Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: AhV+RLijfqW2IMndizCPl+fTapgWuWvxi8qI8JHLO+M=
Subject key identifier: DD:67:96:25:F5:CC:A9:58:40:95:29:1C:BF:88:62:CE:75:39:5E:2F
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 019DD19A7F3027AF774CDB629A30BC490B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0E3C
Signing time: Tue 28 Apr 2026 01:00:56 +0000
Manifest this update: Tue 28 Apr 2026 01:00:56 +0000
Manifest next update: Wed 29 Apr 2026 01:00:56 +0000
Files and hashes: 1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: /iR/APNWfJQezNmbDNvXaKjPzqJI4tm5ZoGG2zfM5Mk=)
3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:7f:30:27:af:77:4c:db:62:9a:30:bc:49:0b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Apr 28 01:00:56 2026 GMT
Not After : Apr 29 01:00:56 2026 GMT
Subject: CN=dd679625f5cca9584095291cbf8862ce75395e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:67:f6:78:80:c5:ea:ae:bf:a8:65:ec:c4:
13:bc:14:c6:70:bb:d9:8a:4c:6f:6d:9b:4e:0e:3b:
30:10:bc:c8:5c:b0:95:31:ed:7f:2d:fe:7e:de:98:
c8:46:ab:d0:f4:11:bc:02:22:fe:06:ef:31:5c:ab:
c7:1a:9f:c4:ce:54:e0:af:84:59:7e:e0:9d:c9:0d:
81:af:0e:6c:9e:77:16:c3:7f:d7:d7:2c:21:b6:ea:
26:af:60:66:72:58:d6:77:9f:e7:d2:34:99:94:93:
bb:5e:92:b1:29:c8:51:99:cd:d5:89:6b:cd:b3:92:
5d:c1:e9:4d:7d:11:b7:3c:9b:f5:93:c6:70:c5:4d:
21:4f:70:46:13:c4:20:a4:98:93:c8:2e:77:c7:2a:
bd:cf:2d:e1:56:cd:e8:02:7f:c0:c6:30:a1:35:dc:
de:29:fa:58:be:b1:78:d7:cb:94:2f:54:68:d0:e8:
b8:5f:ae:9b:14:12:0c:a9:95:9a:86:d3:21:c7:7b:
76:c8:16:22:46:da:b5:3d:d3:81:a0:77:2d:41:ff:
19:37:18:29:d3:7d:11:41:4b:da:98:3a:64:31:7c:
7e:ca:a8:2f:2b:9f:85:4c:e7:f0:b9:24:30:a6:bf:
63:89:0a:ce:4c:09:dc:7c:9a:15:75:aa:6f:d4:bd:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:96:25:F5:CC:A9:58:40:95:29:1C:BF:88:62:CE:75:39:5E:2F
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:df:0a:e5:50:da:da:2b:e7:e4:1e:95:ea:d0:dc:b0:8a:75:
69:96:7a:b8:7f:21:8a:09:51:d9:bc:65:94:93:e0:4b:79:8b:
ce:f1:11:d3:66:79:98:1f:87:d1:13:ba:61:2f:7b:ae:16:8e:
e5:b9:45:e6:15:45:c1:8c:13:01:3b:e6:f1:b7:3d:06:6b:dc:
97:70:8e:9b:d1:c8:6c:38:62:0f:92:bf:38:eb:a9:d5:d7:dd:
8d:af:85:48:59:e6:1a:ea:e6:59:9e:40:bf:8a:35:88:41:ff:
6a:26:71:44:6c:ba:fd:25:bd:f6:61:99:8a:8e:40:4f:7c:25:
3a:e7:87:af:2a:21:6b:97:06:de:aa:5b:e5:b2:81:1b:71:b7:
ab:0d:8e:f1:a5:d4:ee:c5:19:5b:10:53:06:4d:05:ae:6f:53:
64:a1:18:7c:a6:91:e5:77:44:37:a9:24:ac:76:e7:a9:3b:69:
11:de:f0:4a:6f:c9:9f:16:eb:00:ab:96:e4:f1:3d:27:9f:28:
db:d6:9e:ce:4e:b5:46:c8:c5:48:ff:bc:c8:1e:f0:8d:1e:80:
87:78:eb:2e:f5:c6:1d:ba:6b:c1:c2:02:31:55:9b:a2:2d:fd:
ae:12:e5:78:ad:de:e2:bf:37:d5:af:e8:a6:56:da:7b:a8:43:
a5:5e:f4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:47:45 2026 by rpki-client