Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: 5udAVwPRGSWySe+OoYMQhzfBzrSJ13rjAcpP8cPtg8Q=
Subject key identifier: 4B:64:66:96:30:A8:65:A4:83:0A:AC:9A:AB:91:4E:AC:0B:74:1B:0D
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 019D265F195CFE0F912E1486583946D4F13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 1777
Signing time: Wed 25 Mar 2026 19:00:59 +0000
Manifest this update: Wed 25 Mar 2026 19:00:59 +0000
Manifest next update: Thu 26 Mar 2026 19:00:59 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: ZV2XeW6+P/byKJvdA9jNKpvBZRxkjI/BHh/7y24EwNw=)
2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:19:5c:fe:0f:91:2e:14:86:58:39:46:d4:f1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Mar 25 19:00:59 2026 GMT
Not After : Mar 26 19:00:59 2026 GMT
Subject: CN=4b64669630a865a4830aac9aab914eac0b741b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:95:11:18:88:b9:1a:98:b2:f3:60:c6:a5:
2e:d9:fc:d4:81:4f:da:1d:f6:5d:fc:1c:f1:21:75:
a3:9b:61:ab:20:09:c6:99:eb:5e:a9:7f:9b:4a:be:
7b:a5:95:0b:6c:45:16:91:58:78:1f:7d:2f:e3:2e:
36:2a:78:3e:9f:f9:06:d7:05:33:0a:23:0f:45:55:
88:ac:18:f9:5e:d0:12:e4:d6:4a:ec:33:6a:48:1c:
f6:e6:71:41:02:ee:f4:4e:ab:6d:8c:d1:65:3e:9e:
1b:9f:89:c2:ad:76:dd:d0:ac:16:77:99:8c:f1:e1:
70:b2:1f:79:5b:e6:f4:b2:58:54:23:80:72:5c:e2:
05:29:6e:5b:8e:5f:92:a3:97:1f:95:31:f9:95:c3:
86:9c:f8:dc:2e:ea:2d:9e:24:0a:78:63:43:b3:d9:
66:1a:11:18:c5:10:9f:1a:6e:d6:cc:a0:f1:cb:bc:
eb:e4:64:40:85:dd:63:62:40:a9:c0:33:ef:cd:47:
06:8a:0c:fc:9f:d7:e2:d8:22:5e:08:8d:fb:ad:5a:
96:ad:91:40:d7:f4:e0:f6:3a:42:bb:9b:ee:5c:08:
40:da:d3:ac:74:9a:53:7d:f6:9f:98:6e:19:a9:56:
ec:c4:2f:a8:02:86:6c:a2:35:06:fd:58:7f:20:b7:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:66:96:30:A8:65:A4:83:0A:AC:9A:AB:91:4E:AC:0B:74:1B:0D
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c0:33:68:39:7f:fd:0f:d7:f2:2d:90:13:88:7b:ed:a4:46:
c6:cf:8e:cf:13:69:ee:3c:5a:e7:09:85:f1:13:fb:07:c7:06:
28:4c:a0:3b:f9:b4:cb:d6:50:80:f7:e8:d6:23:33:f7:e2:8d:
03:86:47:58:84:af:62:51:52:1e:f6:2c:5a:e2:47:e7:98:7b:
3d:5f:5d:a7:fb:c4:e3:f1:e1:39:81:3a:25:12:a9:a8:d5:c5:
fa:b3:89:7a:36:88:dc:18:33:b6:9c:2a:8a:8e:26:f0:4c:7b:
15:09:5e:7c:49:99:12:34:59:aa:45:e6:96:8d:32:0b:17:a6:
ad:91:50:3b:a2:82:28:a0:44:44:dc:a7:8a:dd:2c:c7:fd:5c:
60:22:59:ea:12:57:93:ad:1d:18:d6:e0:87:70:86:69:25:91:
5c:df:ca:bf:f7:6c:df:e9:91:c9:15:70:f0:14:54:fd:14:48:
2c:1f:2c:f0:fe:a3:81:70:5d:74:4b:d8:c4:41:00:25:f2:1b:
f4:bb:99:f6:c3:19:89:fe:fd:09:e6:ff:58:73:69:56:b1:0c:
d3:d8:d3:9b:0d:f1:9a:05:c7:6c:bd:88:ab:ac:b5:42:42:b6:
c3:f3:f7:94:18:1e:ed:a2:8c:0f:c4:e9:10:77:7c:a1:45:7b:
95:28:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:15 2026 by rpki-client