Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: c1xH3x6zzkUbwMzzugisgHaFE9cRmsWZ1h17cZ1iPds=
Subject key identifier: 77:3D:BD:70:77:56:19:C6:E9:61:7E:53:D4:5D:C4:7D:B0:65:9B:6A
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019D265F19B17B0E1EF24A15A3F754C8A013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 0709
Signing time: Wed 25 Mar 2026 19:00:59 +0000
Manifest this update: Wed 25 Mar 2026 19:00:59 +0000
Manifest next update: Thu 26 Mar 2026 19:00:59 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: MX2s52zdo86ah/bC0Blkxph2KlZVI1BhkgBeVLijoZk=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: uhmE3at76dYLrtDiQbzMepv_16I.roa (hash: /LKq8mUsMWaHICUc9KVgvqVuRJ8efqGttlCEBaJ+7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:19:b1:7b:0e:1e:f2:4a:15:a3:f7:54:c8:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Mar 25 19:00:59 2026 GMT
Not After : Mar 26 19:00:59 2026 GMT
Subject: CN=773dbd70775619c6e9617e53d45dc47db0659b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:5b:52:be:33:9f:ac:2e:91:38:e4:7d:a3:
e0:97:4b:ac:ba:a0:4f:d3:19:56:b4:29:a0:3e:f1:
1f:fb:b6:a8:0f:c1:31:20:bf:54:55:52:df:3c:17:
55:8e:fb:c0:7f:5e:71:54:ae:2d:29:58:60:48:cb:
20:db:c1:4d:d1:99:73:ed:de:8d:a4:2c:8a:15:0a:
75:ba:63:e8:a7:42:0c:11:c9:bc:31:df:75:c7:c7:
cd:21:17:52:a5:40:e4:96:5e:40:c7:57:0c:70:19:
ac:63:8e:6f:9d:82:7b:31:74:0c:9a:3f:d5:ca:aa:
98:60:f2:76:64:45:96:d9:75:78:b9:c7:b4:2a:d7:
78:49:bd:35:c8:2f:60:05:17:cc:67:c9:a0:ad:bf:
89:36:56:1e:8d:73:27:50:db:ba:fe:4d:ec:4c:64:
a5:82:b9:3c:31:9b:a9:3f:5a:5a:75:86:8e:d8:3a:
8d:4f:9d:3c:33:97:99:3c:45:3b:82:e4:ef:13:c2:
0f:6e:1b:3e:86:e4:d2:a2:bd:81:99:94:c2:f5:90:
4f:91:f9:08:84:aa:2b:f1:60:9b:3a:42:68:ba:3f:
4b:3e:24:99:00:b8:87:1b:70:d7:ea:cf:76:63:8a:
79:3e:7f:95:71:6e:0e:f0:31:d7:78:08:60:2e:08:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:BD:70:77:56:19:C6:E9:61:7E:53:D4:5D:C4:7D:B0:65:9B:6A
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:91:a4:f5:4e:5f:f0:ac:7e:f0:43:88:ca:2b:d4:37:8e:fa:
d8:4f:d9:5a:d7:78:bc:3b:40:58:0a:39:df:4c:90:64:5a:c9:
f2:8e:9a:5c:24:71:ad:8c:d0:2d:e1:45:8c:f9:93:ba:cd:7a:
8d:f6:c6:90:84:25:f0:30:b8:61:bf:16:8f:80:9f:5f:7a:64:
46:c5:26:23:cd:5b:d3:7c:5e:cf:24:d2:ca:1e:91:17:9c:3b:
33:29:72:a4:60:df:1c:57:22:a2:5e:16:04:21:aa:e8:57:a9:
03:c6:71:49:92:4a:e8:fa:6f:1e:e1:c0:25:f7:cf:f4:3a:3e:
f3:88:4d:77:e2:ac:98:5e:9b:b4:2e:2b:71:85:75:0d:19:3d:
cc:7d:c8:d1:e2:7a:68:13:2e:df:c8:07:ea:79:ac:c2:25:bd:
f4:1e:ae:22:c2:ee:3b:59:94:e6:96:9a:6a:13:12:8f:73:e9:
43:22:9b:66:fe:d7:4c:c7:ff:d2:e5:65:a6:7e:69:72:2c:31:
24:e9:b9:70:04:63:81:e5:05:99:b7:64:e2:8a:f1:e2:a3:fb:
75:28:8e:87:e2:fc:d7:53:13:7d:33:bf:93:a6:09:7a:33:16:
1a:1a:d4:93:59:95:22:59:6a:db:dc:07:7d:75:eb:7e:3a:5c:
9a:b7:14:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:26 2026 by rpki-client