Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: CJ5iWJEekfPrxvXNvlDxEwE/eK+bBqbkTt7j4+HGtV4=
Subject key identifier: E7:3D:CC:08:61:BE:F2:9A:53:8E:3B:22:37:13:07:78:32:6D:38:3E
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019D34F629816107EF4925C665D83B59BD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 065A
Signing time: Sat 28 Mar 2026 15:00:40 +0000
Manifest this update: Sat 28 Mar 2026 15:00:40 +0000
Manifest next update: Sun 29 Mar 2026 15:00:40 +0000
Files and hashes: 1: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: mR8NjOp739c5RAm/xelS3D9dC6NYMXSRR7BWhQj7d94=)
2: geuCX65zM5b7m_vZubXGXyTi8IY.roa (hash: qQCab6ruYYvNVl/wsnvfIx6ptbnTRuSgj4X/okH45lc=)
3: odNrW4lU42BAvPE84otnwCnAcjo.roa (hash: F1kft2u6AJ9vT8iumt/E/kv8R0gxEkszQiPaKkBRYw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f6:29:81:61:07:ef:49:25:c6:65:d8:3b:59:bd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Mar 28 15:00:40 2026 GMT
Not After : Mar 29 15:00:40 2026 GMT
Subject: CN=e73dcc0861bef29a538e3b2237130778326d383e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:ec:c5:c5:92:05:e2:2e:40:10:0b:1f:15:
65:d8:79:9f:67:5d:3f:4a:c7:34:1a:8d:56:e0:cd:
75:99:3a:4d:d6:12:90:60:27:0e:58:02:a2:ec:94:
0c:47:0e:b3:14:08:13:b8:c8:d3:14:e9:b6:fb:5a:
b7:02:07:35:75:94:54:ce:cb:79:93:c1:df:32:98:
4b:92:d6:c9:9b:53:e3:35:73:f6:05:f4:ec:97:3d:
90:f2:1c:fa:e4:ac:89:5f:f4:61:28:6a:f5:65:7d:
63:64:f0:09:d0:aa:79:0f:8d:5c:cf:7f:f1:50:00:
b0:c4:44:2a:7b:1e:99:8c:70:2d:98:b4:6e:d8:e0:
b2:ab:af:22:b0:ad:be:1d:2e:77:bc:27:09:c3:f1:
7a:a5:fb:7a:16:bb:c5:90:b3:44:6b:ab:02:1e:aa:
78:ff:fa:12:7c:df:03:0d:9d:99:e0:07:4e:15:6a:
4e:14:3e:70:dc:70:25:49:76:7c:fb:34:58:82:5c:
b3:76:e9:b6:d1:58:15:4d:0f:30:75:72:7e:f8:08:
b3:2f:08:c8:1d:79:9e:74:db:8c:5d:21:1d:16:b0:
c4:a0:33:22:bc:1e:ce:95:3d:38:de:a3:a0:e9:b0:
77:01:60:88:be:47:b3:6a:e2:20:43:ff:fe:d3:a0:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:CC:08:61:BE:F2:9A:53:8E:3B:22:37:13:07:78:32:6D:38:3E
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6c:5d:76:a3:d6:a8:95:9d:a1:dc:71:da:99:8a:9d:e6:98:
f0:1d:71:f8:7e:92:49:03:48:db:82:d0:35:e3:73:bd:77:f8:
e5:2f:76:eb:7e:57:f9:20:54:cd:76:39:38:c6:d2:3d:6b:05:
b4:81:87:ec:62:ec:b2:d5:9e:8a:2f:2c:67:f4:8a:b6:c5:60:
2e:49:bc:69:5f:5e:94:5c:1e:fa:be:56:87:fd:2a:e4:a4:be:
ef:c9:c6:3c:fc:29:26:95:34:21:0e:01:69:1c:08:a1:37:08:
5b:d7:0f:fd:30:e1:e0:64:17:29:40:d3:5a:d0:24:00:54:14:
74:06:12:92:b2:1f:06:c1:e9:9f:68:b6:bc:26:45:9e:b1:47:
f6:74:f4:c0:c1:b3:95:3a:53:c3:be:3f:c9:18:eb:45:f7:74:
fe:93:77:80:97:e6:4b:c2:d2:02:d9:b6:e5:84:24:0d:2b:ef:
11:98:53:24:7b:7b:df:d2:20:34:80:53:b0:1c:15:76:96:2b:
9c:2c:18:51:e0:39:12:81:f7:86:f5:6f:d1:3d:b8:6f:ef:8d:
a2:0b:e4:4f:71:a0:96:b7:cf:0b:4d:45:f5:95:89:7a:6b:89:
4e:6a:e7:03:e2:23:5d:2c:3b:74:17:78:69:80:c9:57:80:a3:
3a:68:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:43:53 2026 by rpki-client