Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: FgsWtvk5i111D/mT/zdJXRVjs+nFMuJvCecq4e/OAQ0=
Subject key identifier: 8C:08:F4:35:4D:09:18:43:4D:56:B3:F3:4D:6C:1A:24:95:F2:3F:32
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 019D2583A0828DF81329F46B3660BF60C487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 130A
Signing time: Wed 25 Mar 2026 15:01:16 +0000
Manifest this update: Wed 25 Mar 2026 15:01:16 +0000
Manifest next update: Thu 26 Mar 2026 15:01:16 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: cfvbyjmYyFnuCn0zXYrhiHG920flto+6IFeUKnuBS2I=)
2: f7TRcxcu5eFFG3edJtWO5LjNKUc.roa (hash: RBZM0y5g0NU2rB7JA5FE3fTKLxia7y0PmMp6qlYV9vo=)
3: kaCQ02B6gGfO7Q-84pz4Ur-huUU.roa (hash: EdGjBuxGJOuKZYVXyp/XaU7JSLAitiAqjCSTwhWKNJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:a0:82:8d:f8:13:29:f4:6b:36:60:bf:60:c4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Mar 25 15:01:16 2026 GMT
Not After : Mar 26 15:01:16 2026 GMT
Subject: CN=8c08f4354d0918434d56b3f34d6c1a2495f23f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:66:49:5b:ba:42:2c:94:af:fe:fc:70:0d:
0b:1d:a4:fb:7c:41:90:6b:12:28:0c:90:d5:fb:74:
ab:85:ee:93:f4:88:28:1d:f5:44:0e:37:a8:ea:81:
bd:fd:2a:dc:bd:6a:7b:18:67:f4:46:d6:33:d7:4e:
f1:ab:38:cb:a3:12:10:7f:21:0a:1a:86:ea:94:36:
61:18:b5:63:d5:bf:09:2d:38:1f:90:27:f0:93:1e:
39:c3:f1:29:49:71:15:4b:b1:92:ad:11:e0:6d:e6:
f6:bc:02:91:c1:79:8c:3f:e5:8d:1e:46:d6:94:29:
14:8f:79:8f:61:e3:9d:2a:2a:38:ce:67:8d:8e:e7:
fc:a3:c0:e1:ac:1c:6a:21:f5:33:b8:cb:35:51:d2:
8f:5b:ab:97:7a:47:b0:28:bf:2f:e3:7c:47:76:ed:
5a:1b:d8:ad:d9:05:93:07:a1:7a:02:09:a7:84:19:
a0:1b:bb:64:29:a5:0e:35:9d:73:c4:7a:68:d8:68:
b3:4d:19:76:dc:6c:6b:8b:a3:24:98:d3:4d:b2:1b:
40:b6:51:63:b2:45:bc:32:db:b3:3a:e3:d0:2a:d5:
63:67:b7:c6:29:9b:74:84:bd:16:c3:57:ec:4a:50:
0d:26:09:27:48:4b:4f:a9:cb:37:03:d1:38:92:94:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:08:F4:35:4D:09:18:43:4D:56:B3:F3:4D:6C:1A:24:95:F2:3F:32
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c7:db:ac:2f:cc:8d:71:af:80:18:91:c5:40:f3:26:51:4e:
01:15:9b:64:97:b8:77:57:5c:ba:d2:d5:7d:04:37:c1:bb:63:
67:ad:93:37:b4:cd:47:80:ec:7b:c8:11:ca:ef:83:db:8f:1f:
2a:fb:4d:e0:ac:8a:bd:ce:eb:4f:30:69:f6:1f:20:f7:6b:22:
bf:ce:94:ae:73:46:a8:49:53:b4:3e:af:62:b6:56:4a:33:c9:
c0:43:65:fa:df:89:ad:24:ae:98:f8:df:ce:5a:06:be:cf:03:
8a:b7:8f:61:b5:41:93:04:27:d4:0b:5b:65:e0:29:a7:3b:90:
ae:d9:1c:36:f1:db:21:d0:30:23:46:ce:d2:85:fc:59:c2:14:
97:b7:a7:97:c9:a2:5b:02:20:b9:20:1c:ad:3e:aa:61:14:69:
13:01:13:92:7c:67:7f:90:de:9e:da:b2:46:34:fd:93:92:8a:
20:27:72:11:b7:5e:9f:9f:48:fe:44:72:86:9a:78:77:6e:02:
fa:8e:e3:1b:62:71:75:fd:d2:b5:ef:8d:0f:72:41:c7:d1:5a:
47:b3:50:d6:b3:dd:da:89:25:19:98:ce:a1:a0:99:5d:bf:f2:
93:57:1e:44:bb:79:52:fb:82:3c:7b:f9:39:69:d2:f4:79:90:
ec:28:96:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:01 2026 by rpki-client