Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier: 2w3QSFMe2vtHRvFwX0py6xOBCaazQ9gh26IWtbrcXGg=
Subject key identifier: 8E:A8:82:F7:A2:D2:6D:0D:D2:34:7A:67:05:B8:56:E9:56:2B:2A:EF
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 019D371BE59864A24848BF082145CA80944D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number: 161B
Signing time: Sun 29 Mar 2026 01:01:08 +0000
Manifest this update: Sun 29 Mar 2026 01:01:08 +0000
Manifest next update: Mon 30 Mar 2026 01:01:08 +0000
Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: BuTKSnRx9sw53HWO5J+7aSyeRQoKSYcSvfxhWlupnwI=)
2: mI_mfOa16c9i2aB5y-5RdFkoQzs.roa (hash: CYTfnzdl53VUc2uYy5eOC2P2ZEG/Uh5nTjGXOTog/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e5:98:64:a2:48:48:bf:08:21:45:ca:80:94:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Mar 29 01:01:08 2026 GMT
Not After : Mar 30 01:01:08 2026 GMT
Subject: CN=8ea882f7a2d26d0dd2347a6705b856e9562b2aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:5e:29:d1:13:0a:44:c6:7a:4a:da:c3:33:
80:09:c3:21:7a:c3:f5:c4:5f:cd:03:49:f0:18:1d:
7d:8f:98:03:e1:13:b3:9f:64:f8:2a:94:56:49:e4:
7b:17:3a:23:4b:93:b5:58:af:6c:31:fa:7c:b9:ac:
49:10:cd:cc:ec:cb:cd:bc:16:f4:40:4c:80:40:cb:
8a:3b:ad:74:66:f5:cb:b3:2a:67:82:b1:ec:5c:d0:
d5:63:64:31:a9:ba:b6:de:7d:71:30:f2:96:47:6a:
fb:d7:53:7b:cb:06:4e:4a:1e:08:1c:88:07:5d:6c:
60:bb:2a:fd:32:cc:34:06:d6:7d:ef:84:dc:84:e2:
d0:38:8a:17:2d:a0:68:78:2f:6b:fa:83:9d:97:7c:
2c:8c:6f:25:04:48:d4:36:50:d2:74:7b:49:d2:05:
45:2f:76:81:d1:c5:34:47:48:ed:77:4e:8d:74:c5:
de:b3:ff:45:d9:ea:6d:c8:d2:76:17:55:2f:da:e8:
19:4d:c7:0e:51:04:ff:89:1d:5d:c5:96:4f:5d:af:
18:47:03:e0:87:12:5a:b4:63:c2:38:f9:67:ae:8a:
4e:a6:90:bc:02:ea:de:c4:86:2e:d1:d5:b9:ea:d4:
68:60:78:bb:be:f5:ce:02:7c:67:e6:07:6b:26:1e:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:82:F7:A2:D2:6D:0D:D2:34:7A:67:05:B8:56:E9:56:2B:2A:EF
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c5:f8:0a:b7:a9:02:d4:f3:b4:a7:24:82:f4:45:dc:32:cb:
01:2c:e7:d8:7a:08:b8:5d:da:d1:18:b5:0d:60:7a:63:43:87:
de:c8:e8:8b:65:5f:df:39:45:dc:be:5b:ab:22:a4:94:bd:e6:
dc:5d:35:c4:ea:a3:c3:98:9d:4c:37:39:20:b2:9e:e0:44:c2:
41:cb:33:a9:14:36:ee:68:33:bd:4f:75:00:88:14:ac:a1:87:
c4:a6:02:9b:14:39:f0:80:76:18:ab:e3:a2:43:a3:2e:4b:7b:
dc:1f:e2:01:d5:a1:8a:61:61:10:01:df:8f:43:20:c1:44:e9:
f6:9d:00:52:39:ab:37:3f:42:2d:aa:68:4e:0a:a6:b6:0b:d2:
33:e7:e7:87:89:27:4b:56:0a:aa:a1:97:85:d3:e6:bf:47:f4:
9f:8b:c0:f7:91:52:c9:b8:e4:4b:38:fc:ae:09:ff:90:f3:69:
22:00:35:7e:49:fd:8e:61:90:23:75:0d:d0:88:a4:af:c7:e5:
54:89:69:71:9e:25:6e:26:d5:81:6f:9d:e2:32:1f:7f:10:ac:
69:91:ec:c8:1b:0a:c2:ab:44:60:bf:21:ed:8a:46:e5:f9:31:
04:d7:46:7d:29:b9:e3:64:0a:dc:e2:f0:75:3d:c2:cc:2a:20:
cd:fc:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:27 2026 by rpki-client