Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: LoK+FwQw4Vt9U10nmMLwKth9etvOpIhTeqhlfM72src=
Subject key identifier: 1D:63:F7:92:85:65:D7:06:9A:64:96:86:ED:3F:75:E9:66:9C:4C:A1
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019D2884BC4BF13440E8BB2FE96E3F796EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 078D
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: FQKzg1XX9F90ufoj07KzvnUEb9VuN8ndPUJPDYMQKFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:bc:4b:f1:34:40:e8:bb:2f:e9:6e:3f:79:6e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=1d63f7928565d7069a649686ed3f75e9669c4ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:0f:98:1c:08:1a:ef:1f:3f:84:38:c9:44:
12:ab:4f:b6:13:43:97:ef:c4:8c:6e:24:03:a3:8c:
d4:2b:13:18:e5:aa:05:16:7a:3a:ea:6d:74:8c:06:
be:ba:9f:38:a2:03:0e:90:8a:5a:5f:2b:53:b9:a3:
c3:ea:97:20:e3:6a:48:6e:f2:95:4d:a1:e3:41:7b:
9f:d9:dc:3a:97:03:53:9a:ee:70:ad:22:06:1b:6d:
14:aa:17:eb:07:d2:99:c3:6e:ca:47:de:29:2d:39:
55:c8:ea:ec:49:0b:a7:53:9f:f1:28:c3:8f:9a:aa:
99:6b:9b:97:86:1d:1a:2a:1b:c3:f3:78:c0:c4:cc:
35:35:b5:38:9a:e4:6b:08:aa:1f:67:e8:e1:bb:32:
ca:8d:b4:38:ba:92:41:18:a1:7e:59:97:9f:d4:38:
b2:68:e9:36:c5:38:2b:8b:ff:63:82:92:27:5b:8f:
2f:f6:ad:3e:9c:b5:17:6f:da:b4:3a:cf:28:44:2e:
10:b0:66:82:28:00:d3:04:c7:66:bf:5c:9d:52:55:
11:bd:14:12:21:09:68:10:c0:7f:aa:ce:7b:11:0c:
53:b5:3f:a3:9b:17:c2:e5:6b:cd:2a:27:75:01:7d:
e1:62:66:5d:60:a8:a4:76:f0:76:cf:4e:48:e4:2f:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:63:F7:92:85:65:D7:06:9A:64:96:86:ED:3F:75:E9:66:9C:4C:A1
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:42:ae:82:49:3b:02:c6:95:dd:ab:5d:c7:a6:5e:c3:cb:44:
45:59:f6:60:1a:36:51:fc:65:39:0d:b3:7b:c2:3b:5b:6c:91:
1f:51:b8:c2:fb:9e:82:26:52:b4:61:8b:c6:60:39:c5:e5:0b:
11:a4:96:03:c4:ce:96:39:70:ea:83:c2:48:37:0f:0d:63:51:
bf:b5:a2:26:05:c9:92:70:a1:31:9a:3f:38:83:6e:a3:b3:ea:
e9:a4:25:5b:7c:9e:39:f1:b1:4e:7c:5e:2d:fb:4c:4f:f4:dd:
fc:cb:17:07:ad:2f:ec:de:37:57:bf:7a:7e:ab:e4:b6:95:dd:
1d:79:6e:59:48:75:8b:48:fd:18:c1:86:94:77:e2:cf:c7:90:
3d:45:eb:4a:16:58:52:c1:8c:fb:e2:8f:15:d2:98:34:3d:71:
e8:51:cb:94:e8:42:6c:25:74:ef:76:61:71:68:62:e5:47:36:
48:09:f3:d2:ad:8d:00:ef:b8:d5:ed:28:9c:a1:4b:11:00:37:
fc:d8:fb:e2:f6:9e:28:5e:01:38:8d:1a:2d:e9:62:1d:83:90:
58:c9:cf:33:c5:33:2b:4a:82:22:9d:79:18:60:04:22:22:3e:
a6:88:22:9c:d1:bc:3f:10:31:97:15:0a:47:f7:b3:ad:c8:32:
db:0c:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:03 2026 by rpki-client