Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json)
Hash identifier: J8gcHzLmXOhAubiYZ4H41NikKIQENQVVbQFplyl16sA=
Subject key identifier: D0:B4:08:2D:1F:D7:86:29:26:AE:74:C4:FF:8C:56:8A:F4:DB:A5:08
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial: 019DD19A89C0FEE35F65FAB806B16D728DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
Manifest number: 02EA
Signing time: Tue 28 Apr 2026 01:00:58 +0000
Manifest this update: Tue 28 Apr 2026 01:00:58 +0000
Manifest next update: Wed 29 Apr 2026 01:00:58 +0000
Files and hashes: 1: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (hash: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI=)
2: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: blwl2tSAGSB5daxZoVZIe89YEIhdOy3sDA4fICsTVOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:89:c0:fe:e3:5f:65:fa:b8:06:b1:6d:72:8d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Validity
Not Before: Apr 28 01:00:58 2026 GMT
Not After : Apr 29 01:00:58 2026 GMT
Subject: CN=d0b4082d1fd7862926ae74c4ff8c568af4dba508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c3:64:bc:10:9e:c8:71:f5:79:2d:2c:b9:53:
c1:a0:fb:86:b9:4a:03:23:3b:36:38:2e:0e:fd:f6:
b4:14:b9:fa:5b:cf:e0:09:a3:64:ce:d6:6d:c9:58:
7b:4d:6a:44:85:99:00:9e:8b:c8:b3:ee:53:e2:81:
a8:48:7a:1f:bb:8e:4a:18:6a:1c:fa:ed:e8:3f:61:
79:03:76:86:ef:1e:ab:a8:c9:f8:65:30:fa:4e:5c:
87:16:b4:ba:e1:23:30:e6:c3:0e:6d:e7:e9:eb:f3:
33:2a:d8:7f:e2:06:1a:00:29:18:c9:2f:53:e7:7a:
0d:30:df:e8:1b:60:7e:0f:84:7b:22:f7:10:f1:5a:
7b:0f:ad:83:fb:83:b2:a4:eb:f5:d1:15:e7:a9:99:
14:e5:05:85:f1:84:70:bd:70:8c:70:35:f7:e3:ca:
3e:67:59:31:2a:68:ac:d1:4a:9f:2b:36:7c:27:25:
f3:28:1d:f1:e1:c5:99:aa:00:ef:e4:08:f5:f3:67:
a3:97:5f:72:b8:81:a3:7e:d4:ef:9d:60:35:d4:9b:
01:7a:55:6e:19:a9:c2:72:d7:0c:1d:b8:05:50:ed:
b2:9c:21:24:5b:01:86:ea:0c:77:9c:8b:db:c3:1d:
96:27:da:f4:4b:77:22:cf:3d:3d:39:16:a3:0f:01:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B4:08:2D:1F:D7:86:29:26:AE:74:C4:FF:8C:56:8A:F4:DB:A5:08
X509v3 Authority Key Identifier:
keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:15:ee:7c:eb:ba:99:65:ef:fb:68:a8:5d:50:36:f6:93:76:
d2:ac:bb:84:b3:34:47:1c:bc:26:77:ad:c2:f4:df:90:5c:f6:
b8:b6:75:30:e2:20:2f:47:0b:5a:cf:9d:b6:6d:e7:6b:ea:f7:
51:15:7c:ce:9a:f8:cd:fe:53:65:96:b1:8a:de:56:8b:e4:33:
ac:4e:1e:23:75:b4:40:fb:0b:ad:34:7a:70:4d:48:f5:b8:4f:
b6:b4:93:b0:3c:ae:cd:38:3d:cf:91:71:49:e5:38:76:33:40:
01:58:57:19:a5:9c:61:1d:36:58:b7:c6:1f:74:cf:6b:68:16:
65:e6:43:cb:92:c0:4a:b7:d9:4e:0c:65:e5:d8:16:32:78:de:
88:bf:bd:d7:36:c8:21:40:e0:0d:a0:84:08:e4:82:b4:d5:9c:
c3:d1:37:63:02:d1:ed:71:eb:eb:4a:2b:8b:ab:d4:e9:fb:54:
a0:b4:09:03:1a:c1:8e:ec:e0:36:ec:45:a3:e8:d9:4f:53:10:
25:7c:0f:01:73:e5:a4:f3:86:3d:9e:3d:f1:05:23:cd:31:52:
ca:14:a2:89:87:dc:7a:8d:95:01:47:6d:3e:c4:b8:d0:71:9a:
56:f5:1e:d0:7b:16:b0:9b:50:8a:b7:80:6c:ae:00:79:be:dc:
a6:0b:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 10:34:17 2026 by rpki-client