Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
File: qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft (raw, json)
Hash identifier: rEY6q4KpYaP2og88D/hxkBhAbkNPgat5EQxb0urYkug=
Subject key identifier: 10:A2:9B:C9:C4:21:5E:DC:E8:CA:70:68:EB:C0:31:E6:76:6C:16:EF
Authority key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
Certificate issuer: /CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Certificate serial: 019D29CEDBED94D096CA95911A479DD600F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
Manifest number: 0741
Signing time: Thu 26 Mar 2026 11:01:55 +0000
Manifest this update: Thu 26 Mar 2026 11:01:55 +0000
Manifest next update: Fri 27 Mar 2026 11:01:55 +0000
Files and hashes: 1: qc8zakw3V0RAhGeUNQ4Lf3nmhfk.roa (hash: U7mo9lo+x6LHfNvWFqZ8GIoqRWaFgK0B32ibHtJZ8IE=)
2: qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl (hash: CdamMgYSVR956LlBexo0xm0EMEE9UF4fGkqRbA6/xvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:db:ed:94:d0:96:ca:95:91:1a:47:9d:d6:00:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Validity
Not Before: Mar 26 11:01:55 2026 GMT
Not After : Mar 27 11:01:55 2026 GMT
Subject: CN=10a29bc9c4215edce8ca7068ebc031e6766c16ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:1a:05:64:54:18:dd:01:b5:89:62:d1:47:
30:b0:70:40:46:11:2e:2b:5b:31:22:59:c6:51:10:
29:28:2c:15:92:ce:f9:1d:6e:31:78:b3:62:4b:76:
c5:eb:8f:35:8c:3d:ff:73:ac:9a:3a:46:38:83:17:
2c:da:80:d4:af:b9:e1:3b:f1:3f:07:78:c2:99:c6:
b9:0b:52:b1:87:d8:20:67:79:70:63:70:13:3b:ad:
74:8e:65:1c:cd:3d:fc:08:0e:c3:96:56:d8:ff:24:
50:bf:8f:1a:79:df:e2:c0:07:33:99:4a:37:f1:d4:
80:44:3a:6c:e0:79:82:61:d5:2c:56:98:3c:93:ac:
7e:0c:3a:4b:f8:be:81:f4:13:a5:e3:2d:a2:5e:db:
e7:7a:ca:69:44:df:45:6f:ce:00:df:83:4b:a5:79:
de:22:19:4c:27:c0:62:c8:3c:98:b4:d0:f6:60:d4:
7a:da:07:4b:75:cd:de:9b:b2:93:3f:5c:3d:3d:b7:
a7:1c:69:a6:92:30:81:42:c4:73:0a:9a:18:74:a9:
4b:eb:a1:69:9a:81:f2:0a:3d:dd:5e:06:a7:38:75:
ea:7c:4d:0c:db:90:fd:bd:87:fa:36:16:4d:b0:c2:
08:36:81:77:83:fe:39:06:89:9e:1f:95:e9:0e:fc:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:9B:C9:C4:21:5E:DC:E8:CA:70:68:EB:C0:31:E6:76:6C:16:EF
X509v3 Authority Key Identifier:
keyid:AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a2:e0:11:cd:d8:ef:6f:65:81:d2:62:57:79:0f:bd:8f:23:
fb:c4:c3:7d:76:77:03:14:64:12:41:f0:f6:26:a0:f1:be:8e:
e2:7d:44:38:00:b4:9e:66:72:17:7a:45:32:68:d2:50:d9:9c:
2f:c9:c4:1a:1f:c1:68:c3:44:f6:6d:99:19:0c:5c:d2:07:5c:
3d:cd:ce:82:6a:81:bc:66:d2:3c:45:43:34:bb:f4:eb:37:e7:
11:d7:2f:7e:28:99:89:10:2e:82:a7:d5:8e:c6:24:db:27:cb:
e1:64:25:44:51:12:8a:3e:db:02:48:98:fc:5f:15:7a:6c:6f:
ee:fe:05:a4:df:39:f2:06:ec:bf:73:a2:9f:ae:94:a9:d2:69:
bf:a8:44:56:a6:b2:2a:ff:24:10:e7:eb:98:fa:ec:05:fb:59:
9d:d3:d5:c6:86:52:37:70:e3:40:0e:c6:a3:30:6f:21:e5:be:
a5:11:6d:94:2b:fb:af:fd:ee:0f:b5:3a:64:f0:47:1a:df:95:
53:88:b8:e7:d7:6a:ce:1b:6c:41:32:c2:d8:9e:71:a0:82:0a:
91:29:50:3a:a8:ee:ca:f5:23:db:b8:18:35:99:36:6c:80:26:
7a:be:31:06:32:2e:56:00:92:00:df:a1:df:9a:99:1c:11:6c:
da:0e:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:29 2026 by rpki-client