Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: uIvmsnIMta8KorZhxKv8ZvyS+tNLToe85TFL18s5iRI=
Subject key identifier: 7D:40:D6:33:98:27:C5:E9:F0:06:B6:27:3D:08:3F:47:08:53:C1:94
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 019D2929353180993A2BD026BE980E50F79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 0644
Signing time: Thu 26 Mar 2026 08:00:59 +0000
Manifest this update: Thu 26 Mar 2026 08:00:59 +0000
Manifest next update: Fri 27 Mar 2026 08:00:59 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: Fox6MYoBzsnoYrFVLHfP6mHZcnm1zkxnH33a49quaz8=)
2: mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa (hash: buVxIPz10EIVfwpYwh+P1ZYqWF3K+n7bUAR0sR0jGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:35:31:80:99:3a:2b:d0:26:be:98:0e:50:f7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Mar 26 08:00:59 2026 GMT
Not After : Mar 27 08:00:59 2026 GMT
Subject: CN=7d40d6339827c5e9f006b6273d083f470853c194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:54:de:7d:4b:6d:02:93:a3:c8:1d:58:a7:
93:6e:fa:a5:c4:0e:b2:13:82:37:dc:89:7a:02:89:
04:d8:cd:23:33:eb:ac:80:58:5d:54:a4:91:4d:6d:
58:b3:2e:e8:16:25:86:d0:a8:a8:60:8e:8d:40:b9:
e7:00:9a:0f:ce:0a:31:06:2b:3c:87:25:df:ed:a1:
0d:6b:b3:c1:af:07:3d:98:c7:46:fc:f7:8f:a7:f3:
84:94:2e:a8:62:1f:a1:32:6d:4d:f7:bb:54:5e:0c:
79:30:0b:db:fe:ab:b1:01:1d:a7:bd:de:fd:6c:1d:
5d:af:5e:0a:71:68:1a:0a:53:e5:11:fc:4d:4b:a8:
22:e9:2e:08:82:07:a6:4b:6e:1c:4c:b8:26:44:d4:
4c:ba:11:6a:0e:00:1e:57:53:4f:c5:bc:b8:91:e3:
3a:88:c5:f1:29:fd:30:83:d2:b1:13:15:a9:54:9e:
86:5f:53:ba:01:4e:f3:75:7b:36:72:c1:d6:a8:40:
45:49:80:6b:de:a0:16:08:86:65:8a:d6:7b:15:a2:
50:10:47:29:06:35:67:15:fa:31:6b:6f:30:32:c2:
97:a6:9b:31:e6:4f:74:d9:da:16:3a:de:d8:11:c6:
7c:fd:68:41:26:2e:db:5f:47:f8:a6:51:4d:f6:d0:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:40:D6:33:98:27:C5:E9:F0:06:B6:27:3D:08:3F:47:08:53:C1:94
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fa:3d:f7:dc:28:ea:c7:41:cf:b8:da:7d:c3:f4:d8:df:db:
d7:ca:e7:56:9e:48:d4:87:65:ce:b5:03:25:7c:19:ba:03:b5:
6b:60:61:73:7b:ce:64:48:40:2f:5b:73:9f:f0:76:e0:0f:f1:
d9:b4:32:02:7d:46:51:b1:d3:bb:13:48:bc:ad:03:f4:30:b8:
26:46:34:bf:2f:4d:d1:2c:08:b2:05:d9:68:38:8e:a1:58:4d:
54:da:a6:8e:84:fd:2a:be:60:11:ed:85:29:1c:ae:c3:a3:8e:
9f:e4:18:5e:ae:f5:a3:f6:4c:f9:d6:0d:97:0a:f9:5f:ce:35:
94:11:41:72:19:01:11:bd:ef:9a:8b:11:b5:0c:ff:6b:6a:db:
27:1d:0e:cb:93:a8:76:c6:4b:9a:3a:e8:cb:57:3b:0e:8c:b2:
7e:30:8f:cd:be:60:fe:e2:91:25:ad:d9:27:12:51:0a:db:09:
0e:f1:07:ab:d0:ac:84:f3:bc:d9:5c:df:92:60:35:35:b7:71:
20:ac:80:55:9b:62:d9:c0:58:29:cb:b6:ff:57:2a:02:4d:77:
c5:94:82:bd:1c:a0:d1:76:63:49:c9:eb:1c:a3:5d:82:e7:e4:
63:f3:f3:b2:06:10:b3:ab:ba:7d:b8:f0:c7:ae:1a:c4:4f:3b:
af:3e:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:26 2026 by rpki-client