Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: Ns0X08nCRVXPir2fi7E6G1J5o9ExQORcuEiEQcFb3Ac=
Subject key identifier: 1A:C5:2B:28:49:12:20:2F:1C:AB:EC:F4:53:6F:2F:61:3C:F9:30:EF
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 019D382DDAA48F62E302B3746234DF82E90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 10EC
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: GJUKVNbn5vdfEJO8i+MKpEObUa7xUscMQVsbp+72dG0=)
2: ws3LMFUwqOssAgdFH0sQW1QshrQ.roa (hash: 0QPouBqOetwvm5EolmlFqYseOotdTyUeyqwZDQ7ojQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:da:a4:8f:62:e3:02:b3:74:62:34:df:82:e9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=1ac52b284912202f1cabecf4536f2f613cf930ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:67:de:e5:15:03:80:b0:9b:f0:07:cc:5e:
f3:aa:b6:cf:46:b3:94:a1:5f:66:1f:9b:aa:37:35:
7c:58:05:04:be:de:3b:91:66:67:46:07:d2:30:eb:
0b:09:45:60:32:5b:82:20:21:da:74:e1:38:40:9e:
dc:2c:29:0b:c0:03:24:b4:a5:4b:3d:0b:62:b8:48:
64:50:8b:c1:79:81:e4:3a:14:22:34:c0:ec:d8:7e:
9d:76:4b:b5:fb:4d:e9:5d:18:41:a3:0d:5e:bf:26:
d9:a8:2f:8d:56:9f:5e:0a:43:1a:f0:97:c4:82:64:
2a:0b:6c:e4:dc:b5:7b:a7:63:43:6b:d5:d9:d7:62:
a3:85:dd:26:d1:0a:70:77:99:ff:a6:78:52:02:a0:
37:fe:6d:2b:f0:87:1f:25:f5:59:83:2c:50:d5:77:
3a:de:fc:d7:99:04:b9:28:d8:c6:4b:ec:39:44:f1:
b5:8d:14:0e:05:48:2a:3a:36:85:11:8a:14:97:0b:
86:d0:c1:dc:4e:c6:c5:fd:32:45:bc:7c:37:1c:a4:
1d:cd:17:ba:2f:7c:33:86:50:d5:86:8f:97:21:dd:
2c:5e:7e:90:32:89:8f:be:23:19:96:e4:ab:0b:1b:
b8:1a:3e:8e:b1:5f:f3:33:6c:9a:00:2a:15:28:94:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C5:2B:28:49:12:20:2F:1C:AB:EC:F4:53:6F:2F:61:3C:F9:30:EF
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:da:d7:e9:6c:3f:5c:32:1c:1a:d4:a4:59:ce:7c:62:4c:b2:
85:c9:61:38:41:96:a4:75:b0:94:93:5b:c5:5c:bc:97:32:9a:
9a:22:5a:7b:7a:1a:f8:ef:7b:b7:77:5d:71:fb:5f:4b:94:3e:
fe:63:17:78:84:01:10:b8:08:89:63:d7:b8:3a:51:cb:5c:76:
36:d1:ea:69:3f:ff:7c:56:03:ad:de:7b:f7:e4:5e:9c:37:8c:
60:eb:86:5d:84:0b:fd:b0:7b:83:c4:9f:59:a2:01:54:58:c1:
2b:51:f6:81:1b:7b:95:84:0c:8f:88:07:ac:54:3c:4f:58:48:
9d:19:ec:1a:33:32:2f:ec:a0:32:8d:06:12:2e:52:0e:58:9e:
32:dd:07:99:5c:5d:c2:9a:65:2a:42:11:97:11:b3:1d:a8:f8:
06:c8:1c:ba:fa:fa:cc:ad:32:d6:ce:3b:dc:f2:e8:22:34:69:
2b:98:2f:81:9f:ba:84:24:f2:ea:3c:95:23:47:3d:7f:86:97:
1a:29:d1:52:a5:c7:03:52:35:4f:f8:8d:c8:88:24:33:93:d4:
ea:23:74:d9:74:93:fa:e7:ea:5e:71:0e:25:2f:9b:7d:75:cc:
49:ce:28:20:38:34:44:81:87:39:f0:89:ba:b9:e2:15:f9:e3:
a8:16:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:51 2026 by rpki-client