Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
File: QiDU__u-ArE02Y5KK0X6e39Vh0w.mft (raw, json)
Hash identifier: z+/LFbyyMHEb0/WPrR9Bv8KJfig5TU4LdeX9fESMN8g=
Subject key identifier: FC:28:DC:F4:49:3C:1E:06:8B:D7:11:3B:86:6F:85:1E:04:2A:4F:A7
Authority key identifier: 42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
Certificate issuer: /CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Certificate serial: 019D2BF385C7FE1E8F368C547B704898F299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
Manifest number: 01A8
Signing time: Thu 26 Mar 2026 21:01:12 +0000
Manifest this update: Thu 26 Mar 2026 21:01:12 +0000
Manifest next update: Fri 27 Mar 2026 21:01:12 +0000
Files and hashes: 1: Nz3SX1ili_hMO_1sKV-Z-Vs-dFg.roa (hash: tWFA6luZXm6+YFp43tgoM3FIlmo/3WZAxBWjup0VIJs=)
2: QiDU__u-ArE02Y5KK0X6e39Vh0w.crl (hash: jj7K/ivxjSAhQrveiFl+6qaDZWzPyKRjeklzgs/5klo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:85:c7:fe:1e:8f:36:8c:54:7b:70:48:98:f2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Validity
Not Before: Mar 26 21:01:12 2026 GMT
Not After : Mar 27 21:01:12 2026 GMT
Subject: CN=fc28dcf4493c1e068bd7113b866f851e042a4fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:b5:b0:72:ee:4b:a8:c2:a2:dc:ae:26:29:
0e:7f:0d:3c:b2:f2:38:b7:87:cf:80:54:4d:c4:61:
04:56:b1:f8:ba:34:35:96:c7:ac:d2:97:c2:8d:c6:
a2:4f:56:5a:53:9e:d3:3d:2e:19:36:b5:0b:e6:b4:
2a:0c:cb:7f:60:bf:dd:74:11:54:5e:b2:cf:a8:5b:
6d:bb:f1:34:49:d9:14:05:46:c4:bd:f1:f4:71:22:
4c:56:e0:14:e7:43:cd:06:fb:35:c0:c6:ca:7c:6c:
b7:65:09:65:0f:80:cb:80:f4:ad:11:d0:9a:9a:10:
90:7a:ef:1d:86:17:1f:d9:b3:47:96:fa:c9:45:02:
bd:b6:f4:89:c9:53:17:01:2e:6a:12:c1:b3:79:46:
fe:d7:c5:a0:74:cf:e0:59:fe:fd:c5:94:82:ed:df:
9a:dd:be:ab:da:cb:c3:cb:1f:a0:0c:5c:86:b3:2a:
71:1f:bb:ac:48:6e:dd:01:59:fd:99:19:2b:45:f5:
3b:5d:2c:7c:85:31:06:99:81:8a:7b:7c:51:59:fe:
6b:bf:9c:ba:d6:1a:d3:aa:d7:56:1b:1a:b8:d0:5f:
68:ce:81:ce:11:da:e8:ae:c5:dd:58:4c:e2:17:44:
6c:9e:08:8a:03:b5:e2:92:84:c6:16:29:56:e1:c8:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:28:DC:F4:49:3C:1E:06:8B:D7:11:3B:86:6F:85:1E:04:2A:4F:A7
X509v3 Authority Key Identifier:
keyid:42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:46:e9:71:14:1d:b5:fd:05:79:d4:32:67:aa:5a:d6:7a:
6a:9b:60:07:bd:d0:9f:50:bf:44:30:b6:5b:9b:a8:20:64:94:
e4:90:62:c1:3d:78:ce:87:1f:3f:79:a4:d1:3c:72:8f:21:bb:
9f:80:95:83:8f:df:5d:ac:2f:dd:4a:f5:87:98:4c:a0:0e:ab:
6e:15:87:69:f4:2d:53:63:90:ab:a9:a5:92:01:7c:75:a0:e5:
53:d0:d9:03:72:10:82:ac:fd:82:68:88:90:c8:7b:3b:e5:b7:
11:64:5d:af:78:6e:eb:c0:c4:14:76:e8:b4:9b:43:53:5a:ad:
df:39:d7:a5:e1:44:eb:cd:7f:b6:f4:8c:45:71:c6:7e:4e:90:
1e:f2:5c:06:81:c7:2f:3d:59:2e:80:40:ac:ef:5e:70:b1:d1:
87:35:70:bb:1f:55:fa:21:6a:5b:74:4b:4b:b4:ad:ee:56:9b:
71:6a:a0:ee:e7:d6:3e:11:fa:bc:24:2c:13:96:36:5f:84:af:
72:59:99:04:84:a9:a2:30:f6:91:64:35:11:4f:e5:f4:c1:9e:
27:8c:d0:b2:01:71:52:f2:ce:c4:a1:35:e7:88:b9:06:51:3d:
c6:20:75:b4:d6:eb:84:cf:61:95:58:30:5f:7b:00:be:2a:98:
86:ed:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:54:20 2026 by rpki-client