Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
File: _QB9d6vr_l2GsInvuT4C3NMASsY.mft (raw, json)
Hash identifier: tLKv5kKiusMbaU3xSdxzFpNW0vshi9fNCBFNKMt71UQ=
Subject key identifier: 5A:EF:41:BD:4E:D6:12:F0:09:3B:A7:AD:D5:C0:7C:D9:40:37:9B:58
Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
Certificate issuer: /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Certificate serial: 019D28848E4227590E342FF11467E0394AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
Manifest number: 033D
Signing time: Thu 26 Mar 2026 05:01:08 +0000
Manifest this update: Thu 26 Mar 2026 05:01:08 +0000
Manifest next update: Fri 27 Mar 2026 05:01:08 +0000
Files and hashes: 1: 1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa (hash: dnBqijSF+YPKk6kM0CwG5Q01pI1bTPaR1o5KUYqbpck=)
2: _QB9d6vr_l2GsInvuT4C3NMASsY.crl (hash: RXI20HMcOlMtpNMK0VtyGYzLKuyGDbHFCKL+MW/EJKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:8e:42:27:59:0e:34:2f:f1:14:67:e0:39:4a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Validity
Not Before: Mar 26 05:01:08 2026 GMT
Not After : Mar 27 05:01:08 2026 GMT
Subject: CN=5aef41bd4ed612f0093ba7add5c07cd940379b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:b1:6a:f3:3c:ef:8c:63:cc:95:1a:08:f8:
27:cf:e5:e3:0f:84:2d:81:a1:ce:99:7b:80:a1:4f:
38:30:bc:84:b2:3b:7e:eb:2d:b0:dc:32:e2:c6:cb:
77:a6:1a:58:36:f3:68:43:80:76:6a:84:cb:d3:f9:
ce:ea:fe:65:a1:11:0c:1d:47:53:28:7c:70:23:ba:
4c:7d:13:0a:a8:8c:86:e4:76:0e:a8:d5:19:b5:5b:
48:ad:98:5a:58:6b:91:1d:cc:d0:a0:14:48:bb:56:
10:9c:a6:af:5e:96:c3:79:1b:cd:8c:82:ab:f7:b5:
eb:48:7b:58:d0:77:f5:41:c3:19:e7:73:a4:c6:93:
75:5f:5f:f6:e0:b3:30:14:6b:09:37:d0:61:4c:ce:
13:7f:63:8e:d1:86:02:a4:ce:24:22:9f:37:93:11:
93:63:25:fc:fa:67:f0:f6:15:42:f9:89:de:28:52:
b0:1e:39:3b:86:ec:03:60:d9:b3:81:2c:84:d6:dc:
f2:b0:cb:c0:ca:7d:7a:9c:e5:df:c4:c6:ac:ac:9a:
eb:c4:09:2e:a2:ec:48:e9:7e:7e:dd:6a:06:36:52:
9c:e2:e7:09:bd:4e:b8:15:d4:e7:cf:1b:c5:9c:66:
8b:57:d0:fb:ec:f2:24:41:7e:1c:be:39:84:34:03:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EF:41:BD:4E:D6:12:F0:09:3B:A7:AD:D5:C0:7C:D9:40:37:9B:58
X509v3 Authority Key Identifier:
keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5a:11:48:d5:a5:16:db:f8:63:f4:7c:e0:35:83:5f:6a:3e:
f9:da:9e:03:5a:d1:81:1c:95:35:bc:29:25:33:aa:d2:32:38:
7e:12:a3:aa:63:39:39:17:d0:27:1f:27:3c:c9:dd:40:30:1f:
9a:de:e1:e5:53:f2:8c:41:59:ec:12:20:19:79:7f:71:77:26:
d2:08:55:42:5e:3d:bc:b8:18:91:9e:57:15:88:09:6e:87:06:
ea:d5:18:4c:42:e9:fb:c3:a4:b1:e7:01:76:91:d1:15:d4:5c:
1e:50:d8:c3:b6:99:37:0f:80:01:1f:01:14:0c:a0:52:6d:f0:
7c:16:34:40:4c:b9:87:eb:73:12:ae:72:a6:85:6f:96:c1:34:
2e:e8:1e:c2:21:c5:25:b3:1b:c7:99:b1:5b:fd:eb:c8:e5:e2:
fc:47:b4:7b:37:1c:0e:95:62:3e:a8:9a:96:9d:6a:cc:76:66:
17:06:84:57:b9:42:50:ee:b6:b7:33:05:a0:a8:08:e6:7b:48:
c3:14:d5:04:78:fc:a6:f7:4e:48:ab:73:0b:98:4a:e1:a6:7c:
4d:6c:a9:91:52:e2:5b:b3:ca:63:3f:10:c1:84:59:ba:84:15:
58:dc:80:05:1d:99:af:cc:9b:d3:93:7a:ae:bb:90:5c:84:2f:
9d:92:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:41:51 2026 by rpki-client