Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: Vm9Ag76Q81ot5+5PVj767S0Y0z90NiRcfF+hR6XWcrA=
Subject key identifier: 80:22:8D:0F:76:0F:F4:36:A9:28:0D:39:08:B4:60:33:21:97:C8:49
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019D2B1729BB2B8984A892EA66E902A2E995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0732
Signing time: Thu 26 Mar 2026 17:00:31 +0000
Manifest this update: Thu 26 Mar 2026 17:00:31 +0000
Manifest next update: Fri 27 Mar 2026 17:00:31 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: 7oS+gV2KsyecrzqoORijeoMjGxfsJijIXr+mkTZGjIY=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:29:bb:2b:89:84:a8:92:ea:66:e9:02:a2:e9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Mar 26 17:00:31 2026 GMT
Not After : Mar 27 17:00:31 2026 GMT
Subject: CN=80228d0f760ff436a9280d3908b460332197c849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:ed:68:bf:39:3e:97:d7:52:9d:c2:ce:67:
59:96:7b:e4:b8:80:28:6f:13:c4:a8:ea:c3:2b:fa:
8a:9d:dc:d7:78:96:ab:15:e6:70:97:fe:28:97:7b:
f2:d4:76:be:d5:8c:3a:65:d9:ec:d5:87:0a:8a:36:
6b:b4:88:6a:d9:ea:96:b2:9f:8e:f2:89:f2:ef:1d:
32:ec:cc:84:f6:11:73:4c:88:7c:f7:bd:fa:d7:bc:
81:66:89:39:5c:65:70:5a:71:6c:fe:50:62:50:7d:
0d:30:d1:4f:80:76:0d:f7:fb:ca:b4:e9:d0:e9:6a:
d1:ee:e2:52:08:89:5f:4a:34:79:50:0a:21:8b:3c:
1d:0c:a4:75:e4:9f:67:4c:5a:0b:80:d2:5e:9a:11:
09:0a:68:b9:55:05:98:24:cd:9e:f2:75:50:04:be:
20:52:62:61:75:f8:bd:22:92:98:f2:ac:88:d8:4f:
71:aa:cf:41:cc:e3:c2:c5:40:2d:63:c6:09:ba:ce:
6e:7b:99:2c:28:ae:79:a0:53:e8:d9:54:84:1c:73:
04:0c:66:bc:23:30:89:6b:60:cb:57:c5:76:41:5d:
34:30:47:43:7d:e3:d7:4d:db:1f:a1:30:8f:09:3f:
b7:b2:74:4a:53:2a:1b:5e:8c:d8:55:d5:f1:ea:fa:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:22:8D:0F:76:0F:F4:36:A9:28:0D:39:08:B4:60:33:21:97:C8:49
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:92:c7:63:f8:c1:98:06:af:1d:4a:5c:3c:e4:13:c1:f9:df:
28:98:03:4f:6e:6e:5b:71:ef:47:f3:23:ed:08:20:3a:c5:38:
06:54:bc:bf:fd:18:e4:26:91:bc:61:e0:ec:fb:19:56:eb:af:
8f:9a:12:d3:01:5f:aa:06:d7:d7:d2:3f:c8:77:be:5d:dd:08:
2f:47:43:bd:a8:1e:d9:51:b5:5f:00:5d:9f:95:b4:85:32:81:
36:1b:9b:54:d1:4f:84:3d:e2:36:b1:1e:3b:54:6f:d9:f9:37:
6a:a8:e3:8a:08:3d:f4:8b:64:45:54:4b:44:1e:cf:10:4c:7f:
0d:21:9d:79:2d:92:e9:23:10:d7:48:a0:dd:1e:05:55:22:4f:
36:96:a8:ee:7f:aa:5e:6c:e5:b3:ab:f1:8d:71:1f:dc:65:01:
8f:26:b4:4b:83:fb:94:96:ad:83:3a:02:47:fd:03:d6:24:e1:
be:e4:28:63:66:93:d7:8f:f0:b3:85:c0:c1:17:9c:ba:ab:32:
7b:9e:b4:03:37:f2:70:57:1c:d8:31:3d:9e:af:2d:24:97:32:
81:f3:25:20:39:a8:ef:07:d2:20:fd:cf:fa:d7:bf:1d:00:8c:
46:41:d0:0a:a5:48:8d:bc:9d:09:58:81:32:ed:a3:da:c9:62:
88:e1:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:57 2026 by rpki-client