Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: /3puWDaV9gyHyOOyXB0xO43QBebxOIAhc5gwyWwo5tc=
Subject key identifier: C4:73:84:81:7E:06:EC:E4:BD:F0:21:4A:62:FC:F1:8C:BF:9F:B8:55
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 019CE8256F9E1B24D4439F0E177247B7284A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 15A2
Signing time: Fri 13 Mar 2026 17:01:33 +0000
Manifest this update: Fri 13 Mar 2026 17:01:33 +0000
Manifest next update: Sat 14 Mar 2026 17:01:33 +0000
Files and hashes: 1: GLWh56MMEykKTE4rrV87G9Vgki8.roa (hash: 02Z7LQfQNnw59BWb8xFGQ1xpLvcBlJFnepDp+x8RT7E=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: 0gEAHKYQT/v+/Y+tsij0RjgYraXFcmMWtWuUG96L6p4=)
3: w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa (hash: Rh0VsCvy2O3VBR0z+FrTOlGdPanimSzIyXLHmJJMba4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:25:6f:9e:1b:24:d4:43:9f:0e:17:72:47:b7:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Mar 13 17:01:33 2026 GMT
Not After : Mar 14 17:01:33 2026 GMT
Subject: CN=c47384817e06ece4bdf0214a62fcf18cbf9fb855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:6e:24:7b:ff:ff:a0:3d:0e:dd:36:cb:e8:
11:25:3f:ae:f3:5c:ad:34:a9:b4:60:17:17:0f:92:
76:f4:9a:d8:07:db:09:2f:15:79:1f:57:6b:f5:f0:
36:b1:65:c2:d4:e6:1c:49:9c:e9:1f:59:a0:82:32:
97:a9:7d:10:a4:65:53:47:19:05:86:62:72:9b:48:
19:39:20:f7:53:a0:e6:27:c6:34:57:04:84:44:75:
59:71:1b:8e:9f:ec:bb:84:5e:a7:ae:dc:d0:2d:be:
2a:2e:0d:34:f0:36:df:91:6a:f4:13:fb:48:36:02:
40:a2:e8:d2:35:29:42:c8:4b:47:59:03:6b:39:b2:
c5:2b:3d:2c:e5:b1:9a:32:1d:df:8e:54:5d:cd:fd:
a4:29:10:08:82:c8:82:48:0d:cc:ad:de:2a:fb:b6:
50:1b:3a:a4:ab:5a:ee:a3:7f:22:ad:c6:12:b6:55:
8c:a2:3c:15:98:de:70:1a:ec:c5:6c:7a:17:c8:d0:
77:b2:43:1d:76:32:2a:d4:dd:cd:be:2b:45:9f:e6:
cf:99:9f:b2:6e:3b:db:87:9b:92:e5:c0:b3:b5:fa:
83:96:65:6c:ed:b8:bc:f5:3c:e2:43:c7:99:25:75:
40:0a:07:9a:11:1d:45:9c:18:5d:05:35:9b:58:ff:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:73:84:81:7E:06:EC:E4:BD:F0:21:4A:62:FC:F1:8C:BF:9F:B8:55
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5e:24:f1:07:57:e0:3c:2b:79:65:04:54:bc:50:72:39:a5:
5c:41:c6:77:d7:12:a2:29:90:19:2e:32:34:9d:28:72:41:17:
73:c3:c2:24:0e:62:fd:ce:fd:ba:aa:6a:b3:aa:c1:4a:92:12:
61:34:f3:b2:a7:c6:ac:84:09:4e:6c:86:0c:b3:be:f8:6f:cc:
4f:f1:43:82:f2:5c:27:08:62:9c:ee:b0:4c:7a:e2:0f:81:75:
8e:da:be:de:da:62:28:9e:47:8f:3a:5e:0d:82:7d:0a:c5:5d:
33:1e:e3:ea:0b:7c:23:54:70:f9:97:fa:d9:fe:4f:81:c5:a4:
12:48:bc:e0:9a:22:19:00:f4:35:37:73:1f:42:d2:4a:45:58:
f7:19:09:5e:cb:87:0f:f2:2d:26:e0:f4:4c:c3:f8:7c:b3:7a:
d3:92:4b:03:04:ba:6f:fe:5c:a0:5d:59:7b:01:75:89:f7:b5:
1f:15:58:4a:80:3a:aa:f5:a3:7b:05:ad:3e:6d:ac:91:56:ba:
f7:48:d3:c8:03:1e:c0:24:75:5c:20:e7:1c:a5:ca:10:a4:e0:
39:d2:73:78:fe:b4:f9:c0:21:ae:aa:ff:cd:67:ec:66:a9:e8:
4e:ed:89:8c:c5:52:4c:68:55:3d:5a:53:97:2f:b9:c9:2a:16:
b2:69:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:31:33 2026 by rpki-client