Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: +WNfqAHFv0240OwZV+6//bHA4w0s6bBamb3t5rOeaQw=
Subject key identifier: 97:50:58:85:71:95:B7:E2:EC:E1:30:DE:9A:20:42:69:C9:62:5C:58
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 019D382E7050F9E26B0ECD450A23225ED022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 17DE
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: 3dk1RP9wtTbuNbaPQcmThXDhFqrdULh2akkChEcrh/0=)
2: cQtlxVVPO7JQa_rTQPIvZ0L_JT0.roa (hash: wGTkJ7+XtXJZbWxqtu6wY+OG6HIKs93TJ8T7CJvY3Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:70:50:f9:e2:6b:0e:cd:45:0a:23:22:5e:d0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=975058857195b7e2ece130de9a204269c9625c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fc:67:33:e3:01:a1:74:60:b8:2e:36:53:44:
73:76:e6:38:a0:81:6c:46:bd:26:04:9d:38:b6:45:
64:97:85:5a:96:28:b7:90:d8:cd:c6:93:b8:5b:ef:
e8:9e:58:5b:cd:dd:a7:c1:bd:db:4e:0a:75:ec:f1:
4e:0c:b6:d8:cb:26:8a:81:a0:f5:9d:d0:d9:e4:97:
81:47:cd:ba:8c:46:07:e7:05:f5:af:46:a7:05:b8:
78:1f:95:5e:94:87:de:3d:ae:46:00:af:6e:2f:6c:
cc:18:a1:65:bc:71:b5:a2:e6:8c:29:e8:94:57:34:
4e:d1:98:f1:ef:ff:a3:6b:ac:10:d6:e7:ae:7d:f0:
bd:46:45:14:2c:6d:73:2a:53:a1:03:a5:d5:71:4b:
e8:12:c0:b3:0b:de:d6:a7:b4:c0:44:06:8d:38:ed:
16:68:46:99:91:97:2e:f6:3e:33:90:64:e0:09:c4:
30:d6:bb:ef:96:0d:b4:d6:84:a3:04:8f:2a:8c:56:
94:4f:cc:a2:2d:4a:63:33:c9:55:80:de:8c:82:79:
1e:83:ef:e2:20:ea:99:72:c2:06:65:5d:0c:43:c4:
6d:d4:1d:a8:05:c0:eb:dd:44:f6:ca:fd:5f:9c:5b:
66:0b:5e:92:dc:2e:be:e9:e0:f4:0a:78:8f:0c:e6:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:50:58:85:71:95:B7:E2:EC:E1:30:DE:9A:20:42:69:C9:62:5C:58
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2c:27:1b:f6:f8:56:e2:f4:ef:ef:a9:38:d8:b3:10:8c:82:
9c:11:2e:b5:f0:22:fd:3b:24:77:89:da:9c:a9:2a:2e:f9:99:
9d:ad:cf:56:ad:0c:9d:85:36:4b:77:ee:1b:a6:f4:61:9f:38:
27:cd:62:7f:81:02:9d:e2:8d:fc:22:0a:88:4d:8e:69:ac:a8:
be:97:8d:41:c7:0f:2d:e2:65:73:8e:95:5f:8d:f4:83:7e:ae:
7f:d7:d7:0d:6f:e3:85:78:32:03:a5:f2:dc:bf:9d:e9:cc:8d:
6a:44:c1:2b:e3:3d:15:3d:a2:cf:89:cd:f1:86:0f:dd:f6:9a:
37:19:25:b4:6a:50:9f:58:5c:0c:c5:69:d6:ba:b4:69:8a:9f:
a4:86:40:e5:fa:d6:5a:33:6c:a5:5a:b1:07:ff:73:80:e2:03:
ff:87:e2:67:03:fb:46:56:0a:f1:6a:06:05:00:81:ab:02:ad:
e5:52:61:48:78:c2:a9:4e:52:c6:e5:24:38:10:84:65:65:a0:
2b:4c:b8:fb:d0:88:ae:0b:dd:ef:46:a6:a3:55:50:20:b6:8b:
0d:dd:d7:2c:e7:bb:8a:0f:6a:25:70:4a:4b:5b:c6:71:48:45:
4a:76:26:1b:a1:6b:7d:03:3d:0c:29:87:90:2a:f1:5d:4a:58:
06:22:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:08 2026 by rpki-client