Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: pfDgq/wTBqk5aTRp/37n/2dCWWdi0llEMbvW/VL1ShY=
Subject key identifier: 14:4A:45:84:C0:E3:F4:46:01:D3:DB:93:2F:FE:98:FD:B9:42:A9:F0
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 019D29970568E1655F74A4E1616725B230AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 0A49
Signing time: Thu 26 Mar 2026 10:00:56 +0000
Manifest this update: Thu 26 Mar 2026 10:00:56 +0000
Manifest next update: Fri 27 Mar 2026 10:00:56 +0000
Files and hashes: 1: LlO-oDfJy4kmeYaGOwPxnumHLi4.roa (hash: FM9KBf9FUdp23hU0mhHesx5vQrM70l5mTBbeBlqThWA=)
2: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: ys+ujh6+uR2zo6rJy0osz02bKwh+kBGfXCMQMXgG5mI=)
3: gfglKvvvimegFAA6FxPdy5LdJC0.roa (hash: ULQvRCAQAoY7WWQNJkS/YT9oAOOrbWXvPf9Hs5STvkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:05:68:e1:65:5f:74:a4:e1:61:67:25:b2:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Mar 26 10:00:56 2026 GMT
Not After : Mar 27 10:00:56 2026 GMT
Subject: CN=144a4584c0e3f44601d3db932ffe98fdb942a9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:95:f1:e4:e0:fc:6a:87:d7:33:b4:60:8c:
64:bc:27:aa:b7:c3:77:fa:f0:18:fd:04:b2:9d:6a:
e6:0e:25:83:88:9b:c8:bc:1c:51:90:2a:1f:65:ab:
64:86:f8:a8:06:02:63:e4:89:45:f7:4a:16:73:b5:
38:ee:d2:c8:cd:60:e3:8f:0c:47:62:a5:8f:01:4d:
3e:97:22:f5:26:4a:a5:16:c3:a1:4b:ce:cb:5f:74:
67:fa:5e:70:52:2b:6f:8c:a1:3a:d9:f7:a2:e4:ef:
e2:df:37:3d:7a:f4:79:f2:1a:da:82:1a:d0:08:25:
48:02:b9:bf:10:cb:5c:77:5b:ad:30:3e:84:91:ae:
d8:c5:3d:6b:94:c3:4d:e0:58:85:41:8e:95:ce:49:
ac:29:43:db:76:ec:e8:58:8f:6c:c3:63:ca:de:fe:
95:6f:df:29:7f:30:c0:4f:dc:b3:1d:e5:8d:27:64:
70:49:18:f6:fd:90:6f:1f:a5:2b:e5:74:cd:94:49:
0f:f3:17:53:56:34:14:99:0f:f9:75:67:c5:58:21:
13:47:eb:76:68:de:ae:11:47:01:09:26:66:15:9e:
46:b8:3d:09:d0:7e:69:6b:54:e0:3b:55:6c:b7:b0:
e6:33:54:41:62:60:2d:f2:24:c8:9c:96:39:c8:36:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:45:84:C0:E3:F4:46:01:D3:DB:93:2F:FE:98:FD:B9:42:A9:F0
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2c:74:17:b4:71:f1:c3:b5:c5:fb:7c:3f:be:90:07:11:c0:
5b:6f:b1:11:05:1d:93:a5:3d:6a:ce:8a:61:60:d4:4a:4c:e5:
40:08:8c:82:e7:02:c8:98:cb:21:05:fd:e3:39:ed:a7:6d:cc:
29:2c:40:1e:5c:46:30:9c:f3:1c:ee:0e:2e:8c:77:7f:d0:08:
2c:58:0f:9a:07:4c:eb:b1:cf:55:7b:5e:74:40:70:13:eb:16:
7c:41:cb:f3:d4:e5:18:65:23:64:c5:b7:3a:32:bd:99:40:9b:
2a:42:9e:c0:1c:e7:39:cc:7b:92:8f:f6:9e:d5:74:d0:e2:58:
45:2c:bc:91:cc:90:bd:ce:51:0c:9d:28:49:fc:bd:1d:59:bb:
2d:53:e5:0b:73:80:40:7f:15:d9:1c:ee:ca:be:5b:32:bf:c8:
f0:ca:33:d8:c0:42:cb:e7:13:60:81:25:93:e9:a0:36:8c:42:
87:3b:78:a4:34:d6:0a:e2:8a:13:eb:6a:94:12:60:79:68:0f:
e6:af:bb:16:fe:3b:c7:ec:3b:22:91:af:91:1a:a7:17:b7:3c:
cd:5d:5e:07:6b:ef:06:15:d7:14:92:f8:a6:fd:99:66:4f:73:
16:7a:aa:dc:f1:79:4a:28:ca:24:8e:f5:c3:5d:e2:24:63:f0:
0f:69:c3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:20 2026 by rpki-client