Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
File: Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft (raw, json)
Hash identifier: gN8wJOAI8xpWbUCF+qPOKysbjHcQH953icqp4LRAavQ=
Subject key identifier: 68:53:2B:06:87:FF:D3:F8:83:BE:ED:AC:20:6A:BE:75:E8:56:75:C0
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Certificate issuer: /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial: 019D262876ACCF12E591BDA88B2642BDC306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
Manifest number: 12A3
Signing time: Wed 25 Mar 2026 18:01:19 +0000
Manifest this update: Wed 25 Mar 2026 18:01:19 +0000
Manifest next update: Thu 26 Mar 2026 18:01:19 +0000
Files and hashes: 1: 2O9eCKbnivIh0i1Vc9-m9rRkiOU.roa (hash: gTes36XiettxaFcO8lDJWprf+0dK7PBoLXIx0f+Y0o4=)
2: Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl (hash: DsRfPHi4Q7cKpKkw7H2D4kJLiVmPMLQ7g6Vp6EiA/sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:76:ac:cf:12:e5:91:bd:a8:8b:26:42:bd:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Validity
Not Before: Mar 25 18:01:19 2026 GMT
Not After : Mar 26 18:01:19 2026 GMT
Subject: CN=68532b0687ffd3f883beedac206abe75e85675c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:e5:2b:7e:9b:99:8f:1d:db:1e:78:45:81:
77:77:a2:3c:36:07:55:18:3b:09:5f:c8:43:50:79:
36:97:8e:c4:a6:3b:e0:91:0d:58:c0:0b:9d:91:fb:
f9:19:d6:e3:f1:f4:eb:97:fd:86:f9:2a:06:3c:b5:
5d:22:70:c9:da:6c:0f:79:a0:bb:f8:4d:47:cb:f5:
0d:6b:e7:50:ec:ca:2d:29:c4:7c:ee:b8:9d:a2:14:
8d:9a:33:f9:25:87:34:db:2c:24:ae:91:6a:97:a1:
7e:c5:e3:77:34:2b:27:97:67:1b:1c:6d:6c:c2:e8:
fe:80:3b:8f:7d:eb:97:4d:3d:47:81:95:4c:66:74:
f7:9d:71:b6:9b:c3:47:6a:06:f5:61:8f:d8:93:c4:
9c:a2:49:03:69:1f:c5:3d:aa:81:89:e6:a8:72:3b:
9a:82:aa:54:73:c4:b4:14:23:cf:a9:42:d1:82:cf:
76:6b:67:97:b4:01:e4:b9:bd:b6:ef:cc:62:36:1d:
c9:d4:66:74:64:a2:b5:4b:2a:cc:81:c3:b1:8f:72:
03:d2:cd:b7:fe:b3:55:ef:dc:e4:91:0d:2a:0a:b5:
be:33:eb:e5:bf:22:89:3c:27:51:2a:6b:4f:4c:d3:
a6:32:34:69:4b:7f:04:91:77:75:88:a3:a8:04:1b:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:53:2B:06:87:FF:D3:F8:83:BE:ED:AC:20:6A:BE:75:E8:56:75:C0
X509v3 Authority Key Identifier:
keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a4:42:3d:55:f6:ec:63:d1:5e:4d:3e:eb:5e:86:1e:45:31:
df:d9:27:50:93:19:3e:30:64:82:e4:b0:fd:3a:ee:fc:7f:79:
09:65:55:28:83:64:be:6f:50:1f:d5:4d:1f:89:72:79:8c:88:
e1:4b:ab:e9:c1:97:5f:e4:03:42:98:77:0c:82:a7:04:b4:a8:
74:ae:e0:8d:d7:14:91:79:79:58:f6:9a:27:29:cb:c3:f6:ae:
6d:e9:4f:7a:7a:e3:41:b7:a1:d7:2e:92:43:da:35:52:5a:40:
38:47:a3:5d:21:d8:91:65:09:20:27:c5:53:d5:39:0e:1e:0f:
cc:bf:e6:bc:93:1f:91:d3:e2:12:65:80:f4:f0:f8:c7:18:87:
7c:7b:a0:80:c6:49:12:f8:88:cb:c9:e6:dc:11:56:8f:2c:43:
66:66:de:0d:6e:39:d2:bb:e5:83:02:6f:3f:b3:3d:c4:7a:57:
9b:cc:7e:1d:c9:7c:ab:fc:de:27:55:4b:ee:73:9f:df:0b:e6:
2a:50:14:61:6c:4b:80:a8:71:bf:10:e8:e8:7d:9f:16:9b:b5:
0b:20:65:08:53:94:05:0e:1b:1e:b1:47:c9:0b:a5:11:ee:4f:
d0:58:48:5a:c3:3b:78:2e:84:aa:ea:33:e5:7e:14:fa:2e:17:
00:14:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:30 2026 by rpki-client