Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: GCBNsWCjds7XLrKg2L86rQm8RAvGg6KePCbnd5ln2R8=
Subject key identifier: C0:3C:F7:2D:02:DD:89:B5:F8:14:F0:DC:DF:B0:33:B7:06:40:EB:F9
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 019D251624D07363A633566FED65934B5160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 0B2C
Signing time: Wed 25 Mar 2026 13:01:41 +0000
Manifest this update: Wed 25 Mar 2026 13:01:41 +0000
Manifest next update: Thu 26 Mar 2026 13:01:41 +0000
Files and hashes: 1: Ep1UdBXzCWlqSTpFzem1RUVZTHA.asa (hash: f0L/PAFatn0IgaIhqoEyZoZ0cRFuKV57J/o6cZd4vJM=)
2: UVwGUstyqvelkq37jwrCyB34k94.asa (hash: E7qX0L3M0NDAHs6Gtk5Rp5Gs8S25rdSfJnVG4BtVL6w=)
3: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: zH7UNYgrXrwcermYAQdxH+P3X6Vow7q0I1XxCc5efAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:16:24:d0:73:63:a6:33:56:6f:ed:65:93:4b:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Mar 25 13:01:41 2026 GMT
Not After : Mar 26 13:01:41 2026 GMT
Subject: CN=c03cf72d02dd89b5f814f0dcdfb033b70640ebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:d3:00:f9:1f:9d:de:7b:a1:7d:28:0a:b4:
f6:ba:fb:a9:39:49:ca:a0:fc:66:fc:49:e6:8d:b6:
3b:79:05:2c:1e:99:f1:93:8e:78:0c:5d:80:c3:b6:
19:5b:95:be:01:a0:1a:3c:2f:87:e5:9b:b2:e8:69:
f6:d3:b6:f1:b2:71:06:aa:e7:5f:0f:a4:b8:ba:f7:
55:30:6d:6f:c5:27:84:cd:29:1f:ac:9c:68:90:77:
76:41:94:b0:bf:94:1d:d1:35:ce:f3:fd:01:9c:77:
0f:60:6a:55:b0:aa:f8:54:bc:03:05:05:47:d7:32:
10:fb:71:ea:19:f2:31:a0:33:8c:5f:f7:9c:18:1d:
ca:ce:cc:bd:23:7c:5a:28:f4:4f:ee:64:e9:4b:1c:
d0:52:16:9e:29:57:44:ef:63:b0:3f:c7:e7:95:e3:
2c:c2:78:b7:8e:79:d8:96:18:7c:07:1c:8c:5a:83:
ce:43:42:87:85:65:e0:79:c2:6f:a1:12:1a:d7:d5:
9f:ff:02:7f:17:bb:8d:93:a9:19:b2:0f:88:0e:7d:
4e:e6:c3:84:29:d2:65:0e:d1:50:01:b6:ce:36:90:
59:89:fa:18:20:d4:21:e9:f3:d1:07:45:20:ee:c6:
52:a8:7e:33:ab:1d:21:17:3b:21:13:68:cc:c1:5f:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:F7:2D:02:DD:89:B5:F8:14:F0:DC:DF:B0:33:B7:06:40:EB:F9
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c8:c7:84:1c:ef:85:f4:aa:b4:02:47:bb:56:0f:08:a4:57:
43:43:d5:8b:c0:fc:29:2c:93:2f:d9:12:1c:b8:4b:12:ed:ed:
96:ab:88:f4:be:72:97:30:0b:5b:45:f3:68:d2:32:35:9f:fb:
86:db:73:df:c2:6b:3b:aa:60:5f:4b:66:02:49:27:67:45:66:
89:36:d5:ed:eb:f1:f0:44:64:84:72:34:01:35:61:d2:06:b5:
7b:2e:5e:e8:77:b9:17:94:24:b9:02:e3:cb:c3:82:f4:42:35:
c8:f0:ab:16:05:ad:e5:f7:f6:47:82:08:23:3a:7a:98:75:6f:
b5:51:8a:d8:18:75:b0:99:28:77:3d:4c:15:92:e8:14:db:5a:
e5:f1:8d:5f:db:d6:ce:51:e4:ea:8e:17:27:72:6f:60:ee:a9:
cb:16:94:41:81:70:b6:54:3d:74:e7:b0:93:09:96:45:ee:6e:
69:59:77:bf:15:29:47:30:33:4e:da:05:df:dd:1c:ab:0d:1c:
c4:c0:c8:d8:e4:fb:22:6e:8c:62:3d:7f:2e:62:4f:7a:bd:e8:
a4:1b:70:60:0a:1c:00:ed:57:58:d4:fb:7a:28:40:25:bf:0b:
44:6d:c0:1f:20:94:85:aa:d8:c6:a1:ba:fb:a4:b0:ed:68:97:
0d:f3:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:57 2026 by rpki-client