Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier: 5fY/f4mLbJAK7z8RZqPfYOv/JaJpRvF05yBErsUEO8w=
Subject key identifier: 1E:E7:53:1E:21:31:A5:B1:9C:CE:44:43:82:C6:18:8C:A9:1F:1E:4F
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 019D299716E006A51C2F058BFCBAB64F7F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number: 1614
Signing time: Thu 26 Mar 2026 10:01:00 +0000
Manifest this update: Thu 26 Mar 2026 10:01:00 +0000
Manifest next update: Fri 27 Mar 2026 10:01:00 +0000
Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: o3yyOxuqRkPZwd3yufqriqlpsxbrHFl8o4el9n/p4ZI=)
2: mI_mfOa16c9i2aB5y-5RdFkoQzs.roa (hash: CYTfnzdl53VUc2uYy5eOC2P2ZEG/Uh5nTjGXOTog/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:16:e0:06:a5:1c:2f:05:8b:fc:ba:b6:4f:7f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Mar 26 10:01:00 2026 GMT
Not After : Mar 27 10:01:00 2026 GMT
Subject: CN=1ee7531e2131a5b19cce444382c6188ca91f1e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:29:2a:78:5d:96:c3:41:80:b8:fb:8c:a9:
60:85:31:58:5d:7a:b8:b4:ed:5e:80:27:b6:db:25:
de:ee:c5:66:aa:b1:37:08:9c:14:a2:a4:d4:a3:3d:
4b:f5:01:d3:38:a6:e4:aa:21:51:33:df:3c:79:d6:
94:a3:56:a2:32:e1:8f:03:90:93:65:15:81:df:8a:
19:a8:20:9c:64:67:ed:8c:12:ad:d0:86:eb:63:2f:
4d:13:b6:46:32:46:57:11:69:bd:d9:67:40:99:ee:
5b:e8:4a:c8:50:89:55:2e:2d:05:bd:83:d4:c5:fc:
4c:01:0b:57:7b:1c:6a:f1:76:94:23:fc:df:80:73:
94:38:75:49:0c:67:49:37:f8:d6:af:1d:3e:b3:20:
f2:9b:f9:0c:b4:07:a7:e8:d2:db:33:b5:8f:c6:b7:
3f:74:f0:6b:75:ee:63:ff:47:c8:96:15:ed:22:9e:
51:e7:3c:d2:7d:26:81:a5:64:ef:de:e9:dd:ea:68:
1b:34:53:2e:84:f1:ed:b6:bd:11:ca:c8:53:40:b9:
3a:a3:49:5f:9d:a8:7a:cd:b6:0d:e6:0a:24:fc:e3:
b8:07:f9:e9:f6:21:2e:84:14:ec:a9:a6:78:54:9b:
ae:5e:64:f2:64:35:48:a2:ce:9a:f0:dc:db:a0:ec:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:53:1E:21:31:A5:B1:9C:CE:44:43:82:C6:18:8C:A9:1F:1E:4F
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:da:64:c4:d3:f9:90:6e:99:81:d4:8b:1c:1f:87:05:8a:8e:
c2:cb:bb:00:81:ae:a1:a2:f8:31:58:e7:e8:f1:9e:b3:3f:9e:
d6:7b:b6:5b:64:1f:98:0b:02:9d:4a:d6:3c:67:bb:fd:93:37:
e3:2f:e5:27:ea:55:95:58:9c:cc:66:4b:6e:54:95:c2:e5:1a:
8c:4c:c0:35:af:0c:bd:4d:e7:71:1b:d1:09:b1:6d:9e:cf:6e:
1a:32:ed:f7:ac:33:a1:d0:58:34:e4:eb:dd:c7:91:d0:ae:ee:
c5:0d:cf:8f:6b:4e:2c:d3:14:3b:29:d3:3d:62:db:2e:09:70:
ca:69:26:36:f5:8f:c7:60:69:6b:54:4b:07:19:55:3f:e2:62:
c9:33:8d:8d:30:99:fd:f4:0a:d8:d1:63:0a:75:f3:08:a3:25:
a9:4e:3f:5f:37:32:60:ed:0c:0e:dc:fd:13:b7:c1:26:7e:63:
c2:e8:15:c8:bd:b4:53:d6:84:89:0d:2d:93:8d:07:5f:90:3a:
b0:ac:a6:3b:1d:27:12:ec:a4:3c:a9:0d:2c:29:f5:15:91:31:
ad:92:e1:df:0f:29:e6:19:d6:22:8c:68:38:89:03:38:2b:91:
41:57:94:12:c8:98:92:81:75:35:c4:c5:2f:5c:1f:95:6c:c9:
d3:98:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:29 2026 by rpki-client