Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: xhI9ZTkbii0ZtSomeLvNOdDw2BoQHq1FkaGiaQJg/90=
Subject key identifier: 00:C2:2F:22:04:DD:8B:19:F1:41:16:47:2D:E5:88:D7:5F:18:8F:FD
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 019CE3D9CF4F9F72A135383AC68CAAD29E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0EFA
Signing time: Thu 12 Mar 2026 21:00:28 +0000
Manifest this update: Thu 12 Mar 2026 21:00:28 +0000
Manifest next update: Fri 13 Mar 2026 21:00:28 +0000
Files and hashes: 1: BO14bA7PeRb0D7KQP3CWollCutc.roa (hash: KWBfGK/f5gpdRKkzCSVIg8eJkkTlP4Rw/G54X2xmAk8=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: E6xk58fvxvAKb5QmMiDYMHaTxLlRRVZU3lyBeovCjjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:cf:4f:9f:72:a1:35:38:3a:c6:8c:aa:d2:9e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Mar 12 21:00:28 2026 GMT
Not After : Mar 13 21:00:28 2026 GMT
Subject: CN=00c22f2204dd8b19f14116472de588d75f188ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:db:6e:8c:9f:b2:06:3c:eb:df:6e:4f:9d:
50:0a:0f:57:93:88:57:8d:b3:36:e3:0a:e6:e7:94:
41:b0:32:5c:34:5e:80:8e:43:8a:55:bb:b9:63:79:
e8:13:09:e1:11:3b:d0:67:8e:2e:98:eb:45:5f:af:
99:5d:d8:1f:72:51:59:29:7e:a7:83:47:14:54:46:
a9:d6:3f:70:ce:c4:47:7c:79:fe:b6:6b:ef:73:73:
c6:a5:a6:61:6f:63:53:e2:3e:ba:22:6c:78:e8:3c:
f5:7b:fc:25:59:fc:76:c1:b4:e7:fc:1e:5a:15:03:
c8:f7:3f:84:64:94:44:72:49:76:cc:f2:bf:ec:2c:
64:bc:0b:a9:ec:fe:b9:c1:18:3a:7a:66:7f:49:4b:
6b:e4:72:e3:fa:9b:3d:c0:fe:6b:81:41:28:30:7a:
19:dc:aa:ac:4a:92:ca:0b:1c:9f:ed:dd:8a:12:13:
34:15:05:53:90:f7:7a:41:38:7f:a5:43:d5:88:1d:
93:2b:f9:97:7e:30:5f:8c:56:50:2f:d1:16:70:bf:
14:a3:63:25:51:cc:e6:93:77:1c:20:e3:50:c8:e1:
ce:4b:ff:45:38:a6:2f:2d:c9:c1:1b:f4:b9:50:88:
0b:65:6c:45:47:61:55:31:be:46:82:d0:22:3a:a1:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C2:2F:22:04:DD:8B:19:F1:41:16:47:2D:E5:88:D7:5F:18:8F:FD
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b9:1f:02:d4:72:22:8a:56:57:be:01:4d:35:af:54:3f:7f:
01:5f:47:e8:00:45:c3:53:2b:f0:af:e8:c8:26:22:d4:d1:f1:
38:7f:50:9d:b5:d1:7a:a4:84:b1:97:b8:ca:18:df:50:6e:76:
20:ee:97:1d:27:06:05:fb:c2:5a:95:3a:1e:b8:f8:b8:3b:bc:
03:22:2a:b3:51:3a:b3:16:ec:52:e4:1f:d1:5f:d3:b5:7d:11:
59:4b:6f:9e:c6:de:80:2c:38:a7:5f:6d:ad:ab:85:be:a6:8f:
25:1c:41:15:0b:a5:d3:da:d8:0b:59:86:7a:36:1a:c0:69:1b:
a7:39:6c:40:30:0e:ee:91:f5:5d:28:a8:63:4c:e6:04:6f:6f:
8d:fe:86:b8:be:b1:49:4f:0b:a3:87:ce:a1:ba:61:de:c5:9c:
43:fe:8e:01:d1:90:a5:60:97:c4:71:82:e9:4f:fd:5b:c9:4c:
1c:79:e4:76:28:b8:d9:05:ea:ab:df:ac:2d:0b:d6:1d:9c:c6:
aa:26:aa:2f:b0:0c:63:95:8a:51:ed:b9:b3:b9:e5:5d:17:fd:
3d:2f:e6:dd:f1:0e:9e:0e:da:c9:c9:92:82:1f:ba:da:9c:b9:
7b:4e:8e:fe:e6:82:ef:1a:9b:0f:71:d0:3d:d8:0a:4c:f5:00:
8d:42:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:30:49 2026 by rpki-client