Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: LgDjsSG66lIIXLKi0HMzlKFSEWIrahtewjYuM5qv++g=
Subject key identifier: 69:B2:75:E0:06:DD:BA:57:FB:2D:0B:24:C0:45:D0:6E:44:5D:CB:7D
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019D2929162128A53758964896D37EF323CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 115F
Signing time: Thu 26 Mar 2026 08:00:51 +0000
Manifest this update: Thu 26 Mar 2026 08:00:51 +0000
Manifest next update: Fri 27 Mar 2026 08:00:51 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: 1XwDmiItuYrZRCfDEVDSZ0h2yuK4eM76GCBLl4BsyN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:16:21:28:a5:37:58:96:48:96:d3:7e:f3:23:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Mar 26 08:00:51 2026 GMT
Not After : Mar 27 08:00:51 2026 GMT
Subject: CN=69b275e006ddba57fb2d0b24c045d06e445dcb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:83:91:df:24:58:59:dc:0a:47:28:a5:2f:
fb:54:bc:78:5a:90:87:41:d7:bd:4d:06:14:43:08:
e0:72:17:7f:7d:b1:b1:1a:b6:7b:08:f0:06:13:e0:
ed:25:39:c2:80:83:3f:42:ad:32:3e:3c:c1:19:57:
26:34:c8:9a:ee:f0:b0:34:66:31:3e:ae:99:44:1c:
d7:05:8c:5e:48:95:97:cc:72:a3:a3:4e:90:5c:91:
b5:ee:2d:6a:a1:a2:22:0f:6c:67:e0:66:8e:10:a5:
f1:ac:14:e8:85:ae:96:57:f8:9f:fd:33:b3:59:5c:
5d:08:f1:ee:e9:48:f8:7b:bb:a5:c6:02:3f:5b:33:
b8:2a:1d:50:92:09:52:86:da:4b:b7:ea:c3:c7:a2:
78:42:c5:81:bd:f6:f5:f9:72:02:bb:82:eb:7d:bd:
d2:2f:34:14:3c:33:6f:0b:fd:a1:d0:dd:4b:38:66:
6c:bf:67:6f:aa:d9:62:e1:f5:e1:26:d8:50:d7:9d:
6b:84:4a:06:f7:ec:f6:da:a3:44:5c:3e:3b:9f:04:
d8:a4:e0:11:36:17:c0:93:52:b5:37:1b:4d:3f:29:
6d:57:22:72:cf:4e:2f:a8:a1:8c:d9:3a:75:21:1e:
fd:a4:59:f3:8f:1d:41:cd:67:02:5f:9a:ed:c6:b3:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:75:E0:06:DD:BA:57:FB:2D:0B:24:C0:45:D0:6E:44:5D:CB:7D
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:24:46:9b:0a:e8:e6:78:33:f6:33:4f:69:fe:9f:3b:29:e4:
8d:aa:70:4a:b3:e9:bd:1c:5c:7e:7c:88:51:7f:25:f4:cc:0f:
1e:5c:d9:cd:18:9a:24:dc:01:73:f1:68:c2:8f:53:e6:77:ba:
1c:1b:de:bb:74:b7:2c:90:08:31:46:1c:99:39:3d:e3:7f:9c:
43:ef:43:9d:eb:9e:63:e4:e5:dc:29:ad:9c:df:24:a6:42:0c:
e6:17:a0:d8:f3:52:b8:1e:ba:bc:ad:30:c4:11:68:f0:02:7b:
d2:6f:3e:c4:ed:32:5b:07:8a:fb:51:23:12:31:ea:2c:89:40:
98:2e:fe:6b:3b:75:fe:61:3b:e1:a9:61:7d:4a:27:fe:3f:85:
36:a6:34:55:53:58:57:94:d1:53:69:1d:f0:f6:6d:67:66:2a:
06:bc:b5:7f:69:73:e2:cb:94:a1:d6:74:14:aa:33:26:75:ab:
4d:23:81:18:20:66:9f:c5:e3:7f:5b:be:64:4a:6f:62:28:b7:
d9:ce:ee:8c:88:a1:a5:de:17:da:c0:86:75:02:22:91:28:8a:
95:e2:49:45:9e:7e:0d:e1:e4:42:3c:26:1b:1f:2a:93:5d:e8:
ff:da:1b:72:74:97:c8:a4:07:00:c4:fd:4f:a4:81:a5:5d:96:
cb:c8:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:38 2026 by rpki-client