Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File: QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier: bi7INLbvBc7ZtZw2gSlB4UaJ0dLUJZzT6YPABdtRhLM=
Subject key identifier: 9B:5F:E2:C5:0F:B1:4D:37:D0:79:95:3B:04:66:16:81:86:86:CD:66
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 019D29977D6FE5A20AEE979187E74E08C71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number: 114A
Signing time: Thu 26 Mar 2026 10:01:27 +0000
Manifest this update: Thu 26 Mar 2026 10:01:27 +0000
Manifest next update: Fri 27 Mar 2026 10:01:27 +0000
Files and hashes: 1: 6RTIAwrwJbLJ1fPq_cac7ZJtAcY.roa (hash: 2ERzYxNpNYyjAlD2AAScZj0ODsBHs3ahvyC6T+s+AbM=)
2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: feM/2UyQTYNMq4PzJM8BtFsQcqS1/Jpm4HtBqpXF9/s=)
3: oTRGw6Zs-d6bpDvQ-kL6ClRG4Ik.roa (hash: bLoXf9n41kaDI/ipYk9F3/X8uzxUQT3nnCgm1AJq7NE=)
4: oztBXyy3buPJ87mv28gbdNDGLjw.roa (hash: j94QmNmrVHRGHpcXkadwtbn926rIcrEUhkEOlIuoY3M=)
5: tGVxaOXkW7EuQqW9cKlE7ec1aac.roa (hash: muPN8zI+Nf3MgaQWzHsyyy2GZnIQWau/zxiVhyiqVlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7d:6f:e5:a2:0a:ee:97:91:87:e7:4e:08:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Mar 26 10:01:27 2026 GMT
Not After : Mar 27 10:01:27 2026 GMT
Subject: CN=9b5fe2c50fb14d37d079953b046616818686cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:24:4a:86:3a:ac:b4:02:ab:7c:ef:a5:de:
fb:8f:aa:7c:79:96:45:70:42:a2:86:63:fa:27:5d:
da:16:73:72:16:47:dd:17:96:5f:45:b8:a4:5f:b2:
85:b1:e5:a7:3b:91:04:f5:01:69:be:36:ed:9c:37:
61:20:fa:a4:c9:ff:a5:3a:07:25:d4:b1:66:3f:d3:
66:c8:75:78:ce:68:26:7a:19:60:9d:1d:0e:0a:2a:
8f:8b:ad:cc:eb:21:13:fd:42:1c:95:2f:bf:a9:4e:
e8:e0:fe:6b:ec:d2:01:71:98:af:e8:35:5f:d3:08:
b0:ba:eb:f8:92:ae:a0:c3:ba:da:39:5a:5b:7b:67:
bc:f4:30:dd:2c:be:93:bd:6a:a5:14:30:68:3e:90:
17:61:f1:e9:25:8c:2b:dd:64:59:a3:2c:0d:b2:50:
11:16:88:0b:a0:c5:43:b1:b6:64:39:e4:f4:62:d9:
6d:fd:c2:cb:28:97:e0:2b:df:bc:f9:f6:00:d5:38:
09:41:dc:78:41:4d:f6:59:8d:45:e2:5c:1a:39:35:
63:b7:36:77:b9:be:75:90:13:87:6e:db:84:f0:58:
2b:d0:58:c2:a3:a1:ca:30:7b:47:cd:ee:7b:65:14:
5e:21:cb:e5:f2:36:aa:9f:fc:fc:ae:06:e9:e8:c3:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5F:E2:C5:0F:B1:4D:37:D0:79:95:3B:04:66:16:81:86:86:CD:66
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a1:1a:b9:e0:5c:9d:62:7d:58:6b:45:82:8a:e0:c7:5d:a1:
15:a5:1b:3b:5a:22:30:1f:b4:e9:e4:77:91:65:8d:f5:66:58:
96:19:0f:b4:31:cb:ff:ff:a6:bc:a0:ae:71:2c:3d:1d:90:d2:
7a:f0:6f:1d:12:2a:c4:d8:9f:a2:58:49:83:7e:96:7c:53:2f:
8c:a5:98:74:1d:ae:44:5d:8d:34:db:63:c3:3e:78:44:5f:86:
d7:d1:a3:4d:50:8d:5d:af:1b:42:7c:64:02:93:92:c9:11:0b:
67:42:65:53:fc:32:7e:84:06:fb:b1:54:c8:22:b2:16:c2:ec:
7f:35:73:23:df:a3:f8:de:34:1f:38:4a:4e:77:57:bb:52:b2:
68:20:ed:53:37:d6:f6:18:1c:6a:b0:45:41:f9:22:c3:3f:d6:
d0:d8:18:ae:cc:84:52:d4:ee:95:3f:92:26:95:5f:df:20:76:
05:17:82:8c:23:ae:82:46:34:ae:b3:4d:f5:f0:4d:f9:b9:10:
78:a5:05:07:b5:bc:d1:94:c1:e8:32:39:d7:f3:be:c7:47:d3:
22:ff:09:3e:e9:9d:17:8b:76:26:17:27:8f:c9:aa:c2:6c:2e:
24:a3:79:6d:46:ba:bd:a3:63:78:1c:1b:4c:25:51:79:d7:ae:
b4:4c:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:56 2026 by rpki-client