Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier: k2ZKDptLNsCv4FnB8VGZNfkZdnTDeQCEHXgznvTm4Gw=
Subject key identifier: 31:04:4B:8E:D4:E7:EA:92:55:BD:27:4E:C1:57:B3:43:D8:79:B9:0C
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 019D2960B03BB0E1437B4774F56F0711F68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number: 17DC
Signing time: Thu 26 Mar 2026 09:01:35 +0000
Manifest this update: Thu 26 Mar 2026 09:01:35 +0000
Manifest next update: Fri 27 Mar 2026 09:01:35 +0000
Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: JHDuHohAVtcYqNZ8P7Dy8rBwgNzZZDPCK9p/Pu+uROk=)
2: vUZltBKcGS-PyNExw351SsPo8f0.roa (hash: R88L+/UM9Ub6dUxPG9JUIXyMGiUf8ahmjgxxPz1xB4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b0:3b:b0:e1:43:7b:47:74:f5:6f:07:11:f6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Mar 26 09:01:35 2026 GMT
Not After : Mar 27 09:01:35 2026 GMT
Subject: CN=31044b8ed4e7ea9255bd274ec157b343d879b90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:ef:d3:97:f2:65:89:db:b2:8a:6e:5d:61:
67:cd:0c:e5:50:2b:89:55:6a:53:40:4a:47:c2:a4:
b0:3e:81:75:fd:bd:3f:75:4e:b4:a3:5a:ec:8a:e3:
f9:60:9e:3d:5f:a2:e4:da:25:6f:76:5e:e8:50:e5:
10:5a:9b:00:df:ef:3b:cd:2e:a7:cc:99:db:e1:ea:
4f:e3:ef:8f:15:06:58:9e:95:f0:fc:b4:99:2e:2f:
eb:24:05:60:0d:cd:fb:a9:76:f1:d8:db:5e:20:7d:
fd:fc:30:e0:ea:1d:ac:f5:7d:a1:e2:93:b0:e9:38:
6f:f4:c2:4f:1f:c4:93:0c:30:45:f8:ae:ed:31:12:
fa:0b:2c:48:34:20:75:ce:91:dc:c8:3c:6e:9d:d4:
01:2b:0b:31:9d:9a:2a:a4:0e:7e:38:78:74:55:8a:
de:e5:5d:05:3a:8e:7d:da:c4:85:af:9b:f3:6c:98:
ed:cc:8f:2c:f7:e6:5f:dc:0f:84:a6:8e:9b:b0:d1:
7e:21:a8:e5:3a:87:03:d0:eb:df:83:1a:e0:f6:9e:
4d:8a:98:c5:c8:a1:6a:f9:fc:49:2d:4a:25:b4:6b:
0f:01:5c:77:06:b2:fc:f7:7c:49:ea:fb:4d:1f:f1:
bd:b5:00:73:c6:6d:af:45:24:4d:f6:88:01:fb:9e:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:04:4B:8E:D4:E7:EA:92:55:BD:27:4E:C1:57:B3:43:D8:79:B9:0C
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a0:f5:05:c9:c4:40:e8:5a:dd:3b:3b:72:dd:ab:ee:8d:c2:
98:de:9e:ac:46:70:b0:ab:11:fb:8b:4e:98:65:6e:86:f1:6f:
40:61:2c:b8:96:82:47:1a:4c:45:29:0d:51:ff:eb:e7:84:72:
64:47:43:d2:f3:05:85:8c:51:7d:a8:84:a5:13:b3:d4:02:1e:
66:41:9e:7c:e8:38:ba:58:84:15:fe:e2:77:5a:18:a4:d7:e9:
a7:24:02:91:cf:4f:6f:f0:8a:b0:de:b6:97:ec:c0:16:8c:4f:
5d:13:7e:f8:33:2a:ac:a1:d1:04:9a:5b:14:8e:1a:65:df:e1:
f1:66:af:c6:ec:08:f5:e7:e9:b8:4c:71:70:58:e4:8a:cd:df:
fe:c6:65:c9:0f:91:3b:13:54:a8:62:d8:13:5f:9d:23:1c:d0:
5b:2e:04:b6:8e:06:7a:ba:d3:a8:0c:17:89:aa:b6:1a:ca:a7:
62:3e:18:eb:68:e1:4f:7c:e8:b0:b4:9e:6b:f9:e0:62:7c:a4:
18:61:f7:c1:26:06:59:1d:1e:a3:47:91:5d:d1:89:4a:51:94:
e7:48:ba:68:5e:ef:f6:d7:74:df:90:3d:b4:21:3c:70:14:d9:
dc:a9:4c:49:a3:43:10:30:a4:c2:67:64:e8:11:02:56:56:ef:
e5:70:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:50 2026 by rpki-client