Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: R3idtQEZ/I8jOuX5NplFH8g4HDwL06nQiAQgDfM5E5k=
Subject key identifier: 5B:D4:76:47:11:0D:82:E5:60:23:81:16:F8:BD:0C:25:FB:B3:94:F6
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019D389C2628832F4DE4584CD32CD3CF6CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 1167
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: 5PT6KrVt0+5QgfCt9vW0elA74qMeSiSmXCXxVwa/Gio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:26:28:83:2f:4d:e4:58:4c:d3:2c:d3:cf:6c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=5bd47647110d82e560238116f8bd0c25fbb394f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:0d:fe:d8:a8:62:7d:5f:8b:1a:19:89:a3:
b5:1c:c5:a4:c0:66:e2:84:01:15:a5:9a:e4:13:6f:
c7:59:7a:e2:6e:1c:9f:5a:5c:2f:f9:db:7b:96:9c:
4a:a5:fb:8b:b6:f0:aa:96:81:40:e1:28:a2:6b:31:
e7:b4:41:4d:0c:3c:68:66:ac:fb:7c:7b:73:22:31:
15:17:a0:a0:a4:01:82:b5:63:63:70:b2:1b:08:4a:
97:fc:9f:f2:a7:34:1b:bf:5d:21:c0:19:00:30:e7:
15:d0:a6:6c:9e:7b:d8:99:b5:f6:9e:22:9b:21:b6:
f0:bf:be:86:25:fc:f9:4f:bf:60:9b:df:c8:53:e3:
c3:e2:50:1b:13:3e:f3:e7:13:fe:88:e0:fa:6e:cc:
8a:3d:13:f9:37:aa:0c:c6:c7:01:e2:8b:b0:c3:03:
57:6a:29:4e:eb:df:d8:ac:96:2a:9e:3c:87:27:10:
71:0a:23:42:66:f0:d8:af:3d:4d:11:27:c4:cc:bc:
2c:7b:70:40:9f:7e:ee:ca:ed:34:a5:67:dd:39:b8:
6d:0d:8a:3c:70:d2:97:88:79:30:67:92:13:0c:53:
d1:72:3b:81:0f:1e:7c:58:37:5b:a1:02:2a:62:1e:
20:4d:ec:68:6d:b8:ac:3e:41:72:87:6b:db:c3:82:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:76:47:11:0D:82:E5:60:23:81:16:F8:BD:0C:25:FB:B3:94:F6
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7d:ca:95:27:63:dc:66:4a:e4:5b:64:4a:5f:b8:4e:a6:1d:
e3:db:c0:bd:5f:97:1b:55:56:d7:49:5f:66:f0:03:db:1a:3a:
da:8a:8f:b5:aa:cb:fd:02:b3:cc:58:ac:b9:8b:ba:76:cc:49:
8e:0a:41:22:4b:65:5d:10:77:11:95:46:93:b9:86:af:ae:dc:
95:c8:ad:96:67:93:4b:6b:23:9e:18:45:52:27:63:96:ff:8e:
27:b6:72:f0:8e:81:f3:95:a1:0a:7c:40:fb:60:55:4f:ac:45:
a9:42:6d:ac:be:63:eb:bd:9e:5a:84:47:0b:f2:84:cf:7a:19:
1e:54:d6:ab:5a:7c:4d:2f:fb:4a:30:d7:5a:b2:3d:15:60:9b:
29:32:77:c8:f5:7b:13:03:78:bc:31:7b:bf:d7:ec:7e:75:2e:
8b:e0:d8:f8:56:5b:3f:84:0a:49:cc:28:0f:7a:e1:41:c1:d6:
8a:69:80:95:f6:c6:f4:b9:d3:46:12:6b:ae:11:00:b5:29:9c:
db:2a:b6:a2:52:6a:ee:10:f7:32:49:4a:58:99:01:e4:7c:74:
7f:a5:e3:a3:6d:a5:a2:7a:f5:d7:2a:cc:3d:a9:88:43:ff:b9:
ec:4b:9e:55:f6:85:3c:cd:0f:a0:85:e1:46:1b:f4:b7:17:88:
e6:e9:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:42 2026 by rpki-client