Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: BHGHo5BO/SEQ9mTomMqXPata1akym+9hLDAM972qXXk=
Subject key identifier: 0B:C6:D7:46:F3:AD:D7:E4:43:4C:A8:E6:41:52:ED:2B:AF:2D:66:03
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 019D2AA9B8627060CEFE5AE2FD82D2756B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 17D7
Signing time: Thu 26 Mar 2026 15:00:58 +0000
Manifest this update: Thu 26 Mar 2026 15:00:58 +0000
Manifest next update: Fri 27 Mar 2026 15:00:58 +0000
Files and hashes: 1: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: QhRUlTlpqDD0OQa7XshTaV/aY6TiNuAILXzZsi/bgJg=)
2: cQtlxVVPO7JQa_rTQPIvZ0L_JT0.roa (hash: wGTkJ7+XtXJZbWxqtu6wY+OG6HIKs93TJ8T7CJvY3Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:b8:62:70:60:ce:fe:5a:e2:fd:82:d2:75:6b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Mar 26 15:00:58 2026 GMT
Not After : Mar 27 15:00:58 2026 GMT
Subject: CN=0bc6d746f3add7e4434ca8e64152ed2baf2d6603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:ac:3d:8e:f6:c8:b3:b3:1e:c0:eb:5e:30:
af:0a:45:22:34:b9:5c:35:7d:3e:bc:ba:74:b3:c2:
01:3d:95:23:ae:3f:cc:7f:34:dd:fb:64:52:6e:52:
d0:66:7f:32:10:f5:71:76:aa:de:c5:0c:da:53:fa:
a2:3c:fb:0b:4f:d5:2d:a4:19:44:ef:59:ad:30:47:
e8:b6:f4:f7:e9:cb:7f:2e:6a:30:ed:4c:e9:aa:c1:
f3:89:a6:22:fe:b0:5a:9f:d6:8a:5a:2a:cb:f1:22:
cd:9e:73:32:01:32:82:89:cb:4e:87:e9:2d:e8:99:
56:d6:6a:f1:c1:23:7f:bc:c5:8e:5c:79:a2:e7:42:
69:ea:24:cc:69:6f:64:dc:9a:e4:ad:b1:5d:f6:01:
f0:3c:18:67:98:98:e0:28:b4:4a:3b:40:6d:a1:ca:
8b:96:14:ff:cd:c7:79:53:92:04:6c:83:50:8f:4f:
43:14:f0:ed:47:15:42:dc:78:e1:a4:fe:a3:59:13:
8e:1d:9e:25:56:53:4e:30:fa:b3:69:dc:83:da:1a:
e2:fd:e5:71:bc:ec:ab:01:da:4b:45:19:92:5e:0a:
e7:dd:02:74:b7:3e:72:b4:1f:9c:3f:ac:55:8c:75:
81:91:02:de:1b:78:c8:54:54:cc:f9:29:05:52:15:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C6:D7:46:F3:AD:D7:E4:43:4C:A8:E6:41:52:ED:2B:AF:2D:66:03
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3d:7d:a0:a1:22:8c:ec:4d:66:b0:a9:d0:de:19:0d:f1:c2:
d0:2f:04:7a:40:05:47:f1:89:56:26:7e:fc:b6:c6:e8:c7:cc:
7d:82:8a:7f:7a:52:83:47:e9:59:76:85:c4:d4:c9:97:5a:ef:
30:58:df:68:ad:8c:f8:0d:8f:bf:b9:6c:5c:39:66:3f:c7:65:
d7:2a:70:10:95:46:cb:42:ca:01:36:6e:a9:e7:9d:63:4b:42:
a0:f2:f8:a7:e0:43:2e:e7:a9:28:55:f1:59:f0:f2:a9:f5:79:
d7:81:ab:3b:d0:cd:a1:21:be:0d:ca:f0:9a:73:3b:31:3e:c3:
c8:42:e8:40:41:22:8a:70:3e:ca:0a:ea:92:22:9c:93:84:b1:
cd:12:ea:ce:1b:05:83:8b:90:d9:3a:92:ad:6c:49:07:a1:f1:
9d:ba:d0:1c:0c:47:9a:85:f5:d2:fd:70:07:6e:b1:19:2f:c7:
fe:2d:1c:04:5c:66:ea:c1:33:8e:c0:de:31:80:a4:8e:d0:b2:
9c:83:d8:9d:bf:ef:5e:c7:84:a1:a2:ac:8c:d5:84:bb:d6:16:
83:85:31:c5:ef:6c:0f:2e:a8:d6:65:4a:f2:dc:41:e9:19:bb:
c4:43:29:fb:40:98:61:bc:6a:7a:fb:65:6d:24:8f:ea:2a:83:
d2:16:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:41:18 2026 by rpki-client