Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier: UtEmW2hBR5OduJbxcmszeqKcv+w6KfYhkBacUoAfR+8=
Subject key identifier: 80:6C:37:A9:99:84:B1:87:EF:CD:63:4B:20:57:38:DE:6A:93:F8:B5
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019CE410AAA16924EB882C6C29FDE73201F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number: 0C4F
Signing time: Thu 12 Mar 2026 22:00:23 +0000
Manifest this update: Thu 12 Mar 2026 22:00:23 +0000
Manifest next update: Fri 13 Mar 2026 22:00:23 +0000
Files and hashes: 1: CzW4u1rrcKCYl0G03vqU8cBXz94.roa (hash: /yz/XIWJQxzaieHj+TVvT11gZyxGejhib5PYK9y3aXc=)
2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: 5iG/2ZzmnfMpTxhLvPeo8SFqQTYjrDyMQINmbeGX/jc=)
3: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:aa:a1:69:24:eb:88:2c:6c:29:fd:e7:32:01:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Mar 12 22:00:23 2026 GMT
Not After : Mar 13 22:00:23 2026 GMT
Subject: CN=806c37a99984b187efcd634b205738de6a93f8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:4b:19:91:f1:b8:55:aa:c2:cb:e2:1f:e9:
d9:25:7c:c1:27:c2:95:2d:b5:4c:ca:82:46:09:e7:
68:8a:e0:30:78:e2:a4:49:9b:51:76:a5:96:86:34:
89:10:b0:3e:35:ae:44:a3:c3:8d:15:df:04:02:e5:
24:76:9d:3b:1b:27:8b:c6:b1:8f:c8:13:3c:db:e1:
7c:c6:d3:34:67:9b:ab:8a:89:98:0b:6e:b5:4c:e8:
15:c5:5e:28:43:41:fe:3f:7c:f4:6a:ca:51:af:54:
51:54:c1:63:6e:8a:12:0a:39:a7:73:26:e6:75:e9:
4e:01:76:22:c4:8f:ce:29:cf:e1:c4:12:87:bc:ba:
56:80:5b:df:5e:1a:25:85:65:71:1d:a4:09:b4:8d:
3c:95:d0:db:a0:06:a4:16:29:cd:ac:a1:6a:c7:e4:
16:3f:db:89:c2:b3:d7:24:83:15:33:9a:db:22:7c:
77:47:c0:c4:54:86:b4:41:32:a2:9f:c3:17:e0:71:
f9:f9:05:87:04:ee:da:62:74:dd:30:0d:3d:05:af:
f1:6e:ac:87:44:b7:b0:75:1c:f4:af:7e:79:5b:f1:
23:fb:43:ec:a4:3e:14:de:d1:dd:f9:4d:96:62:5a:
e6:4a:0e:83:2d:c5:a9:bd:06:c1:96:e8:ab:f5:fa:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6C:37:A9:99:84:B1:87:EF:CD:63:4B:20:57:38:DE:6A:93:F8:B5
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:1e:0f:09:9f:ac:85:8d:f3:c9:42:6a:29:94:19:06:b0:
17:b8:91:7f:d7:ec:05:97:ab:64:90:37:9b:04:7a:51:71:be:
cb:a6:35:cd:74:16:d3:d7:ae:1a:d7:3b:31:0c:4c:a0:58:99:
ed:0d:4a:c7:ee:60:4b:e4:ba:2d:63:e0:c9:c2:ff:96:c7:a1:
9c:99:22:94:f5:03:be:01:27:fc:12:19:7a:3c:c8:58:09:9d:
f8:5c:6b:c6:87:1a:f2:69:88:1e:ec:81:3e:57:20:61:fe:50:
7c:50:b7:ea:b7:73:f6:31:1a:5d:f1:42:9b:5a:46:d5:1b:c4:
8f:44:ea:ac:64:61:79:77:49:d4:7c:73:27:c5:15:94:8c:d7:
41:90:ff:88:5b:1e:13:5a:1b:f2:03:66:cf:1f:16:dc:b3:12:
4c:44:05:b7:04:7b:3b:1b:45:80:13:48:4d:98:4b:3f:2b:2f:
d7:f0:89:86:e5:20:06:06:8e:d3:4f:a3:b6:cf:b2:d8:ed:7d:
e7:f3:1c:df:9e:6e:21:15:40:ff:ae:3a:a7:bb:82:33:c3:b6:
50:08:42:75:ff:01:b7:e9:99:2b:ba:1a:17:4c:bf:d2:5d:39:
a0:b6:ea:f5:d4:7e:73:8b:ef:cb:a2:5e:d6:1a:41:63:cd:8f:
4e:8c:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:16:34 2026 by rpki-client