Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: 7AdybDW+lA3AkjWfZFANvHV6tGvComCZMcC8XIqQMx0=
Subject key identifier: 76:E5:B8:F0:DB:7D:F1:5F:7A:A4:8D:1B:69:1D:FD:10:54:F6:B3:8E
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 019D27A890624EE101F95E0F9D540222C3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:00:51 +0000
Manifest this update: Thu 26 Mar 2026 01:00:51 +0000
Manifest next update: Fri 27 Mar 2026 01:00:51 +0000
Files and hashes: 1: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: +yBMk+x5VTXa4urHRkGOEvS3LzCdwN3lPTiybHxkSWw=)
2: hGGdrn8Q-dhLWfi_gTkJoK3l29E.roa (hash: 9MCdA6GuzpZs6FZt15tnmy+ZE9OMe0TMy0YGpKngBio=)
3: iNjCT_BLZd9vl0rv4dLzCKK08gs.roa (hash: mlyMniHzelFP8RaHqU3fioWDlio2eP7RJTE7Lvl+uWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:90:62:4e:e1:01:f9:5e:0f:9d:54:02:22:c3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Mar 26 01:00:51 2026 GMT
Not After : Mar 27 01:00:51 2026 GMT
Subject: CN=76e5b8f0db7df15f7aa48d1b691dfd1054f6b38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:6a:7a:dd:f4:64:a9:c8:9f:c2:8b:a9:a1:
b3:81:8c:a8:cd:44:11:6a:33:fc:b8:c9:55:dc:55:
eb:28:2c:71:e1:01:9a:76:ff:58:a2:9c:0b:04:41:
be:84:83:44:7e:4e:59:5a:dc:61:40:e6:1c:8b:47:
c6:f3:48:f1:04:b2:95:02:07:00:a0:6e:7c:fe:aa:
5e:72:d8:fa:3b:ac:a3:b9:3b:6b:05:0c:87:46:cd:
4a:3b:11:6f:ab:ca:aa:74:cd:a8:dc:da:86:7d:7e:
04:73:78:5a:d4:1a:4c:f5:bb:67:14:57:fc:69:a6:
dc:42:b5:f8:64:18:af:28:73:87:c5:01:75:6d:dc:
7e:05:7d:f6:e4:bd:d4:29:94:fe:62:33:44:15:fb:
fd:d4:bd:76:22:7f:97:26:38:86:f7:4a:f2:fa:03:
b8:8d:2b:30:fe:44:2d:2c:fc:94:42:64:a7:bc:92:
e1:fb:39:c9:c1:2f:23:fe:e7:e1:57:2c:68:d5:27:
cb:5d:6c:a9:ca:1c:56:d9:20:99:24:cf:bf:10:2c:
0a:3b:cd:12:e0:9f:17:a2:ac:12:cb:0e:a8:0f:73:
9b:f8:9c:61:1c:3f:69:d0:e6:6b:ad:4b:7b:8c:be:
7e:37:3a:38:11:67:56:d4:39:5d:13:b1:0e:79:9b:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E5:B8:F0:DB:7D:F1:5F:7A:A4:8D:1B:69:1D:FD:10:54:F6:B3:8E
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:12:ca:6e:7d:c2:af:97:9c:fd:15:0e:02:c0:70:ed:93:78:
fa:d2:7d:4d:fc:c4:54:35:74:0b:4e:b1:07:65:b0:38:af:ae:
25:eb:63:53:ab:c1:66:9b:1a:fe:e7:2a:49:f4:16:87:58:26:
e5:c6:34:61:c7:80:b8:0a:b3:e3:9d:71:d2:b4:05:f0:7a:51:
df:8e:fc:7c:16:3f:29:4a:49:a6:ca:17:b5:d2:c4:70:41:8f:
b5:48:cd:cd:c4:62:91:af:a8:1e:ea:f7:fe:44:3d:df:81:e3:
a2:2e:45:c6:87:4c:d0:d0:2d:ee:03:60:a1:7c:72:0e:47:f0:
65:3f:30:5c:57:c1:2e:ef:ec:b0:1e:cc:03:85:b5:00:47:f3:
e7:15:1e:4d:ca:ed:cf:28:98:ba:5a:a8:06:a3:b8:ad:50:2f:
37:82:de:2c:1d:53:52:a0:35:0e:fc:cd:67:ef:f9:a4:27:ea:
f6:bb:5f:ef:e5:8e:18:57:13:03:60:cf:c8:c1:28:6f:42:60:
53:1b:6d:40:99:55:26:7a:3e:a4:ca:3d:5d:7c:49:d3:5b:5a:
0e:47:df:f9:72:b7:75:df:a2:e2:fe:a9:5d:d3:49:00:27:b3:
a8:c3:43:b7:ec:77:00:70:d0:6e:ed:0d:d9:b4:e5:50:a9:c8:
de:53:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:58 2026 by rpki-client