Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: c28EskprfIQYXJdIH2JSlEW4np3+roetBR+iu6EHkL8=
Subject key identifier: 5E:35:FC:30:0F:B3:55:3E:E6:48:44:F8:52:AD:08:0B:66:D0:1A:A1
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 019D27E0634CDE15E2273AA71A61571894FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 01DB
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: CciEDTTiMhp0GSC0dNEvoKByAZ6INlpSgQcYZoWDycA=)
3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:63:4c:de:15:e2:27:3a:a7:1a:61:57:18:94:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=5e35fc300fb3553ee64844f852ad080b66d01aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:8c:e5:fa:7d:ac:f8:60:4b:85:4a:61:34:
ca:1b:dd:8e:d2:f2:15:8e:37:7a:0d:1d:1a:9b:40:
08:bc:57:6e:20:f4:15:cd:ec:c5:ff:b0:eb:70:ae:
9e:11:26:2c:08:59:d7:7f:27:9f:31:d8:a9:dd:d1:
d6:48:73:74:97:2d:eb:13:f7:94:61:13:b1:05:e4:
cb:01:df:38:d1:a3:19:c7:3c:dc:5b:d5:0c:f2:9d:
25:86:b4:ed:2b:21:2f:2e:fe:6b:44:3c:44:16:d4:
0f:6f:a6:41:36:28:97:e8:de:34:d1:b8:46:75:e0:
bd:e7:90:d2:c9:0b:10:85:3e:d1:5a:f6:cd:49:9b:
93:e3:3c:be:27:98:7c:28:c3:54:4c:90:01:a9:94:
f6:be:21:c0:55:9f:a5:c1:13:1b:40:15:4c:52:5b:
19:bb:bc:fc:3e:75:72:1e:75:73:eb:c9:3c:63:7c:
12:37:4b:cd:1e:08:51:c0:b2:6a:ff:47:03:3a:40:
85:a1:9e:be:de:ef:2b:cc:c1:43:1d:91:f2:46:77:
c4:8b:dd:dd:7d:1a:aa:76:84:fa:ec:2d:b2:b8:ce:
67:fe:af:05:42:f6:4f:09:95:59:e5:aa:b8:3c:97:
ed:55:8c:d3:be:52:a4:c1:ef:af:ce:d2:6a:44:ed:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:FC:30:0F:B3:55:3E:E6:48:44:F8:52:AD:08:0B:66:D0:1A:A1
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:58:39:11:b4:46:8a:5c:d1:de:40:af:44:cf:f9:3e:45:f9:
64:eb:20:79:e9:85:88:98:11:67:7a:45:18:98:8a:9e:e7:60:
9d:d0:88:74:cd:e7:56:c5:0c:40:4a:9b:bc:24:ee:91:25:fb:
7f:f6:86:14:a4:56:39:ba:7c:fa:0f:4e:b7:eb:a3:99:13:49:
89:8c:cd:42:e5:97:68:55:5c:2d:3c:0b:96:56:73:56:75:52:
69:52:42:36:cd:49:15:80:80:1a:43:5e:fd:ac:04:3a:f8:c9:
3b:65:b6:0b:eb:4e:ec:20:36:8d:4a:d7:69:88:27:14:86:b9:
23:b3:91:ae:19:94:46:c0:a0:db:35:04:fc:d2:6b:a5:64:53:
c5:99:10:0f:4e:d7:b0:11:c1:94:e2:27:49:8e:e9:7c:99:47:
2c:aa:29:b1:91:ca:ce:b0:27:bd:1e:9f:55:0d:a3:e7:b2:71:
fa:3a:9b:07:36:ce:0f:e0:5b:20:16:dd:85:46:56:a8:5a:e1:
df:af:6b:76:8a:f8:21:18:60:9e:d3:ae:7b:21:74:e8:68:64:
c3:c9:36:a0:5d:96:41:3e:82:55:11:e6:97:2f:27:98:2c:77:
94:96:99:48:dc:fb:38:76:c1:3c:d8:1e:41:e1:e1:c7:fc:2a:
d7:05:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:24 2026 by rpki-client