ2JP3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:df:27:49:17:42:64:d3:17:e7:56:0a:84:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Mar 29 12:00:50 2026 GMT
Not After : Mar 30 12:00:50 2026 GMT
Subject: CN=4127b713ee2bafc53aaf342c2ecd54ab37405aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:38:2f:c8:dd:20:6b:27:fb:9a:a0:9f:ed:
ae:66:d9:01:60:3d:2e:7e:de:96:4a:cc:3c:15:ce:
a1:7f:ac:91:9e:bf:19:84:c9:b8:8e:ed:72:f5:1d:
cb:2a:e8:2a:1b:2f:68:76:e5:37:e0:d2:42:23:08:
80:3c:b2:51:9c:ab:a5:41:b0:25:5f:f4:d1:7e:d5:
ba:8e:e2:d4:bd:1c:70:71:41:ce:bd:09:91:6d:31:
30:5b:a1:c5:0c:6d:86:86:dc:13:7c:a5:19:75:d4:
7a:ba:ee:c4:02:56:9c:e8:96:ae:11:17:a7:2f:16:
4b:18:1f:10:19:a5:90:37:d7:a2:9d:3e:81:5a:ea:
41:0a:4c:41:17:d6:f8:70:06:55:aa:c6:fb:6d:e7:
1d:33:16:bc:3d:eb:28:6b:4c:2a:61:a8:96:30:af:
de:5a:22:58:27:89:cd:d7:a2:da:f0:eb:d6:d5:10:
17:2a:f3:18:ab:65:eb:e7:16:74:2d:97:8c:39:a1:
bd:1d:d6:b8:79:d6:df:a2:f9:7c:2e:37:cd:af:0e:
de:c2:5c:ae:02:33:04:9f:a3:eb:8e:77:87:2e:6a:
26:8c:e3:83:9f:f0:b7:7c:ae:92:bf:38:8d:91:08:
96:68:f9:16:fb:31:43:37:d0:a9:df:ad:65:e1:4b:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:B7:13:EE:2B:AF:C5:3A:AF:34:2C:2E:CD:54:AB:37:40:5A:ED
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:28:e4:44:74:16:fc:52:19:e7:6b:35:89:e8:77:e7:56:c9:
bc:f5:f5:f5:de:34:aa:97:a6:17:fb:71:57:27:3a:08:9c:09:
8f:b1:ef:c2:8b:96:8a:bb:d2:fa:40:f1:31:75:ba:1c:02:a9:
0a:59:cf:df:d3:4a:c5:2e:2a:ef:5a:f3:39:c7:5b:87:60:72:
09:14:bf:ec:29:f1:ec:b3:85:65:df:1f:e6:93:10:41:05:e2:
36:9d:10:7d:5b:5c:62:3b:a7:c3:cd:87:03:59:33:b8:8c:fe:
24:d4:72:fe:8c:1b:44:73:a5:73:75:5a:b3:5c:55:97:9a:ca:
c4:3a:05:e9:b8:8d:92:e8:e7:4b:b4:d2:03:a3:b2:eb:14:af:
60:61:6d:5c:b2:b9:15:2a:d9:fd:e2:46:2c:2d:7b:94:7d:5b:
f2:90:3c:d9:20:79:a5:d6:c6:58:07:fa:a8:7f:07:73:28:67:
38:13:44:c1:17:1a:6a:a8:18:88:4e:84:38:6f:6c:55:d7:29:
8d:7d:92:f4:af:0a:42:6e:33:3a:e2:ef:98:24:f5:eb:f5:c5:
34:39:20:f6:cc:be:8b:21:2e:19:2c:42:90:fd:75:19:38:c0:
bb:b4:1c:20:b5:39:f5:57:f7:18:78:e2:f1:a0:23:0c:b3:bc:
5f:de:e9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:53:13 2026 by rpki-client