Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: kMCkuWf3jUgHCDoN1uqAi0vdTS/XeUasVCxzrx9n8oc=
Subject key identifier: F6:6A:69:2C:07:54:D8:A6:8C:E0:F2:A9:59:94:92:F4:32:7F:DC:9F
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 019D2AE050528F0D631092B11B1D4B9B4136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 0896
Signing time: Thu 26 Mar 2026 16:00:36 +0000
Manifest this update: Thu 26 Mar 2026 16:00:36 +0000
Manifest next update: Fri 27 Mar 2026 16:00:36 +0000
Files and hashes: 1: D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa (hash: NEAvke3XuRiHlogwVc4RcyWVQUznukeff4gqiKDQn+U=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: ywlwzSsXSt5lR/1EFHFQH0b8/OTwjgvhmDly7oB2OTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:50:52:8f:0d:63:10:92:b1:1b:1d:4b:9b:41:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Mar 26 16:00:36 2026 GMT
Not After : Mar 27 16:00:36 2026 GMT
Subject: CN=f66a692c0754d8a68ce0f2a9599492f4327fdc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:a5:ba:2c:a8:0e:ea:df:d4:db:ef:a0:82:
88:8e:50:5a:6c:1a:f5:bd:47:ce:c1:1f:1d:b7:ad:
f0:b6:1f:f8:97:b3:88:c6:59:10:f2:0a:8a:a1:2b:
e1:ef:50:53:68:5f:87:57:00:d1:34:b0:5d:d6:00:
f8:94:19:97:f1:3a:5a:ce:6d:50:4b:c9:af:27:ee:
54:0d:18:04:59:1e:cb:82:17:a6:01:b3:c7:37:08:
4b:52:9c:2b:19:66:76:c2:70:07:98:ad:6c:7c:29:
cc:7f:cb:2e:48:d6:c5:d7:85:66:ac:a9:be:a0:71:
ad:ab:2f:a4:ea:8d:e9:74:cd:cb:3b:08:bb:82:4e:
62:4f:15:a0:88:97:e5:76:ff:9e:37:e2:60:9b:50:
2f:06:ed:4a:b3:32:6e:6b:60:95:b5:0b:41:61:50:
a2:a1:b0:e4:ea:20:df:4d:a0:ab:96:ec:37:5b:9a:
8d:5c:4f:d0:05:7c:88:4f:ee:51:bd:27:df:05:06:
b2:f4:e8:8d:70:37:73:8f:9d:03:d1:5d:c8:71:72:
e0:e4:5c:84:91:e6:46:a6:b0:08:0f:60:20:7e:ca:
ab:87:25:b6:51:04:f6:9f:09:39:4a:10:7c:82:c7:
39:ce:87:93:34:f4:4b:b8:a5:81:2a:cc:10:80:97:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6A:69:2C:07:54:D8:A6:8C:E0:F2:A9:59:94:92:F4:32:7F:DC:9F
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:2b:4a:7a:9b:7d:e0:b8:0b:31:ec:4a:c2:66:e5:66:2b:
6c:d6:1e:ac:0a:bd:9f:b7:02:f7:16:65:91:eb:c4:d2:2a:8b:
ba:6a:eb:82:2c:46:70:0c:a7:62:50:4f:be:31:72:5e:4e:24:
77:41:22:de:17:2a:48:b6:ee:40:ae:dc:6d:d6:93:91:c1:9b:
87:59:61:e2:e0:f6:68:49:1e:58:05:a7:96:72:ff:8e:f1:46:
05:08:44:ce:8b:d6:31:89:37:0f:da:e4:b2:9c:6b:87:c6:c2:
73:89:33:3e:20:7c:2e:68:a0:08:e0:7b:24:60:b6:5c:5a:1b:
9f:91:24:f5:0d:7c:84:dd:b8:ff:d2:8d:81:f0:13:ff:0d:ff:
a5:ac:99:6d:17:2e:f2:d6:05:91:f2:4a:00:5c:6e:74:a0:13:
54:e1:f4:6e:2e:d4:f4:9e:36:9d:12:0e:c8:9c:81:d6:71:f8:
a8:23:b4:0d:dd:b2:2e:42:2d:13:0d:bb:42:89:6a:a1:67:fa:
25:48:63:3f:26:a3:c6:bd:57:87:2b:57:f4:ec:bf:94:8b:c8:
2e:1e:bc:70:43:7d:23:ea:0c:74:ee:99:6c:ff:2b:29:c4:28:
a7:b0:7c:20:7e:f5:ce:6f:de:1d:4c:2f:72:52:12:99:72:59:
49:0e:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:58 2026 by rpki-client