Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: p0VGsY7uWPtVMDKy+o5uchq3wR627XZ754XgT6IHLU0=
Subject key identifier: 84:F1:BD:AD:72:55:BF:6C:4C:E8:B9:8D:6A:31:37:F5:55:9A:FB:0C
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 019D284DCD0D4EB3454A21CB70DBFC957E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 078C
Signing time: Thu 26 Mar 2026 04:01:20 +0000
Manifest this update: Thu 26 Mar 2026 04:01:20 +0000
Manifest next update: Fri 27 Mar 2026 04:01:20 +0000
Files and hashes: 1: 1-rBgyQgcZXkEd224n-2FZQ79R90.roa (hash: lXuaNOk5Bgob5HontELFPkVtHeAXizyQRbe4xoEKAQ8=)
2: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: SR7FGwTmjxOIvNWAPY/AdmK+OcqEIqav54++Cg9eHjY=)
3: XInE7IhwLiH6cAbeJDA47vC4HFw.roa (hash: yvUw4Yhj3EW/lyYnrpik/JIwVjQtM07vuuoIeWKjTz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:cd:0d:4e:b3:45:4a:21:cb:70:db:fc:95:7e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Mar 26 04:01:20 2026 GMT
Not After : Mar 27 04:01:20 2026 GMT
Subject: CN=84f1bdad7255bf6c4ce8b98d6a3137f5559afb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:ed:cd:4d:bd:1e:83:e6:8a:15:a1:9f:ef:
11:b6:95:65:9d:d0:12:73:0b:91:9f:c9:d2:8f:01:
b0:75:3b:e1:82:1d:8a:c9:05:25:85:b7:ff:7d:fe:
f7:76:dd:43:01:b6:c0:fa:85:b9:cc:b3:5e:5c:a6:
15:42:c3:53:f4:31:ac:cd:b3:ab:eb:9d:55:58:cb:
0a:eb:9f:f8:12:f3:1b:a5:b1:f7:26:a0:f2:04:10:
99:de:5d:12:97:7b:01:1e:54:fb:4a:6d:57:37:6b:
e0:86:70:17:81:98:45:bc:91:4f:bf:29:1d:00:82:
63:7a:f3:0b:8a:d3:94:1b:0a:ae:8f:7a:6f:9e:c4:
03:05:fb:82:92:b3:e4:e6:e4:77:d3:72:ea:78:0e:
47:37:db:41:45:73:3a:de:0f:3b:ad:f5:5d:7e:7f:
c7:4b:1c:c2:20:49:98:0e:e6:4f:ad:15:cc:33:62:
38:1a:53:08:a0:64:15:0e:bd:e9:c4:9d:26:44:01:
7c:8e:d7:12:28:06:58:36:70:e9:8c:60:c6:a8:87:
f3:c1:f6:9b:43:a2:95:bf:29:d6:84:de:9e:e9:ea:
7c:3b:d1:2b:43:f4:ba:ea:ea:8e:c9:42:a7:8c:79:
a1:f9:0b:29:9e:40:b7:5f:b3:64:e6:56:6d:32:5c:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F1:BD:AD:72:55:BF:6C:4C:E8:B9:8D:6A:31:37:F5:55:9A:FB:0C
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b6:83:83:a9:33:3d:9f:93:93:9b:9c:77:a8:41:e0:68:5b:
42:8d:eb:8f:3a:e9:3c:38:16:69:92:39:54:30:a2:85:f3:61:
65:79:f3:74:06:06:a3:ba:a6:c7:1b:eb:25:ff:6a:96:44:b0:
c6:39:e8:a1:2f:06:6f:9f:23:24:09:fe:77:49:f4:3e:58:3f:
ec:ba:9b:4a:30:98:e1:72:a1:57:fe:4e:95:34:01:59:48:48:
88:21:fa:17:b9:5a:ad:fb:ec:ee:a8:17:e4:7d:f6:a4:41:65:
c6:50:bc:da:d6:bc:c3:0a:95:e8:c1:06:05:01:5b:00:69:99:
33:39:7a:5e:3a:1c:dc:4c:d9:06:83:b5:f8:c0:97:ea:f0:75:
20:b3:6d:b5:62:b4:e7:7f:8d:05:9d:53:4a:e3:36:02:8f:c0:
23:3e:a7:7a:c0:10:e3:db:f9:d7:f0:3f:f4:f9:c4:32:26:f1:
75:37:c2:ac:25:7d:f6:b5:40:c5:fd:d1:c0:97:8c:9e:59:fc:
d0:e2:d1:ea:f3:57:30:91:e2:ab:2b:37:d7:7f:8d:1c:e6:62:
c0:3c:f9:79:ca:38:57:5e:27:fd:6c:3b:6d:d7:1a:27:e5:90:
49:ba:c3:13:25:3d:de:53:25:31:ae:2c:df:28:33:32:28:cd:
6f:2b:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:40 2026 by rpki-client