Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
File: qF7VXxRNceZz5j9LdnDEE0TAlYA.mft (raw, json)
Hash identifier: RPeqHOLbI8mBzgw2vzZHs48f3Is49ZKpxInxOopzeQw=
Subject key identifier: 78:85:0B:93:74:82:6C:E5:69:89:8A:07:6B:54:2F:C9:C6:E4:61:BC
Authority key identifier: A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80
Certificate issuer: /CN=a85ed55f144d71e673e63f4b7670c41344c09580
Certificate serial: 019D273AB4A0ED49CFFF71878ED169EF03A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
Manifest number: 0414
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: lc54bO2qpbEp6ZuINe9U374Bnw0.roa (hash: KvWJl722IjNTPYxbQCA4iUQ0TYdemSL5ZuAeqRqaebU=)
2: qF7VXxRNceZz5j9LdnDEE0TAlYA.crl (hash: Xvq1z86H8SejYVG6vcTKPUmIZiypo+Dy91ZNmNtnCZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b4:a0:ed:49:cf:ff:71:87:8e:d1:69:ef:03:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85ed55f144d71e673e63f4b7670c41344c09580
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=78850b9374826ce569898a076b542fc9c6e461bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:35:4d:f9:9c:7b:a7:a4:be:b6:7e:b7:f3:77:
0c:5f:1c:22:13:f7:52:ae:b1:9b:7f:52:68:15:81:
55:d3:bf:9d:4d:a5:dc:6b:ba:3b:a9:a8:1f:82:6a:
2a:b9:e5:16:3d:99:cb:69:35:f2:a3:4c:94:90:ca:
1d:31:ce:10:d4:5e:df:1b:52:e7:b5:97:5c:74:06:
da:51:f1:6e:22:b1:c7:1a:ae:db:46:8c:95:7c:f9:
49:be:71:ad:e5:14:87:d2:02:5d:18:03:97:3f:17:
39:d2:65:d3:1f:29:96:1a:d6:e3:82:ad:8d:8b:fb:
7e:09:55:2c:57:f4:27:c2:3a:7b:2a:7b:31:55:f0:
c2:8e:b1:c8:d7:22:39:fd:62:83:4e:c9:89:f9:00:
8b:d3:cc:4d:5c:9b:30:00:b0:1b:36:7c:e9:b3:05:
20:30:9d:aa:c0:54:16:f1:2e:ed:a2:85:49:e5:cb:
48:0c:02:e1:a4:33:06:c0:98:f2:47:2e:49:26:08:
bc:d9:f7:68:0c:f3:17:e9:c8:3e:24:9a:00:eb:61:
09:16:f6:1b:2c:7f:b6:6a:89:18:74:9e:70:d9:a2:
f9:38:c3:f4:51:9b:fe:64:ad:97:99:1d:ac:a1:62:
0c:75:10:30:b0:aa:9c:92:46:32:d5:3e:be:a8:68:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:0B:93:74:82:6C:E5:69:89:8A:07:6B:54:2F:C9:C6:E4:61:BC
X509v3 Authority Key Identifier:
keyid:A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f8:0c:6c:74:f5:cf:48:72:f7:69:8c:4c:47:25:be:66:a9:
1a:d4:49:49:79:ab:96:fa:86:d5:7f:8f:1c:42:45:8e:a7:27:
b6:a5:29:b2:a5:54:f1:6b:47:fe:32:a1:c4:9c:34:5d:ed:75:
d2:3f:9c:a2:45:a7:6f:52:78:07:bb:2c:78:e1:76:a4:cc:ce:
5b:9b:44:f8:80:d3:66:21:04:9b:29:2d:ec:be:4d:49:fa:3f:
d6:9c:4b:6a:9d:f0:27:77:ef:c2:e2:3a:44:48:ee:35:e3:7f:
49:35:3f:fc:fc:84:09:d2:0d:c2:d2:db:51:b4:69:b5:a9:73:
d4:ae:ad:96:c4:d3:ee:ec:f3:65:e3:11:40:76:f7:9f:5d:10:
1d:1c:b2:f1:57:5d:6e:7d:34:e0:a9:be:32:7c:ec:22:27:bd:
c6:69:1e:00:fb:75:de:cb:e5:13:df:34:99:9f:be:e2:90:e6:
11:58:18:08:3b:7e:37:06:ce:da:a3:f7:41:e7:8b:df:4d:f2:
08:9e:0b:e3:4e:f6:3d:17:b7:b2:f7:14:4e:cf:f1:81:dd:44:
5a:4a:6b:f8:7d:c1:5c:98:a6:20:7d:78:63:b1:bb:80:82:03:
22:38:ed:2a:33:a4:5c:b6:25:05:37:5e:8d:ec:d0:81:12:17:
53:a2:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:49 2026 by rpki-client