Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.mft
File: Qw66p97iuM4Ru6dRoX2nshMTtm4.mft (raw, json)
Hash identifier: AiNvSXrvQuE4+2kzdNTFobojLxDhO5ToJaLapij4H+U=
Subject key identifier: 1C:84:59:7C:0B:37:C9:2B:AF:AF:B7:26:DE:1E:AF:DC:BD:15:8F:7A
Authority key identifier: 43:0E:BA:A7:DE:E2:B8:CE:11:BB:A7:51:A1:7D:A7:B2:13:13:B6:6E
Certificate issuer: /CN=430ebaa7dee2b8ce11bba751a17da7b21313b66e
Certificate serial: 019D3A1CC0E6D1ABA6354B724A6BBB1EDB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw66p97iuM4Ru6dRoX2nshMTtm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.mft
Manifest number: 7D
Signing time: Sun 29 Mar 2026 15:00:56 +0000
Manifest this update: Sun 29 Mar 2026 15:00:56 +0000
Manifest next update: Mon 30 Mar 2026 15:00:56 +0000
Files and hashes: 1: 1-Q4j0qKtj29aQO8HTd1ll4oq01M.roa (hash: Lf21mP22Hqe9W386laAQtZ9s0Z9m4XiYLVKYKs7MqJo=)
2: Qw66p97iuM4Ru6dRoX2nshMTtm4.crl (hash: IJDu60HD6v+4Hh69J3Ml07a9n9NK1ASMvikKMAfP8Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw66p97iuM4Ru6dRoX2nshMTtm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c0:e6:d1:ab:a6:35:4b:72:4a:6b:bb:1e:db:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430ebaa7dee2b8ce11bba751a17da7b21313b66e
Validity
Not Before: Mar 29 15:00:56 2026 GMT
Not After : Mar 30 15:00:56 2026 GMT
Subject: CN=1c84597c0b37c92bafafb726de1eafdcbd158f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:3c:2b:3d:50:13:31:a3:2f:43:51:26:39:
d3:7a:94:ac:97:39:0c:d9:da:5a:1a:db:4d:bd:72:
c4:14:13:e3:2d:97:2f:31:21:9e:50:98:d9:bc:6c:
0d:6c:3c:d2:81:62:74:0b:09:78:69:68:5e:3d:95:
ac:fa:3f:bd:17:aa:85:59:af:f4:5b:60:4f:38:1d:
8e:c8:55:85:43:58:ac:bd:35:9a:0f:18:d2:4b:14:
46:8b:ec:ce:c4:aa:28:da:bb:b2:1e:bb:93:d4:cf:
92:dd:b5:d4:99:6a:cf:c8:86:41:ea:3b:35:6a:67:
ec:97:65:08:71:30:a6:bf:e9:ab:8a:24:3c:d5:5a:
93:00:f8:f8:c8:ac:53:e2:fd:9c:01:8c:1b:87:49:
fc:8a:1e:e5:ee:78:a6:45:ba:86:5b:a5:4a:11:8f:
1f:7e:be:17:e2:97:25:7e:17:93:39:e9:3b:5d:6d:
f8:f4:5c:57:30:0d:0b:dc:9d:f6:e7:05:6c:7a:d3:
17:ec:a5:35:82:5d:5e:91:33:b2:70:ca:51:73:61:
05:e5:a3:a1:ff:1b:de:53:62:aa:0e:c0:cc:08:23:
20:8a:2a:37:3a:04:49:40:b9:f6:80:2d:06:78:10:
5f:4d:6a:bb:03:2d:df:ef:b4:f8:3b:22:05:0e:e4:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:84:59:7C:0B:37:C9:2B:AF:AF:B7:26:DE:1E:AF:DC:BD:15:8F:7A
X509v3 Authority Key Identifier:
keyid:43:0E:BA:A7:DE:E2:B8:CE:11:BB:A7:51:A1:7D:A7:B2:13:13:B6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw66p97iuM4Ru6dRoX2nshMTtm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e2:0d:b5:1d:b7:70:11:d7:66:c8:09:2d:44:b9:18:06:23:
c8:60:8d:1a:71:bd:57:09:72:50:7f:67:e6:21:d1:5e:24:78:
8f:9b:9b:99:50:b9:f6:70:5a:4d:82:24:60:8f:ae:c6:a2:45:
9f:c8:25:c3:ad:5b:c8:5a:e9:ae:87:4c:b2:3b:94:1b:d4:1f:
98:aa:99:ea:f1:de:b4:e0:cb:0e:e8:b6:f3:2e:9e:09:70:f1:
9e:54:93:bb:cd:30:4f:c9:b7:a6:3c:16:90:48:2a:49:dd:2e:
7a:94:37:ae:98:5f:8c:78:0c:e0:9f:8e:97:42:d1:72:af:89:
da:ab:7a:ff:bb:ae:f4:67:eb:93:d3:77:97:fa:d5:75:3a:1a:
fe:0c:b7:03:a5:2d:6a:26:54:25:b5:29:09:9a:7d:f6:a4:4a:
20:02:82:e7:9c:ab:e6:7d:37:c8:8b:1c:ed:5c:35:6a:d2:1e:
b4:ea:ac:9a:cb:cd:15:9b:eb:dd:44:61:8c:b9:1e:cd:c3:98:
cb:6a:fc:94:76:8d:fa:d2:3d:f1:ba:c4:b5:b1:56:ce:da:bf:
6d:7a:52:d6:a7:41:1c:a9:9b:c5:4f:56:ba:ca:e3:5b:60:bd:
88:14:2b:00:93:24:71:b9:38:08:ec:16:0e:e7:16:52:a4:74:
69:ee:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:26 2026 by rpki-client