Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: uzjY7RpS9djOuQvCA7HLyG8wp/eAihZfT1F3hHdjb48=
Subject key identifier: 9A:55:42:83:55:F9:BC:27:2F:5A:24:DF:9A:3B:26:60:49:85:EE:FA
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 019D273AE3E234D810487DEEF601285B6BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: Ox1Es96kTuvwzl5ccWP6RyqxiEd7NFFPqQNk1uCFmjQ=)
2: l4DBdStfdTqpFE2GUQ7wpbM0KWU.roa (hash: AQoHT6lkRghb1teuc/s2owz9xxJB3CRP6CmK2f0ZEEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e3:e2:34:d8:10:48:7d:ee:f6:01:28:5b:6b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=9a55428355f9bc272f5a24df9a3b26604985eefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:bf:6c:97:2c:8b:f9:8d:50:e6:be:77:8a:
0d:cd:08:6a:d2:f4:3c:c4:d9:8d:c0:f5:48:19:2f:
6e:33:97:67:61:30:8b:0b:35:0e:e8:70:36:9f:62:
9d:65:36:96:d1:17:71:7c:0d:a7:d2:d4:73:6a:4e:
6b:0f:aa:f4:cb:78:8c:4f:71:2a:a0:85:4e:69:8e:
ee:16:36:11:1f:7a:7e:81:d6:06:89:4e:ee:31:3f:
25:fe:77:0c:1c:4b:b2:df:b4:b6:d8:fd:48:9c:9e:
62:b2:3b:b2:fb:89:02:14:ef:40:f8:a0:f7:6b:3c:
68:92:25:3f:59:a3:d8:47:5b:8a:56:b9:43:34:c0:
d8:b4:e5:f4:e7:40:91:e4:b4:a6:79:4a:fb:89:5e:
52:c5:89:29:17:e0:e8:02:8b:28:bc:08:e7:21:e7:
3b:de:94:a1:da:52:6b:fc:e0:e2:f1:6e:ba:0b:98:
09:ec:0f:27:2b:36:12:26:10:0f:31:5f:8a:c2:57:
9f:fe:b4:c3:a6:a4:ee:6b:95:5e:35:dc:ea:24:55:
eb:37:06:a9:33:dc:31:f3:ad:65:0a:47:59:b7:d8:
c5:27:7c:f1:77:6a:f4:34:48:54:f7:90:ee:ba:8f:
f3:16:6f:74:bc:46:93:68:40:be:08:b5:c2:1d:f3:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:42:83:55:F9:BC:27:2F:5A:24:DF:9A:3B:26:60:49:85:EE:FA
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8c:30:61:8e:6f:75:50:79:72:17:fc:46:2d:4a:f4:a7:63:
04:e0:78:45:31:67:0c:e1:06:78:86:c0:bf:2e:47:44:ec:68:
59:aa:9a:a7:f8:1d:da:05:de:e6:ed:e6:68:8f:76:e6:af:0f:
d1:e3:30:da:27:54:9f:e4:d7:8c:c5:9b:a2:5d:ff:a7:38:96:
85:04:f5:2a:e4:07:32:65:83:8b:9f:cb:3d:24:cf:43:f4:b2:
e8:4b:78:83:52:42:51:ee:90:21:51:68:4c:39:5a:b6:60:53:
2c:e6:88:f7:87:36:7b:78:3c:93:0d:3a:6a:53:c1:33:db:9b:
58:bd:4a:08:d1:ef:fb:d2:a2:4e:54:cd:92:0e:a3:b0:bf:5a:
74:c0:8c:da:51:b0:b1:53:8b:bd:98:e5:4d:3e:26:58:17:08:
8f:4e:13:e8:fe:a1:7a:d7:65:78:81:c6:61:89:1b:17:e3:fc:
b1:81:f7:4c:0c:03:29:6e:e4:94:4b:70:ce:08:48:42:67:6f:
bf:ee:0b:29:c1:cd:13:38:30:e1:48:bd:e8:6d:7c:10:90:7e:
4b:91:ec:59:e1:43:6e:a9:eb:44:29:c7:11:0e:65:3a:fe:df:
1d:f5:35:4b:04:f5:ef:f2:4c:3a:ac:de:95:2f:14:88:06:4f:
7e:1b:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:49 2026 by rpki-client