Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: 1ls0x5paynDX+grSwBtmN7KK5hoBbJcF/MtH959sA7k=
Subject key identifier: 7B:E5:CD:12:B7:5D:D6:C9:92:13:08:BE:5E:A8:DF:A8:97:79:38:20
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 019D25BAACC6FA2711FBEBAED3F1DE0ECA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 09EB
Signing time: Wed 25 Mar 2026 16:01:24 +0000
Manifest this update: Wed 25 Mar 2026 16:01:24 +0000
Manifest next update: Thu 26 Mar 2026 16:01:24 +0000
Files and hashes: 1: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: mdAn1z9YHv0bZEp4QT8FkGhFC46iCgz5rr+WCq14MMQ=)
2: aPWLJM6IziuoIQ-9dg15aPOtRRI.roa (hash: nW9Lbvb0zK8UkUgMG6xc5L/WUYzGO8kQcti52apyWJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ac:c6:fa:27:11:fb:eb:ae:d3:f1:de:0e:ca:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Mar 25 16:01:24 2026 GMT
Not After : Mar 26 16:01:24 2026 GMT
Subject: CN=7be5cd12b75dd6c9921308be5ea8dfa897793820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:ea:39:7e:b5:47:60:f1:50:f6:88:c4:3a:
01:16:a3:b6:e7:3e:33:ea:c1:69:df:79:33:38:aa:
43:a9:55:5c:c0:cf:55:e7:cb:ab:5e:bd:c9:d6:26:
59:01:51:e3:6d:e6:49:df:1b:02:f4:02:71:22:c6:
3f:72:f8:a2:cd:a1:84:f9:74:0f:7e:79:5b:78:da:
96:04:31:f9:36:81:31:d4:11:18:f7:31:d8:38:20:
12:61:01:ed:71:26:1f:b2:ef:dc:c1:7d:21:66:10:
27:03:c1:f6:58:3e:d2:be:6b:19:a4:d1:fc:64:dc:
e2:eb:75:ef:09:56:67:56:09:97:03:f6:58:76:59:
3e:e5:53:df:25:31:ec:56:05:3e:58:7b:96:a5:47:
1d:ba:52:a7:13:a5:1a:ad:de:db:e1:db:5f:fd:29:
c9:39:c5:cd:50:91:c0:23:84:5a:20:7f:b6:d5:54:
cf:f6:de:dd:0f:d9:26:25:db:9e:54:38:61:84:e5:
45:42:3e:1f:63:42:d9:3b:82:76:c6:1e:19:2a:86:
ac:80:ae:5c:b0:36:96:b2:22:9d:80:ca:0e:a9:0f:
67:22:0f:cc:6b:44:a3:61:88:6d:f3:46:dd:ea:f4:
e2:ee:0e:74:8f:d5:de:06:3d:f9:20:93:41:0f:33:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:CD:12:B7:5D:D6:C9:92:13:08:BE:5E:A8:DF:A8:97:79:38:20
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5a:42:16:5d:94:10:2d:0e:33:53:29:85:9f:b8:68:54:91:
f5:dd:08:a0:21:2f:5f:82:4c:c1:d3:47:f5:ba:fd:31:89:2a:
d5:c4:c4:53:37:07:22:b7:6f:7f:11:68:5b:0f:b2:26:b3:b3:
3f:5a:4b:f6:c0:6e:04:63:51:30:11:af:88:d2:9c:be:9a:3e:
c9:2f:a5:fa:45:7e:5b:f1:d4:64:55:3b:42:63:bc:32:91:28:
96:65:eb:03:c8:a0:48:7f:52:34:90:d9:d8:31:1d:7f:8e:5d:
7e:be:7d:d7:4c:d3:22:f6:f9:cb:73:a6:25:f3:8c:48:d5:06:
68:7b:0b:09:42:13:4c:02:bd:ed:58:46:82:1c:9c:c1:22:dd:
c3:e1:b3:d4:17:bc:d6:07:74:aa:04:06:a7:d0:37:b0:41:cf:
3e:1f:72:2a:eb:fb:dd:9d:76:35:1c:d6:01:19:14:91:4c:5b:
fd:95:7d:f5:00:28:c3:e8:e6:77:2c:fe:14:43:24:e7:ab:45:
ac:c1:c1:5e:9d:24:4b:d4:95:a7:34:f5:fb:3b:01:df:3b:22:
1c:8e:02:9f:a1:73:e6:a3:26:38:0b:ee:74:ce:c7:21:fa:4e:
31:d3:47:d0:70:e7:7b:75:a6:ac:6f:29:90:ac:1e:9d:e9:13:
70:17:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:23 2026 by rpki-client