Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier: 7xm9Z/y/FYFOFsEiruMeibLJn5txj/LvFR1t1SSVQ7E=
Subject key identifier: 3A:C7:75:78:C1:7B:BD:FE:36:9F:3B:58:30:54:B4:3F:44:21:49:B5
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial: 019CE2227832999EF8FD46505DDE233E3E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number: ED
Signing time: Thu 12 Mar 2026 13:00:35 +0000
Manifest this update: Thu 12 Mar 2026 13:00:35 +0000
Manifest next update: Fri 13 Mar 2026 13:00:35 +0000
Files and hashes: 1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: JWre7BznXjQo9Ls+1eHY1GY7yMDwp6TlHNujJ7Bpr/s=)
2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:78:32:99:9e:f8:fd:46:50:5d:de:23:3e:3e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Validity
Not Before: Mar 12 13:00:35 2026 GMT
Not After : Mar 13 13:00:35 2026 GMT
Subject: CN=3ac77578c17bbdfe369f3b583054b43f442149b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:2b:f3:98:d5:d3:a5:46:a5:e8:9d:b2:34:
12:3e:7c:d9:24:f5:71:a0:0e:95:52:d8:59:6b:44:
77:ca:55:c4:17:93:54:70:f5:5d:40:6d:40:13:df:
d9:3c:d3:dd:bf:ae:2a:01:9a:f1:1a:54:f3:f3:89:
5e:26:d3:f0:9f:75:22:35:cf:28:0d:90:c2:cc:29:
42:f7:97:2e:85:7c:4a:bd:ea:5f:4e:b7:d6:76:8b:
61:4f:6f:5c:05:a0:e3:f9:ce:fb:3e:5c:f4:8d:71:
9c:39:45:47:7d:3b:99:33:90:62:a2:b2:14:39:40:
c6:8e:44:e1:55:81:87:04:f0:a3:5f:c7:fe:27:d1:
2d:72:7b:7d:6d:7d:aa:de:2d:5a:a4:e1:6d:9e:24:
17:9c:e0:c7:13:5f:fb:af:53:24:4d:49:3a:16:ed:
9c:2c:78:1a:cb:cf:ba:6c:f7:39:dd:63:78:4d:34:
69:9a:bd:78:78:1a:4f:80:8c:c7:4c:c4:aa:f7:cf:
3b:00:f9:d9:9c:2d:ac:4b:f1:a6:51:64:f8:c4:a6:
80:fb:d7:1c:01:b6:12:54:ba:2a:04:04:e5:08:03:
6e:d2:fa:fc:64:f8:02:ed:3f:cb:44:b2:33:b6:cd:
f1:3e:d9:3e:71:e1:f5:21:f3:fa:76:44:e9:97:b3:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:75:78:C1:7B:BD:FE:36:9F:3B:58:30:54:B4:3F:44:21:49:B5
X509v3 Authority Key Identifier:
keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:10:1b:f0:d7:f7:58:18:7d:e6:01:e8:28:6a:fb:ec:a8:88:
fe:38:b1:cb:42:27:f3:4a:b7:2c:e0:49:1f:9d:e4:b9:b0:da:
b8:d5:1c:cb:7e:e9:30:7b:e0:e0:79:97:57:df:62:a3:ab:e0:
16:bd:31:36:77:1f:6d:5d:c9:03:95:72:58:fd:8d:fe:75:1b:
b7:1a:4a:8d:df:c6:28:52:5c:bd:fd:bd:4e:de:c4:a7:a9:88:
c4:2d:d2:ed:fa:0a:4f:b8:a1:98:e6:28:ae:7e:98:1c:d9:03:
df:e5:8a:60:05:2f:da:09:67:e7:b8:60:13:b6:a7:b2:79:01:
49:a3:11:5f:3f:d3:5c:56:b0:67:d0:3d:69:26:9d:de:a8:0c:
3f:f4:0a:45:71:b5:6a:6b:62:8f:ae:92:a6:91:56:eb:08:cc:
b4:b1:1b:53:3e:84:e2:53:7f:bd:76:f1:95:ab:f5:a0:65:95:
86:38:c5:b7:e5:9b:6d:bc:4b:d0:36:3f:63:bf:3e:74:5d:25:
5d:8c:11:93:3f:c7:d2:c2:79:e2:df:02:e9:3f:ee:66:67:95:
89:88:41:83:3b:95:dc:fc:df:11:7c:9b:62:98:14:7d:a1:cc:
b5:e4:57:b2:2c:d3:01:0c:0b:3e:d2:71:46:91:19:c6:75:28:
68:b0:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:36:37 2026 by rpki-client