Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File: Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier: yH7Q0noP0WrELruQGGrbBaXh4la3MgmS2r4r4Kakf+w=
Subject key identifier: 94:81:0E:50:22:33:19:C9:A7:C8:06:A4:20:A3:43:32:0E:E9:B7:D1
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer: /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial: 019D26CD0137E1E312FFCBB12394632D44D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number: 152D
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: 1-fDNlBb6dsCiNLwxYDANed4hKIM.roa (hash: 9WlEGtitw0vTUbPB2qKPl7C4ap723iLSdLT/GkzHijE=)
2: EeCb3xsgZulN1LmF6ikRslFxSCw.roa (hash: jjFm2wg01dKI6dAHnYnTU6ux1bEVbh+vpvsqWitVX/U=)
3: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: 74kW4L39eBD3+9lul+WqavLzCXgbZK8SCsxDJ8mtLyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:01:37:e1:e3:12:ff:cb:b1:23:94:63:2d:44:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=94810e50223319c9a7c806a420a343320ee9b7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:d7:48:3d:85:b9:83:dd:80:06:c1:a4:3a:
38:88:f8:52:04:98:f2:33:3f:1d:5c:49:0b:59:89:
56:d0:8b:a4:7e:47:fb:7d:88:3b:d6:f1:fa:d7:97:
50:bc:31:a8:53:40:d5:07:02:ca:a9:44:8d:18:33:
6a:19:29:2c:8d:8f:ed:e5:2c:5a:7a:32:d2:d9:9a:
27:fe:0b:36:38:c1:6e:b7:16:1c:ae:dd:14:52:b8:
b6:9f:ce:a8:48:a9:02:af:ae:2a:fd:7e:ce:f5:db:
e5:91:43:9b:10:4e:76:a6:22:b9:02:cb:0a:bb:9c:
03:50:5a:be:bd:51:de:cb:ca:a9:80:09:0e:cf:22:
f2:c2:29:68:ca:f7:0d:61:8d:26:ec:f2:ca:58:1b:
5d:9f:ed:59:d2:14:40:e7:3e:9e:e1:57:77:60:a6:
51:68:59:08:8b:36:56:fb:54:10:6e:6c:42:6d:aa:
3f:0f:33:84:be:a5:81:2d:6e:66:a3:03:a5:20:34:
0d:2b:11:c4:43:e1:dc:8a:ef:01:ee:75:02:0d:d2:
6c:d2:c1:f8:97:2f:e1:f9:36:f4:68:5a:3f:d5:2c:
58:04:b0:68:cb:01:d9:36:1f:28:b8:23:b0:68:e8:
54:6d:1c:2d:9a:0a:87:a1:8f:a9:78:9a:33:86:fd:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:0E:50:22:33:19:C9:A7:C8:06:A4:20:A3:43:32:0E:E9:B7:D1
X509v3 Authority Key Identifier:
keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e6:86:8c:4f:9c:e4:4e:be:be:67:f6:18:59:90:bf:38:1b:
7e:5a:38:5a:76:44:2b:7c:d1:db:83:ec:e6:96:17:4c:93:9d:
d8:0b:ec:de:42:b7:08:94:e9:ea:71:a4:b5:9c:0d:28:15:b5:
71:25:9c:02:60:09:a0:ff:0b:d6:ce:3f:81:8d:9f:2a:df:aa:
ac:60:e1:c1:c3:61:7a:5c:5f:fc:d0:db:c4:b7:80:74:d6:d7:
ff:a2:81:f6:38:dc:b6:b1:2e:85:dc:2b:9f:a8:b6:8e:c3:68:
9c:4e:a6:44:f7:91:1c:b4:93:3f:10:04:01:10:23:a7:dd:ef:
dd:fa:bf:e7:b4:a6:39:bd:5f:98:14:8a:96:78:dc:ba:6b:ef:
67:87:aa:6d:8b:b1:e5:7c:a3:36:51:6c:32:01:d7:49:f0:81:
80:c7:02:dc:1d:d2:39:5e:01:b8:de:df:08:1b:00:d4:a1:e0:
4a:ba:32:66:b1:a0:6e:9a:a1:09:33:0e:ee:69:1c:df:42:a2:
f7:89:37:81:1c:8e:68:c9:f1:9b:9b:78:64:56:bb:b0:44:ca:
16:a4:07:64:17:44:6a:cf:78:a3:1b:71:c3:0e:55:9e:42:1d:
5f:c1:82:26:0f:e9:d0:92:31:d7:3a:88:dd:ba:20:19:5f:d9:
c5:91:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:00 2026 by rpki-client