Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json)
Hash identifier: ZnmboMjDDeBUOSoC4Oqe8afSpywHdDFvj4PegH7jLsI=
Subject key identifier: 60:C3:31:C1:CA:90:7C:9B:F8:2C:50:AD:87:78:35:B8:59:78:33:D0
Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Certificate serial: 019D2C2AAC609B1D58B3A2FD4313E4DFE609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
Manifest number: 07E5
Signing time: Thu 26 Mar 2026 22:01:27 +0000
Manifest this update: Thu 26 Mar 2026 22:01:27 +0000
Manifest next update: Fri 27 Mar 2026 22:01:27 +0000
Files and hashes: 1: 1-Xi8qsCjZ_PQpe6NJ6-T2dzR4GM.roa (hash: zBTP7ZR26XJl8LaBef5EoQw5nxBQyUiQLy+rkLHHEk0=)
2: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: 1J5SeNagzY491K0tOfgq6hZ3yhheZMKZJx+LHpEOrVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:ac:60:9b:1d:58:b3:a2:fd:43:13:e4:df:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Validity
Not Before: Mar 26 22:01:27 2026 GMT
Not After : Mar 27 22:01:27 2026 GMT
Subject: CN=60c331c1ca907c9bf82c50ad877835b8597833d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:34:23:fd:46:d1:8e:90:7f:49:cf:83:41:
4d:2d:f1:50:4e:50:91:53:11:d6:76:64:6a:0b:91:
6d:19:1a:4e:ab:7c:a7:15:c3:e1:1b:8d:29:0a:27:
77:48:93:5b:39:36:ae:60:11:bd:d2:44:f7:e8:7c:
3e:a0:50:4b:14:1d:91:b2:17:8e:71:1a:3f:24:96:
7a:eb:79:d9:36:91:74:48:06:7a:f0:1f:a8:c9:59:
40:90:44:86:aa:d9:f7:b1:c9:3a:54:b8:1c:3e:ec:
9f:37:7a:96:87:02:c9:1f:7f:51:c3:2e:ef:da:80:
de:b6:8f:88:f5:02:8e:0e:bb:fa:00:5e:5a:01:99:
09:aa:59:46:7d:d9:52:3a:b3:59:44:cb:e7:00:37:
08:70:d3:e4:33:ea:d6:d5:07:fc:7c:6a:ab:b0:96:
c9:3c:e6:21:3c:b3:ba:79:d3:ea:83:b9:12:8b:c1:
1d:4e:e3:54:c5:76:e8:44:01:dd:91:9a:77:1a:76:
f8:54:99:92:be:be:ef:3e:ab:64:63:4a:c1:aa:52:
82:e6:91:93:41:d4:d6:57:88:4a:8f:e9:c6:6f:a6:
7e:27:81:06:ec:a7:07:d9:54:54:3c:a4:a5:3f:1e:
56:16:c3:90:e9:b2:a0:9d:31:71:d0:17:e6:f4:98:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C3:31:C1:CA:90:7C:9B:F8:2C:50:AD:87:78:35:B8:59:78:33:D0
X509v3 Authority Key Identifier:
keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ed:8a:88:dd:75:62:f0:12:9a:e1:03:e4:75:72:7d:78:a9:
4a:6e:51:ba:86:6c:4c:35:2c:09:5e:69:f2:f0:a8:6e:fc:73:
10:24:87:0e:df:4e:e1:46:b9:1c:d0:28:88:c3:5a:f8:88:2f:
d3:ce:4a:3e:49:9b:69:fc:84:e9:43:1d:bb:65:a2:12:c0:c2:
c3:ca:5b:22:cc:c5:dd:39:be:42:0a:dc:d9:8a:ca:6d:e2:9a:
47:b3:b6:ea:1a:3c:b9:eb:04:39:40:bc:0f:74:0d:b0:75:e5:
9f:52:93:54:41:db:cc:d5:cb:d3:df:aa:56:3a:49:47:93:c4:
55:70:9b:a2:c9:20:b8:6a:f7:72:04:dd:f8:8d:b1:d3:97:0c:
c0:22:50:1d:8b:f8:0d:d6:80:e3:04:ab:12:ef:cf:15:03:e7:
00:64:e6:0d:f6:37:d8:4e:14:24:88:40:4f:e4:12:d3:65:b3:
9e:dc:09:fe:60:40:53:46:2d:41:f4:a4:a6:77:1f:17:12:15:
3a:13:9b:74:5a:dd:c2:77:c6:56:71:39:f9:8c:e2:16:fc:17:
3e:ba:02:9c:46:f0:7a:a2:79:2c:ff:07:38:9c:eb:e9:ed:d5:
49:36:92:ae:40:fa:10:c5:9f:67:7b:b2:01:ab:3f:b0:db:81:
0a:30:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:08 2026 by rpki-client