Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: BhkGe9kf5Qcbjgk7Wf+yheix2lDU0CUYV2svX40DwSI=
Subject key identifier: 37:11:41:76:62:47:5F:11:5C:5A:38:8A:BB:2F:67:D3:5E:E4:05:0F
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 019D273AD8CA4ACE0DDF6756C0D454FBD64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 094C
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: PKtzJBgRozyZu/9O1HNxLocj1vf9RL60sSPriJxv6R0=)
2: R9Y6GrgbgpdjEIL15ST3hGQBv8A.roa (hash: ScvlNZwo3odOWYF4CC8lvyezDpeI3+SX0JX8xZyPseo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d8:ca:4a:ce:0d:df:67:56:c0:d4:54:fb:d6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=3711417662475f115c5a388abb2f67d35ee4050f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:25:a1:71:ba:6f:44:f3:d9:82:ac:d0:94:
5e:c6:af:ab:bc:01:b5:af:46:25:bb:12:93:56:65:
30:a5:ce:ca:20:97:b8:71:fa:ef:0a:b6:e4:d5:5b:
18:c9:fa:79:27:44:be:54:ab:40:57:eb:40:4b:65:
ce:d0:73:76:fd:cc:37:04:16:e8:89:4b:d2:72:3e:
06:23:f9:11:eb:31:ed:79:34:0b:4d:b4:0f:f9:98:
c9:95:74:34:0c:02:ad:ea:43:de:01:de:2e:06:59:
f9:ee:c2:83:b0:f6:a2:6f:c1:d3:84:21:20:64:42:
2b:ab:ab:08:61:64:e5:70:03:7b:bf:64:f9:b2:fe:
76:1f:e9:7e:c4:13:b9:9b:b2:7e:7a:6b:62:d2:95:
69:02:66:65:38:65:2d:e9:c5:7f:49:66:d0:85:0b:
10:6e:7f:fd:01:f9:0b:d3:cf:55:9c:6c:c7:64:c4:
b2:f5:fd:34:1e:cf:8f:83:fa:bd:1c:52:94:a2:de:
22:d8:8c:8e:3c:d1:57:48:17:23:88:20:e8:06:9e:
39:f0:bb:ad:0f:73:b9:3c:42:2a:4a:0a:0f:1b:f5:
18:b0:95:e5:12:e6:31:e3:d3:d4:8a:5d:8d:86:5f:
b2:ac:60:cd:a8:9f:81:c5:91:04:e9:51:2e:02:7f:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:11:41:76:62:47:5F:11:5C:5A:38:8A:BB:2F:67:D3:5E:E4:05:0F
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:16:d2:b1:1c:fd:b6:ad:8c:78:f3:ff:0e:97:4e:03:25:41:
8c:e6:23:fb:0e:66:2f:dd:27:97:34:a9:89:95:c3:92:1d:9b:
27:8f:e7:02:c2:80:cc:49:d1:f8:bb:81:42:62:9e:3c:d8:3f:
7c:06:d3:df:97:2a:12:e3:00:55:3d:cd:38:c8:d3:33:53:78:
15:ed:5c:a6:69:6e:50:39:99:45:4a:b4:44:a1:b0:b4:80:1a:
17:9f:d4:da:1f:12:7d:f5:f8:ec:f8:39:1e:2a:c5:85:81:d2:
37:e1:bf:da:45:9a:ff:7d:a3:94:17:66:32:a2:a0:7c:e1:14:
49:c3:17:fb:76:7c:37:b3:af:ab:19:13:d7:72:0c:64:ad:45:
d1:06:5b:b1:e4:d3:49:e6:a4:5b:be:c6:73:a1:67:88:42:7f:
d1:18:af:2f:06:ed:bf:5c:e6:9f:b2:de:e4:f4:09:3c:4d:44:
91:7b:23:59:07:69:35:03:f3:da:a7:19:89:c1:86:fb:e9:82:
fa:bb:7b:78:10:11:a4:28:73:24:97:92:9b:5d:17:5d:9c:ab:
63:9c:ae:48:c3:ec:99:20:a7:39:29:6d:2d:ae:48:f3:08:56:
d2:34:9a:ea:20:6b:78:b6:c7:30:62:a3:95:1c:25:99:26:84:
e7:f8:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:19 2026 by rpki-client