Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: Cf8tayBF5F3VdUdbEUANmGs4rOFHUf5CA8XvbDCSOyo=
Subject key identifier: BE:72:92:4C:CF:18:70:6E:07:83:4A:4D:0F:E8:75:CA:1F:88:FE:D4
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019D051CE284D201715F5F465A7CEC41FEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0C70
Signing time: Thu 19 Mar 2026 08:01:12 +0000
Manifest this update: Thu 19 Mar 2026 08:01:12 +0000
Manifest next update: Fri 20 Mar 2026 08:01:12 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: m5l7GVB9TGZFgdq7s0sJDtuKUCoMq1gbHV2iyPkaFjk=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:1c:e2:84:d2:01:71:5f:5f:46:5a:7c:ec:41:fe:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Mar 19 08:01:12 2026 GMT
Not After : Mar 20 08:01:12 2026 GMT
Subject: CN=be72924ccf18706e07834a4d0fe875ca1f88fed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:75:c9:98:50:2e:0d:9b:05:81:66:7d:b9:
d4:4c:e7:56:4d:45:c2:ca:6e:31:39:f0:a2:6f:7e:
e6:24:a1:95:ad:be:6b:57:ed:fa:7e:ad:8d:b2:d5:
f6:64:89:35:90:79:7c:34:7d:89:8d:76:48:3d:19:
24:78:cf:91:11:b3:60:24:93:70:d7:b3:e7:b0:40:
63:de:e9:2f:d9:1f:75:24:e0:70:ca:92:47:67:b4:
7d:a9:3a:81:5a:dd:9c:95:f9:16:87:c7:36:2f:77:
7c:11:7b:1d:f8:df:cc:af:f4:20:17:17:7d:3f:5e:
42:fa:38:4b:58:0a:d9:2b:67:8c:49:dc:6e:c8:12:
fc:3b:42:86:d2:01:1d:58:63:79:dc:b6:68:6c:29:
0c:95:63:44:b1:d2:a1:02:d0:3f:2c:61:ba:26:aa:
36:ad:19:a6:6e:e0:56:ba:ec:66:e7:a7:25:c2:73:
3a:26:19:be:ef:ab:34:7e:7a:44:a0:72:f7:5d:93:
ad:7f:8e:a1:95:e9:39:fd:e7:73:58:55:44:2e:c1:
6e:e7:80:0a:fc:e0:ed:cf:1e:92:33:8a:5f:68:8e:
e0:50:34:89:3c:0d:8b:0d:d3:0e:45:bb:16:fe:6b:
7a:1d:ef:76:52:91:64:71:2a:2e:1a:2d:f7:68:cf:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:72:92:4C:CF:18:70:6E:07:83:4A:4D:0F:E8:75:CA:1F:88:FE:D4
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6d:46:49:fe:5f:2d:e8:9b:ba:9b:56:31:3f:95:0b:42:fd:
68:83:00:4a:83:45:23:d9:bf:57:11:bf:cb:27:e6:f2:29:b6:
c7:79:1d:47:db:43:21:89:f2:fd:20:85:19:6c:1d:0f:b7:92:
25:3e:d5:a6:ae:f3:0c:4e:d4:09:7c:e1:f8:54:ad:7d:a1:3d:
57:6f:71:2c:0c:f0:8f:b4:63:a6:d2:e9:60:5f:5c:33:23:9d:
e1:ab:18:78:fb:69:9e:a3:9c:c1:14:28:7a:d7:0b:a8:51:dd:
42:ac:e7:74:f8:93:69:be:f7:4d:b9:bc:37:eb:49:f1:80:87:
1f:10:c8:c3:fb:52:17:48:ca:5f:97:46:9d:96:b7:e1:6c:9b:
b0:50:8c:e9:de:ae:3e:b7:04:4d:c0:71:bc:63:a2:29:cc:3b:
1e:95:ce:76:75:8c:f1:56:0d:49:44:fe:88:ea:17:4a:03:04:
e3:3e:60:12:8e:93:8a:0a:60:95:8d:67:ab:b2:48:bf:ad:70:
87:d5:78:6c:45:e5:9e:89:b4:99:85:e6:7b:e4:94:84:dc:8f:
3e:00:eb:5d:f3:5d:0f:7e:2d:f7:79:5a:3f:75:f2:6e:5e:a4:
d1:4c:91:99:c2:63:0b:d8:4c:48:b9:5b:bb:33:bc:6c:02:71:
ef:c2:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:06:11 2026 by rpki-client