Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: xllR47wR4Wt49GVG5ZNzbRt+BZEvZPbtwzOb4qBkMBw=
Subject key identifier: AA:62:85:5B:58:39:0B:D3:9F:72:58:1B:B5:6D:32:57:E9:E0:6B:BD
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 019D2A727776878145D5F47C67D031F41610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 101A
Signing time: Thu 26 Mar 2026 14:00:37 +0000
Manifest this update: Thu 26 Mar 2026 14:00:37 +0000
Manifest next update: Fri 27 Mar 2026 14:00:37 +0000
Files and hashes: 1: 9l35f4vtEnwERy91rSIzMefrFvk.roa (hash: o4NZxjI3TjEffFvPCpSdso698d9KA9gU7jcbU25ovX4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: 4HH1jBv1dcwq4qk7bfs0UHw2rhviFADTuRGoiv6Nzt0=)
3: _DMWomZ-zw9r2w8AsNSptLxDmfA.roa (hash: 5DRqqMVL9GM/PG8SfYwPRoOqjNYLEPPU5+fO2uX+eWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:77:76:87:81:45:d5:f4:7c:67:d0:31:f4:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Mar 26 14:00:37 2026 GMT
Not After : Mar 27 14:00:37 2026 GMT
Subject: CN=aa62855b58390bd39f72581bb56d3257e9e06bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:31:bc:6e:40:4d:9e:64:84:e5:b9:f2:10:
2a:b2:94:2b:c4:c0:b9:51:19:ce:7b:14:b3:41:a6:
ce:f9:90:0b:26:77:48:3b:19:c4:1e:4a:3b:03:26:
54:31:99:bc:cd:4c:d0:e8:a8:66:40:16:13:42:26:
a4:bd:1d:e3:b6:82:aa:08:05:63:e0:ae:4b:80:a5:
50:a7:f6:00:96:66:21:a1:23:b8:32:51:62:62:e4:
29:e8:d7:4a:5c:92:af:1e:30:5e:3f:2c:93:6e:90:
df:9b:c7:f9:b4:10:cf:f3:d8:1b:e3:a2:ff:89:7a:
60:fe:24:b7:a5:5e:fd:34:c0:cd:0e:69:b5:78:e4:
b6:54:a7:1f:73:fd:4e:39:25:1c:ba:50:48:15:15:
87:e8:80:c2:8a:b3:34:34:0c:b2:d9:96:84:8c:67:
e2:81:59:09:11:9e:c7:c8:cb:36:fe:10:7a:f2:d0:
e6:70:00:de:9d:3e:b1:0d:45:5d:c9:46:04:8a:ee:
ef:da:f8:66:63:bf:36:b6:af:05:31:e1:16:2c:ee:
57:4d:d0:5b:c2:32:8e:3c:60:3e:9c:64:b3:94:e0:
a7:c4:f6:43:b2:60:85:79:69:64:4a:46:b6:94:20:
d6:00:db:b7:e1:39:ea:ed:a0:cb:f0:1f:19:8e:b7:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:62:85:5B:58:39:0B:D3:9F:72:58:1B:B5:6D:32:57:E9:E0:6B:BD
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:36:23:f8:8d:d6:0c:69:1e:bc:06:1b:5d:cc:1c:5b:85:bc:
86:c9:0c:b6:6b:24:6c:b8:cc:94:c2:d8:f6:57:f2:60:03:89:
d9:7e:a9:51:41:3e:a1:6c:8e:83:69:90:67:c8:f8:5b:70:89:
12:f0:5b:52:34:c1:6b:9e:ed:4e:48:cb:2e:5b:f0:0d:01:89:
19:8f:40:b5:69:2b:df:ec:7f:c6:11:fc:e8:68:02:c0:fb:85:
54:5d:1e:39:b0:e6:80:10:d6:6b:8a:bf:24:89:f1:b5:a2:47:
26:c0:51:79:d6:6d:06:ad:4e:7e:86:27:d3:c5:b1:0f:f9:9f:
f8:61:50:30:40:4d:26:5b:a8:53:00:43:46:b2:6a:e3:c4:30:
6d:46:2f:08:9f:c0:de:4d:9f:f0:81:5e:cf:8f:7d:ea:7d:93:
c4:46:fa:9a:32:13:3c:e0:1b:62:fe:4c:5f:da:17:eb:4f:03:
23:c7:88:a8:80:1b:cc:89:85:95:16:af:49:b4:07:31:d3:0a:
a0:6d:2d:a1:a2:4a:1f:98:76:b9:d3:ef:d3:0c:d9:ad:7a:a3:
0c:4c:4e:70:eb:a0:10:00:47:ff:b7:70:9c:c1:a1:45:a1:76:
34:af:52:d3:ed:45:15:96:69:c6:4c:29:4e:ff:55:e2:58:4f:
96:3d:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:26 2026 by rpki-client