Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: m2IjICC3+urBWdLBzdSG6YP5mEK3YpbzFgeSpCscNiU=
Subject key identifier: BD:01:14:1C:F1:F3:79:23:0E:91:7F:61:EC:1C:63:88:AC:C8:6E:12
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 019CE5FEF4257DAC0E5154E42139C865D61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 0754
Signing time: Fri 13 Mar 2026 07:00:16 +0000
Manifest this update: Fri 13 Mar 2026 07:00:16 +0000
Manifest next update: Sat 14 Mar 2026 07:00:16 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: Gp5Q//MLGMW1MDy87aaIyirHeUlJkbCb3vNM4RTsr7g=)
2: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (hash: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fe:f4:25:7d:ac:0e:51:54:e4:21:39:c8:65:d6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Mar 13 07:00:16 2026 GMT
Not After : Mar 14 07:00:16 2026 GMT
Subject: CN=bd01141cf1f379230e917f61ec1c6388acc86e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:af:e7:16:a1:fe:26:4d:04:3c:30:b8:80:16:
2d:4a:ee:22:e2:c9:dc:8e:30:dd:8a:64:4b:8b:ae:
4b:16:a4:6a:a0:56:3d:42:7b:c1:28:0c:16:5a:7a:
cc:61:bc:f1:cc:4e:19:4d:2e:45:78:85:ce:8c:05:
06:a3:37:b5:c8:cc:03:09:e0:ef:9c:99:79:e2:08:
cb:be:0c:2a:68:27:83:73:d1:d8:0d:fc:43:16:f2:
b2:a9:b7:29:b7:cd:8f:76:47:66:53:cb:00:e8:bd:
61:bc:96:14:c0:97:95:79:14:af:31:fb:35:a9:8c:
fc:ad:6c:1b:1b:65:23:41:89:f1:94:50:83:e3:8b:
ab:7e:dd:21:67:ad:62:77:0c:71:b0:23:6c:a8:43:
81:5a:ec:d1:fa:df:6a:e8:83:b4:43:a8:8b:33:22:
1d:41:3e:85:35:4b:2b:de:a0:1f:19:f5:2d:5a:71:
99:c6:20:e0:73:d1:46:92:9b:64:cc:63:03:c1:6c:
3d:f9:cc:1a:b1:0a:34:40:30:28:b2:a2:c6:aa:e2:
f1:3d:b3:92:5f:94:6d:d6:32:a8:07:30:2f:02:95:
01:e2:49:3b:ef:9e:ee:f3:6e:5b:be:4c:74:7b:17:
67:7a:95:cf:67:01:66:ba:0d:ab:a1:58:9c:1d:25:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:14:1C:F1:F3:79:23:0E:91:7F:61:EC:1C:63:88:AC:C8:6E:12
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ff:c7:14:14:71:e0:fb:68:4e:ef:4e:f6:16:d3:b0:02:5b:
7f:7e:c6:94:c9:71:95:f1:82:ce:17:79:31:27:67:d6:eb:58:
1d:59:a5:1f:c7:7b:c7:24:7b:ba:d1:20:a3:e4:c4:03:47:31:
8f:b9:b4:6a:69:bf:59:83:ce:c0:99:31:74:59:4e:43:18:3d:
ea:ab:db:f9:a3:16:02:d6:23:be:07:9a:35:b1:37:1c:0d:25:
21:39:28:2e:de:ca:1d:d6:90:a6:82:24:1a:7a:05:3e:86:b8:
9e:43:9a:a1:dc:0b:0f:82:de:a6:91:64:97:c5:09:73:82:22:
07:69:53:c6:2c:23:61:79:2f:0e:b2:c8:60:25:ac:5b:02:ad:
1f:e9:05:3a:e2:f5:96:6d:90:b0:3e:93:2b:f7:b6:1e:e1:95:
35:a8:42:cb:25:ee:7f:c1:9a:2b:d9:0f:4c:8f:e2:11:e0:77:
11:55:ea:fb:54:ba:1d:d4:eb:d5:70:4e:07:2d:43:ee:2b:8e:
dc:99:3c:11:05:eb:fa:64:56:f7:a4:42:07:22:a8:85:cf:7a:
f8:49:df:cf:6e:c4:e1:b5:f2:a9:09:6d:87:79:8e:2a:5a:19:
13:31:3c:be:ec:b1:84:45:79:88:21:07:a1:7d:25:5c:14:45:
e5:d2:38:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:35:37 2026 by rpki-client