Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: IH03z48HTzEGl4tJD1rikxk/QdNEZPnKgH7zPnxh3C0=
Subject key identifier: B2:8A:70:78:54:63:46:7A:6C:9F:71:D4:7E:22:F0:67:36:AA:F8:91
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019D25F1062C9CC7A7D93AD203F5A468774F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0C81
Signing time: Wed 25 Mar 2026 17:00:45 +0000
Manifest this update: Wed 25 Mar 2026 17:00:45 +0000
Manifest next update: Thu 26 Mar 2026 17:00:45 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: afj6IVr/5KPdjcX/hERX+U9LVDmjHfq8qPf6szZ9Bvc=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:06:2c:9c:c7:a7:d9:3a:d2:03:f5:a4:68:77:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Mar 25 17:00:45 2026 GMT
Not After : Mar 26 17:00:45 2026 GMT
Subject: CN=b28a70785463467a6c9f71d47e22f06736aaf891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:51:35:0a:9e:c7:27:24:5f:09:9e:8f:fa:
70:3b:e5:b0:8f:b0:3f:ba:0d:9f:4d:da:4d:bb:5e:
a0:ee:84:82:72:07:31:9a:6c:04:b7:5e:7d:74:97:
9e:b7:c4:ea:f0:cd:bf:f9:2f:43:8a:0a:d3:2e:c4:
27:e5:33:0b:13:62:d2:e2:b9:83:e1:02:1f:b5:d3:
ee:5f:68:dc:38:72:09:af:12:b3:5a:34:2e:43:ef:
a4:e6:1a:33:38:e8:02:07:52:ea:a2:c1:f1:d8:0c:
3d:45:4a:a6:a9:fa:f5:89:ec:3c:2e:33:c5:b8:94:
3b:62:0d:4b:0f:ab:10:97:95:dc:90:45:45:f2:d3:
e2:7f:11:c0:d8:de:b5:e0:90:a0:b9:58:6c:b5:c6:
ee:e5:22:d3:30:b3:38:32:0b:24:3e:f9:ea:35:e2:
f8:3d:4f:2a:f1:b1:a0:07:fc:bf:5d:5b:9b:12:b6:
99:ac:fd:ec:02:3f:cd:2e:98:9d:d8:f7:ee:c9:79:
fe:2f:4a:74:57:b6:62:59:4b:f4:4f:8a:6a:d7:97:
c2:98:d6:59:bf:75:59:15:e7:1d:98:a2:e3:ca:50:
70:9d:5c:a1:3b:53:2e:08:f9:07:24:43:d9:81:ef:
42:be:b4:82:1a:03:a0:39:7e:8f:02:9f:6a:bb:ef:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8A:70:78:54:63:46:7A:6C:9F:71:D4:7E:22:F0:67:36:AA:F8:91
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:eb:71:96:c4:60:bd:43:33:7f:a1:cb:5c:fa:d2:77:00:59:
d3:d8:d0:ac:1a:73:ff:6b:e7:f0:ab:d1:7e:1e:61:fc:2a:03:
23:a8:3a:f2:1a:61:80:da:b4:c8:01:30:96:ba:72:80:50:13:
f2:e6:ec:24:e2:de:b9:ea:40:20:1f:53:ea:e8:ab:cd:8c:b9:
7d:1d:7c:6d:14:6f:b5:67:85:32:99:31:ac:be:50:1d:42:d1:
f7:a4:35:f7:0b:6b:fd:53:dc:07:ab:89:54:ee:b4:47:52:5d:
eb:5c:eb:3f:b6:5e:34:9c:1e:ee:63:cc:0b:22:67:db:60:18:
5a:af:de:07:15:f9:5e:f6:37:ed:fd:fe:90:f5:71:51:b2:92:
2e:44:7c:85:77:5c:ae:a2:f3:e9:69:e3:a5:fb:2a:a2:34:ad:
6e:11:35:de:7d:c9:e1:84:1b:0d:ca:03:8f:87:d2:fa:f7:17:
95:73:ff:7f:40:09:a7:61:dc:ea:2f:58:33:bd:64:e3:14:57:
cb:b9:de:c0:68:a2:f1:8f:b9:90:50:9c:55:ab:3b:ef:5a:99:
9e:86:c6:99:bc:91:0e:c2:61:ed:6b:79:97:74:8e:37:da:f5:
80:cf:7a:d5:0b:e2:90:9f:42:34:52:c4:fc:99:d5:76:0b:0f:
2b:83:67:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:33 2026 by rpki-client