Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: N3L2LtToacxC+6YulRjhZe0TXvTnj0oCLkCdkpj/Cls=
Subject key identifier: 2C:6B:B3:0A:E3:4D:16:56:F0:D3:1A:4D:32:25:3A:92:4C:EB:1A:7A
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 019CE4ECD73BB9D6DD9D8624D2ADFBA6C491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0FF6
Signing time: Fri 13 Mar 2026 02:00:52 +0000
Manifest this update: Fri 13 Mar 2026 02:00:52 +0000
Manifest next update: Sat 14 Mar 2026 02:00:52 +0000
Files and hashes: 1: 9l35f4vtEnwERy91rSIzMefrFvk.roa (hash: o4NZxjI3TjEffFvPCpSdso698d9KA9gU7jcbU25ovX4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: SQ6pCGkADU+kV6wZxesHRkN9qzDwICwXYK54A2R96fI=)
3: _DMWomZ-zw9r2w8AsNSptLxDmfA.roa (hash: 5DRqqMVL9GM/PG8SfYwPRoOqjNYLEPPU5+fO2uX+eWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:d7:3b:b9:d6:dd:9d:86:24:d2:ad:fb:a6:c4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Mar 13 02:00:52 2026 GMT
Not After : Mar 14 02:00:52 2026 GMT
Subject: CN=2c6bb30ae34d1656f0d31a4d32253a924ceb1a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:e5:72:f0:36:a8:f0:e9:f4:2d:db:36:a3:
3a:9e:0b:fc:7d:e1:21:3b:25:36:23:00:40:75:8b:
a3:8e:19:ab:16:d7:04:89:3e:cc:db:db:47:55:a4:
0d:12:79:38:ab:56:e9:f4:09:b8:3e:db:4a:5d:0d:
7c:41:97:3c:e6:d2:c5:e0:7f:eb:81:00:e6:2f:29:
06:25:47:56:85:50:56:51:d0:24:01:d5:e4:85:97:
d5:e1:99:96:ff:41:8a:45:bf:35:02:9f:b6:14:6c:
f4:1c:37:fc:59:b4:71:eb:c1:ac:7d:25:05:a9:0a:
a5:2b:51:e1:47:77:a8:4b:44:b1:a9:38:55:71:2a:
a7:5d:b8:c8:19:51:ec:0a:e5:70:c3:f8:4f:9c:58:
8b:1d:33:5c:6d:93:fd:c8:86:e1:dc:0a:9c:3e:46:
70:e7:dc:dc:0c:bf:8c:16:2f:e1:be:fc:b0:99:ac:
f2:02:61:13:a5:6e:3d:31:00:69:9c:81:a8:4f:8b:
f9:84:32:9e:fe:3a:32:8e:31:fe:b0:e0:b8:0e:ce:
0a:cf:86:5c:41:75:f4:bf:8c:9c:47:fb:46:87:ac:
bb:75:97:ce:2a:65:c9:8f:70:e9:33:66:af:de:b3:
98:ac:32:cf:e5:84:72:d0:16:6b:f5:6a:f7:a5:5e:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:B3:0A:E3:4D:16:56:F0:D3:1A:4D:32:25:3A:92:4C:EB:1A:7A
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4b:43:9f:fe:bb:69:98:db:d3:a4:0a:e5:13:33:33:d5:a5:
77:fa:c9:79:7f:d9:a3:57:7b:b0:3b:48:e9:49:32:39:fb:7d:
59:4e:b8:7f:e9:7d:c3:a0:be:0a:47:71:ad:9f:c6:4c:69:4c:
90:93:11:8e:3f:fc:df:b5:9e:86:c1:9c:dc:d4:e6:19:7b:bb:
ee:b0:e7:17:7a:2a:6e:9f:26:a3:c3:40:d6:05:33:9c:87:2e:
e8:4d:e5:50:b9:27:bf:6c:74:18:8a:67:f8:99:c7:7a:74:cb:
c0:91:ca:b6:e4:a2:2b:b1:2f:06:a9:56:b5:4c:63:12:06:91:
1e:0b:49:38:fb:ed:e6:8f:cd:16:e5:e8:30:71:89:a6:98:31:
20:f3:e9:d5:12:cb:c6:e5:7f:db:d8:27:57:e9:18:83:9f:94:
72:52:a4:dd:25:dc:95:99:3c:74:18:18:fd:8c:a7:00:c9:a4:
9d:a8:67:49:52:46:95:e1:83:26:9d:e4:f6:4c:b9:48:9c:bb:
2b:ee:5f:65:b0:83:0a:fd:92:0e:c2:43:a4:a5:dc:ba:c8:9b:
1b:54:1c:c3:6e:7d:0b:61:9c:e6:29:0e:ce:fb:33:ff:47:8e:
07:ed:cf:de:be:e7:57:99:68:cf:72:e4:14:af:6b:92:75:5d:
66:28:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:08 2026 by rpki-client