Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: ckIrfkYffU6FtGcI8gc8bk5SaleDyC0CKnoVyNheMD0=
Subject key identifier: 7E:72:E8:21:3E:92:68:4B:76:BB:C7:01:ED:73:48:8F:6D:B4:19:09
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 019D38D37F97066E01722244B2CF62893D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 07C5
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: w3mMRwo/r1iJoJYB+JjHDMyCpqDsKN1tsLUx1kJuruM=)
2: Wj_qItvZ8nCv6IAqTKi7edGF_J0.roa (hash: g40LtFFYkGRLTg/R02uueeyuMPwHWbYTIxLpfiRgOHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7f:97:06:6e:01:72:22:44:b2:cf:62:89:3d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=7e72e8213e92684b76bbc701ed73488f6db41909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:12:81:a1:89:c0:0d:bd:0c:d9:13:9d:84:
06:27:44:ef:69:0a:10:3d:43:09:2a:e0:9c:bc:f1:
e3:61:2e:99:38:b8:b8:f1:07:a1:2d:ea:60:47:d8:
2e:30:91:44:b9:f5:f1:18:48:f7:d3:c4:73:42:33:
68:62:14:57:cd:55:6d:98:8e:4a:b9:56:f7:ab:88:
1e:4f:3d:27:e6:85:0e:7f:57:4e:58:2f:5f:4d:fb:
af:51:fd:35:b6:39:60:ea:0c:57:33:b9:28:4e:49:
d5:3c:99:0a:a0:13:72:5c:35:4f:2a:3d:4d:07:e5:
c7:af:f6:d7:c2:ec:e0:1c:d8:22:a7:bf:ea:3e:ae:
f5:c0:e8:02:04:22:8f:64:c0:3b:68:ba:c4:18:0a:
07:2a:dc:1a:89:22:22:a1:6c:5e:85:18:e5:ff:fb:
f1:d4:bd:16:f8:a9:75:9c:b0:20:d8:c6:0c:ff:3c:
28:d4:39:06:fc:ac:d8:8b:41:61:84:11:78:89:bc:
6b:25:4b:3c:ee:41:9b:ec:ea:53:46:c9:d0:4b:3e:
57:aa:34:fb:71:a2:80:65:37:fb:1e:4b:f7:c7:6b:
aa:fe:3d:bb:79:24:4b:a8:00:47:98:c5:44:64:ba:
0e:0a:a2:a2:b7:9f:21:94:a2:af:3e:10:0c:27:24:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:E8:21:3E:92:68:4B:76:BB:C7:01:ED:73:48:8F:6D:B4:19:09
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:61:88:f2:6e:2f:7b:95:5c:01:84:c4:fb:4e:0d:c9:e6:dc:
d3:b2:24:d6:6b:cc:cb:31:cd:18:40:5a:c4:51:62:3b:83:09:
c2:90:f9:32:61:87:12:7a:11:1e:ea:dc:96:c4:8b:97:3b:77:
2c:2b:b8:39:14:35:50:b4:ee:b8:0e:06:fd:b0:63:31:92:d8:
6c:18:9b:34:47:78:c0:7f:16:87:f3:f7:e0:5b:c2:2d:6e:b6:
5c:80:5d:d3:d7:7a:de:e2:4b:e5:9d:27:03:cd:d2:a9:d7:fd:
50:9d:6c:6e:d1:1a:91:99:e2:e3:78:2f:2b:59:68:62:bd:87:
59:61:77:f8:38:ab:93:42:07:68:70:f7:46:c6:32:dc:cc:f5:
fe:ad:a9:a2:bc:66:35:77:38:58:98:55:fd:f8:3c:f4:73:77:
1d:f1:16:ec:f2:8c:24:32:3e:c7:b6:20:34:fa:f0:8d:b5:21:
dc:2e:b7:69:75:5a:28:d1:7d:41:28:a4:e6:ae:57:a7:c7:89:
cc:58:2f:72:4a:88:c2:2d:49:a3:2a:a5:4c:40:cb:eb:21:e6:
dc:78:24:a7:ed:8b:5b:3a:f4:7c:61:1c:5f:7b:3e:97:29:e3:
cd:0e:ab:f4:bb:4e:5c:b7:c9:d8:7d:e0:83:86:98:0e:63:87:
d5:d1:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:56 2026 by rpki-client