Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: gp8WYVEBltTOZeU9CTV0wNCE60K6sYKeTi/UwIYQp3g=
Subject key identifier: 06:E1:6D:0F:1D:54:7B:BD:D3:01:F8:ED:49:B9:49:61:27:19:C7:E4
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 019D3A1CF7E2D3AC8D417906C268E5055CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 1479
Signing time: Sun 29 Mar 2026 15:01:10 +0000
Manifest this update: Sun 29 Mar 2026 15:01:10 +0000
Manifest next update: Mon 30 Mar 2026 15:01:10 +0000
Files and hashes: 1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: UNQmCkQXBn/Fs1TPZ4YeJ+Senf4BRFyV4B1YIG29HWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:f7:e2:d3:ac:8d:41:79:06:c2:68:e5:05:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Mar 29 15:01:10 2026 GMT
Not After : Mar 30 15:01:10 2026 GMT
Subject: CN=06e16d0f1d547bbdd301f8ed49b949612719c7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:fb:3f:55:2d:b7:2a:97:33:8c:80:88:02:
fe:8f:c1:51:98:bf:92:b2:44:01:83:5a:f4:03:6a:
e2:3e:c7:73:26:ae:08:03:5e:45:b4:cb:43:54:43:
64:a4:15:3c:0e:16:79:bf:38:7d:f6:99:bf:28:dc:
d4:2b:4c:eb:33:63:39:d5:40:28:74:52:da:4b:ca:
87:d8:cd:36:da:72:46:f6:43:8f:33:b7:a6:f8:cb:
79:52:cd:6d:72:fe:a6:4a:ff:a4:dc:37:dc:52:b8:
78:21:d2:7b:9a:53:a4:d6:f5:50:bb:21:47:b7:d4:
fe:89:47:9a:f3:a9:89:0d:20:ad:21:14:21:00:ff:
80:2c:61:fe:c7:10:ae:97:38:7a:86:4d:29:c6:54:
6e:0a:7f:dd:d4:b6:32:51:b2:67:d1:7b:89:04:86:
b1:9c:a6:1e:72:37:09:7d:02:b3:37:e8:35:d5:8f:
f9:5a:f0:6f:54:90:c5:93:f4:72:9e:b2:03:bb:a0:
78:77:57:d3:09:00:b4:d5:b6:e9:b0:43:62:48:68:
ac:36:9c:88:04:0f:ec:08:13:be:bf:75:d8:c0:41:
d0:d5:47:89:fc:98:fb:97:76:82:55:3d:cc:e6:2d:
06:18:df:d6:a8:c9:8d:0c:db:0d:86:cf:d2:84:80:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E1:6D:0F:1D:54:7B:BD:D3:01:F8:ED:49:B9:49:61:27:19:C7:E4
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7f:c0:cd:59:5b:07:ff:db:69:3c:4e:7a:a8:d3:b7:f6:b2:
83:14:8e:5c:26:82:ed:71:77:c2:98:22:fc:8f:eb:0b:44:af:
28:73:f2:81:2e:71:1c:67:c0:e6:7b:15:7f:63:86:eb:f9:c1:
ca:30:66:0e:d2:bc:34:d7:04:04:25:ff:59:09:75:bc:b5:0a:
d4:25:e1:e3:4c:a4:a9:46:5b:75:69:ae:02:b3:37:5f:a9:ad:
88:27:72:d7:8f:56:e6:3d:0a:d9:31:4a:79:21:71:16:bb:1f:
da:27:c9:44:bb:4d:a5:6a:8c:2a:3d:ae:a8:65:07:e9:2f:5d:
c4:93:da:d7:97:c3:2b:28:27:64:97:1f:1a:43:79:7c:90:76:
21:e9:a6:38:0c:b6:63:7d:95:9e:e9:9a:a7:f1:f1:c6:9d:66:
d4:9f:d5:06:24:54:00:97:e0:41:3c:19:87:8b:4d:18:79:b4:
c1:a1:b6:f5:32:1c:da:f6:83:80:f4:6a:d3:40:f6:38:b8:53:
6c:cc:48:f2:3d:1a:5c:e4:2a:a4:37:c4:84:58:d6:b5:86:73:
ba:f4:d5:e7:06:36:49:30:36:01:ed:4b:cc:8a:18:7b:8d:8f:
70:b2:60:29:4e:84:ee:fe:0c:6b:ed:d6:41:6a:a8:cb:cc:80:
70:af:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:08:00 2026 by rpki-client