Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json)
Hash identifier: 3BMNmmQaF2jrA2l76NKVTETbX1uIPcNTfkXDh8bA6zA=
Subject key identifier: A9:8E:EE:7F:89:67:46:C3:1D:D6:CB:06:80:02:01:A5:07:D2:92:55
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial: 019D2996E068ED60575527EF20B5A6771CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
Manifest number: 0293
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (hash: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI=)
2: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: HU4G1TiD2rC2cg1sAY0DjIyLJfDx7lpxxptNe+edFHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e0:68:ed:60:57:55:27:ef:20:b5:a6:77:1c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=a98eee7f896746c31dd6cb06800201a507d29255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:d3:2f:6a:4a:30:8c:f0:e5:74:9c:ad:d2:
3e:18:81:ff:e0:84:88:d8:8b:c6:0f:9e:c3:f9:f5:
2c:65:37:e2:ec:34:a4:e1:8a:5c:7b:9c:fe:d4:93:
9b:fe:b1:5b:c1:ee:be:41:df:29:45:da:3f:ce:d3:
1d:8a:9e:e1:b3:72:f8:76:aa:9c:5d:5c:cb:15:af:
8d:ed:7e:d8:7a:8f:b3:bf:fb:48:c7:80:48:97:50:
57:6e:40:75:70:4d:dc:e8:8f:85:c4:08:a9:ca:80:
73:c6:3a:4c:cc:69:40:4f:73:37:17:80:73:41:ec:
e2:d9:9a:90:89:63:89:81:6d:a5:16:93:02:2c:31:
98:f8:36:f6:a4:ad:1c:c4:9e:eb:46:d2:fd:b4:55:
f2:de:79:c1:e5:9e:e1:f2:7b:e4:ec:33:ed:ad:92:
88:e7:ee:44:b6:5c:8b:a9:62:3b:ea:ee:01:6c:53:
1e:c4:98:d0:a9:aa:5b:aa:0a:23:4a:7a:53:b5:fd:
38:03:87:e8:74:03:be:11:bb:be:09:a5:98:c8:df:
eb:2d:d0:bb:e6:db:d1:06:09:49:75:e1:ec:a0:d2:
03:f3:ff:30:05:af:bc:65:53:5c:99:ab:84:6d:49:
fa:2e:1c:b9:f6:68:8e:a0:fd:97:d4:1b:ad:05:6b:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:EE:7F:89:67:46:C3:1D:D6:CB:06:80:02:01:A5:07:D2:92:55
X509v3 Authority Key Identifier:
keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:59:86:d6:a0:f5:d4:6e:1a:57:c8:78:1a:a4:9f:12:b8:df:
c1:76:4f:84:f3:47:c1:23:8f:21:31:b1:7d:f9:de:5a:f8:e9:
2b:c8:5e:b0:e9:f1:72:f1:9d:75:c6:66:72:58:62:f7:56:98:
72:ea:fb:91:46:a8:5e:17:1c:00:4a:88:7a:b1:fa:7d:fc:ce:
61:cf:cb:66:68:0f:de:38:ae:42:a4:61:3f:f4:a7:1f:99:c5:
2c:1e:30:07:5f:48:9b:96:41:22:43:45:0c:81:a6:69:90:72:
bb:78:9b:9a:e4:1b:2d:30:20:6c:e8:bf:3a:83:fd:ea:8c:d5:
9f:28:51:2c:13:8d:ab:78:a5:03:75:42:60:4c:e6:c1:99:83:
70:5a:fc:af:79:ec:45:fd:07:00:44:0d:de:83:03:1e:c8:8c:
44:19:4a:fd:86:5d:1d:be:f8:90:87:d1:5d:3b:cc:0d:b5:2f:
28:e0:22:ab:d7:77:ca:a2:ad:6a:35:36:28:57:44:f7:10:db:
38:cb:79:f4:48:13:09:80:df:4e:a1:9b:88:63:82:9c:b2:17:
2f:33:98:97:38:01:56:09:5d:c8:0c:e8:af:2c:3b:f0:7a:35:
ca:de:38:d3:6b:5a:5f:df:7a:99:e7:0c:e6:88:35:1e:d2:10:
d1:b8:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:13 2026 by rpki-client