Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: sJkBuUwlxRQ1HVu/oLy3RavU7cgve44C/5kMRLIk8Q4=
Subject key identifier: 59:35:C9:E3:C1:05:DF:C6:85:6A:76:D0:F6:06:96:F6:10:1D:2E:06
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 019D28168412AB8B03FAB3DB430EF44C2D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 11BA
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: HsTpDwUzCiHRb2xpdW8AnVM8qH8jlK08GYC67v3tTGE=)
2: jjNhYUO0WkXUvNbvJZNzRwu7bDY.roa (hash: PYUXYUIOFwhoZ+QPr8MK2mvgKDuZumcu7LyDXuRa6e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:84:12:ab:8b:03:fa:b3:db:43:0e:f4:4c:2d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=5935c9e3c105dfc6856a76d0f60696f6101d2e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ca:d6:63:39:14:e1:75:f2:ed:7e:86:94:e6:
03:ce:57:e0:f8:c2:01:77:26:c1:2b:d7:2b:2c:6d:
47:bd:49:44:0c:78:77:12:44:65:1a:2a:b5:27:31:
5c:57:a8:5b:0c:fe:ff:e7:99:80:8b:32:95:e3:67:
08:52:6f:71:cb:83:b4:8a:d6:5b:f3:c5:93:54:51:
d9:d5:2d:48:08:e9:1f:31:6e:32:74:5f:7f:83:64:
d5:f2:fc:b6:ee:61:a1:ff:03:f5:51:b5:4d:ee:12:
91:97:47:18:2b:9c:91:4f:eb:1b:18:c5:30:d6:39:
5d:dc:7f:af:29:f7:02:34:ea:a7:0d:ba:6a:44:d5:
54:98:e3:9b:9e:28:34:e9:60:a1:c9:dd:12:75:e7:
bf:ae:e5:4c:28:28:a5:52:ca:83:9d:c9:e5:2f:d2:
95:c2:3b:34:72:99:14:61:a5:fe:98:e5:a5:b8:4c:
93:17:f5:4d:82:c7:3c:91:2f:89:f8:b8:bc:82:a8:
5a:61:4b:77:cb:06:d9:8d:f6:58:13:f1:0c:45:7e:
81:b9:10:01:a4:68:ec:c3:9f:1f:4a:48:af:b1:0a:
99:af:a9:99:b1:81:f4:11:a6:ef:a7:8a:4b:c4:e0:
ce:1c:82:8f:b3:99:80:06:84:7b:7a:cd:a1:70:7e:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:C9:E3:C1:05:DF:C6:85:6A:76:D0:F6:06:96:F6:10:1D:2E:06
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7b:cc:df:8c:6b:29:86:18:e5:c1:32:24:52:e9:02:18:95:
70:e9:7e:cf:cb:b4:85:20:be:67:3b:22:83:18:cd:64:62:11:
4c:d1:3d:75:6d:8d:ad:f5:fc:e0:b1:61:7a:43:0d:0f:47:bb:
4d:80:19:e0:51:ad:ed:83:78:43:f2:10:6b:92:49:8d:ff:62:
d9:ad:c9:5c:b6:d3:16:7b:c9:8b:9b:0a:3b:e5:19:e6:b5:c0:
65:96:50:19:30:15:68:3c:21:9a:7e:d0:c9:1e:e5:df:bb:d2:
ba:5d:6f:9f:ab:34:69:34:aa:a0:17:f3:c7:4e:c0:35:fc:9a:
63:28:f9:aa:1b:39:56:a7:e5:96:2d:74:37:58:13:d7:d2:4d:
7a:91:b0:d9:8b:7c:26:71:b7:c0:7b:06:fc:b0:c2:30:fd:c4:
60:d1:85:12:bb:bb:40:5f:83:d7:91:5b:e5:13:68:b3:1e:af:
1e:e0:80:3b:c9:8f:79:57:87:26:77:85:73:a0:85:56:51:aa:
65:45:0f:5e:27:0a:49:83:f0:f0:b0:f0:7d:0c:6c:e2:b3:3f:
fd:f3:e1:78:41:8d:39:45:42:39:fa:f5:3c:f9:bd:de:78:69:
08:14:23:bf:10:ea:19:79:f3:5c:26:ab:4f:ce:2c:35:dd:5f:
84:c8:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:20 2026 by rpki-client