Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: a5CwtjXBOtl+BUbg2BZ4a7Zvp1AqrI8SngF1tLNhDMg=
Subject key identifier: F3:56:8C:EB:65:00:AB:91:2A:B6:23:73:02:C2:15:DB:AA:5E:F5:5F
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 019D390989089477BBFA8F32F46C5E040C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0C7B
Signing time: Sun 29 Mar 2026 10:00:19 +0000
Manifest this update: Sun 29 Mar 2026 10:00:19 +0000
Manifest next update: Mon 30 Mar 2026 10:00:19 +0000
Files and hashes: 1: _8dqyaacWAiBj7GrWnfshRhnGVY.roa (hash: sW41H20Oh0pfgWyCjhtCKwUXmZEC6nQrjm/lQBX3AVA=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: wuLwzv0PhbQ+wSFcehbm4xUFj3Ms0dAeVtv3QWZqCpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:89:08:94:77:bb:fa:8f:32:f4:6c:5e:04:0c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Mar 29 10:00:19 2026 GMT
Not After : Mar 30 10:00:19 2026 GMT
Subject: CN=f3568ceb6500ab912ab6237302c215dbaa5ef55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:1d:40:04:02:31:8c:da:5d:e0:f3:68:24:
1a:e5:5a:1d:30:97:24:ad:69:92:50:0b:79:b0:10:
2b:0e:4c:38:f3:3d:1b:07:05:0f:40:de:62:56:dd:
eb:ff:fd:c4:77:ed:d5:3e:0b:83:8a:d5:d1:e0:e0:
c6:92:64:b8:b2:09:41:e5:07:e5:b2:34:58:f4:f8:
59:e6:91:9f:eb:87:ce:44:b6:28:57:d7:20:3c:46:
69:48:b8:98:24:31:1f:49:4e:c4:30:54:56:7f:b7:
cf:81:93:3c:1f:45:dd:b2:a7:7a:d8:1d:a5:65:c7:
9b:b2:01:d7:38:22:b0:f0:25:81:d8:49:f8:91:39:
6a:01:2b:39:68:26:87:76:5c:a9:8b:29:e8:51:e7:
c4:99:96:25:69:18:9f:14:30:09:45:71:5e:d1:bb:
ce:01:14:30:b1:c4:ea:f0:22:9c:c3:ce:f3:07:6e:
54:68:41:ea:eb:40:75:d9:03:10:b8:71:a2:6b:17:
f8:9d:27:21:c0:b3:b5:73:c9:5b:81:6b:69:b9:45:
d6:5a:dc:81:da:80:ce:41:1b:7a:a4:90:9f:4e:b7:
1a:3d:79:e9:3a:40:a6:9a:c4:4c:14:ea:04:99:4c:
d9:54:f5:3a:2a:04:bb:05:ea:3b:ee:64:35:87:cc:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:56:8C:EB:65:00:AB:91:2A:B6:23:73:02:C2:15:DB:AA:5E:F5:5F
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:72:ab:98:41:5f:df:09:41:51:77:30:ff:e3:a7:27:10:fa:
54:b7:00:e1:17:b1:f9:d0:ae:aa:e3:27:67:6e:3a:a3:b2:ac:
89:f4:ff:44:f4:7d:07:10:3d:ed:1c:6a:96:3e:68:2c:26:11:
42:33:11:cd:23:de:e9:ca:30:07:96:46:f8:ac:7e:0e:b8:e2:
d0:e8:f9:94:ad:1e:3c:7e:61:62:09:2c:4b:96:2b:79:fd:74:
a8:8c:77:6a:b5:f9:23:55:68:5d:45:36:37:a9:ff:3e:90:76:
73:d6:d4:d3:f2:c2:2a:2e:41:4a:bd:99:b2:bf:c0:30:c0:3f:
a6:1a:3f:09:87:0b:48:d2:ac:8d:cd:cf:05:17:78:fc:fd:de:
be:14:2d:77:c4:6b:13:e7:4d:8b:3a:3c:29:e6:4c:1e:b8:f2:
ca:54:b7:9a:cc:9a:3f:64:01:b8:cb:28:a1:70:a9:03:ec:e0:
c1:9e:db:dc:62:e5:29:68:d8:67:75:db:64:9e:9a:bc:24:e4:
ec:91:ba:63:21:3a:7a:91:c6:02:4c:f3:47:26:33:7e:bd:74:
6f:a4:e4:1a:c9:9b:9a:54:1d:ea:3f:8a:e4:49:32:48:6e:ec:
e6:57:a8:77:4e:3f:e6:5a:c5:c0:43:81:c4:57:31:0a:4c:8f:
7e:8f:35:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:13 2026 by rpki-client