Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
File: QvZoAOPk7qCxeqfOG-anEIW7C7U.mft (raw, json)
Hash identifier: h920OPt4DaAX1gQt6iqv7fogMcOqwlLACotuULt2+as=
Subject key identifier: FF:63:34:76:95:56:92:51:73:47:82:A6:4E:CF:65:DF:D8:11:D5:2E
Authority key identifier: 42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
Certificate issuer: /CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Certificate serial: 019D371B8B6D117DA323183DD9F7633DF8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
Manifest number: 01DC
Signing time: Sun 29 Mar 2026 01:00:45 +0000
Manifest this update: Sun 29 Mar 2026 01:00:45 +0000
Manifest next update: Mon 30 Mar 2026 01:00:45 +0000
Files and hashes: 1: QvZoAOPk7qCxeqfOG-anEIW7C7U.crl (hash: GCI1go4boJSEVHkOgu6v8q6hLTSRYb0t4hcETgTEWYg=)
2: n9a58dsjj-11JZXVNwGgDE0aR6o.roa (hash: /VwFrdihL0ZGB+9qxlSnirlGLekorqZnI5OlzYbZQaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:8b:6d:11:7d:a3:23:18:3d:d9:f7:63:3d:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Validity
Not Before: Mar 29 01:00:45 2026 GMT
Not After : Mar 30 01:00:45 2026 GMT
Subject: CN=ff63347695569251734782a64ecf65dfd811d52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:11:88:30:a7:5d:13:0d:7e:28:ae:ff:78:
f1:49:8f:a9:44:b1:b3:44:78:9f:92:01:6a:d2:6d:
b2:ab:3c:f8:42:d1:53:22:75:1d:78:0a:a7:1c:a2:
d1:69:84:f9:da:5c:e1:70:24:4b:69:8d:1b:1a:00:
9f:53:b5:af:2f:24:1d:0d:70:00:44:6b:ea:09:d6:
ba:91:44:c1:b6:a1:0d:57:23:8d:ed:f1:49:ee:65:
c3:be:38:17:54:8c:fd:c5:7a:0d:1a:db:9d:e0:2d:
4a:0d:c8:26:fd:a1:c3:1d:b7:cb:ee:fb:98:5f:6f:
a3:51:d9:5e:cd:a0:84:ca:ce:05:8f:23:c5:4b:bc:
35:e2:8d:ca:b5:e0:f7:b1:58:4d:e6:91:cd:c7:17:
c8:cd:70:35:86:02:0b:70:64:3e:64:1b:57:70:bc:
7f:fa:40:7e:26:dc:d2:48:6a:9f:b4:0b:88:c9:b1:
82:6b:62:28:7e:73:1b:a0:1b:2a:11:f5:54:09:e3:
e4:35:c4:d3:06:35:e6:f5:57:b6:4c:d6:cc:42:b0:
e9:d8:79:12:82:25:82:9a:cd:e8:a5:51:38:ee:b2:
c3:22:20:85:bc:d7:b5:c0:16:12:14:62:f6:d2:17:
6f:60:cc:32:2a:a8:b9:e9:ce:4f:2c:fb:62:80:b5:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:34:76:95:56:92:51:73:47:82:A6:4E:CF:65:DF:D8:11:D5:2E
X509v3 Authority Key Identifier:
keyid:42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2e:d6:96:b7:87:37:88:90:b3:2e:35:cf:c6:2c:73:05:76:
0d:b1:9a:6c:17:4d:ed:a8:31:be:b7:f6:43:3e:d1:82:e2:26:
2b:f5:85:25:87:08:d4:b3:10:11:aa:52:e4:72:be:bf:60:34:
d2:ef:ad:87:41:11:ff:0e:a3:4b:52:75:7d:a4:d2:35:56:c8:
13:fc:2f:ba:63:d8:e4:87:eb:be:63:00:10:88:60:c9:64:0f:
30:67:01:2e:5d:2a:22:51:4b:6f:33:ac:4f:59:76:71:81:1d:
11:93:e1:b2:eb:e6:63:fe:a9:90:96:4d:99:9e:c4:ed:2a:2f:
eb:18:bb:53:a7:66:0f:4d:55:ed:4e:ff:b2:55:11:a9:c8:fd:
80:12:94:f0:8c:81:9d:87:24:40:b9:8d:78:6c:c4:32:88:24:
8e:a3:36:49:52:94:5f:cf:5c:72:d0:03:48:48:2c:e4:ca:20:
7f:40:ed:c7:9a:7e:3e:8b:a1:9a:e4:0e:3f:cd:ba:28:3c:81:
72:a1:59:95:2f:69:56:36:66:7d:0b:79:df:4b:50:fc:5b:fe:
96:f4:a3:50:c1:8a:e3:7b:d6:d6:a0:f4:ec:c8:0d:b2:19:c6:
69:7a:d2:6b:07:67:1a:f3:d7:cb:1d:65:35:a1:f6:09:a0:e7:
0f:6e:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:40 2026 by rpki-client