Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: Z765tY0oIqtBEj4r3mn/XX6aER56X6/821KDBzpwtvI=
Subject key identifier: AF:2F:26:1D:9F:EA:7C:8D:BF:52:F1:D7:04:1C:40:CA:A2:A8:D1:BF
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 019DCF07E23824689A3D2A36F9241F06E5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 08EB
Signing time: Mon 27 Apr 2026 13:01:33 +0000
Manifest this update: Mon 27 Apr 2026 13:01:33 +0000
Manifest next update: Tue 28 Apr 2026 13:01:33 +0000
Files and hashes: 1: D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa (hash: NEAvke3XuRiHlogwVc4RcyWVQUznukeff4gqiKDQn+U=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: I7OdXXQIKoW+DDPGetv8Pgkxtt39CnMeUEkyOS2XatU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:e2:38:24:68:9a:3d:2a:36:f9:24:1f:06:e5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Apr 27 13:01:33 2026 GMT
Not After : Apr 28 13:01:33 2026 GMT
Subject: CN=af2f261d9fea7c8dbf52f1d7041c40caa2a8d1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:89:6a:f4:f0:88:00:57:10:52:43:16:f3:
fa:32:c4:db:45:a9:75:13:ca:db:42:dd:e8:f4:35:
cf:4d:cb:d3:fc:4e:25:b9:22:d9:03:22:2a:a2:29:
ea:e6:1c:28:2b:a0:ba:be:d8:a4:5a:35:56:45:99:
51:da:77:28:1a:12:31:e0:bc:5a:0d:ee:91:69:2a:
af:62:22:86:46:34:0b:61:aa:23:65:a2:f6:7c:ee:
1b:f0:4b:7a:90:98:f2:97:83:f1:b4:8e:15:db:be:
6c:5c:cc:2a:b9:4e:b1:b5:1f:a7:24:3c:9a:de:bb:
94:5c:8a:94:52:66:5a:d1:54:3d:5c:d9:ed:93:bc:
f0:cc:3c:15:f0:a2:b7:e3:78:5c:3c:87:22:1a:c6:
a1:be:ff:33:33:69:ce:91:fa:ae:2a:bd:da:25:86:
bd:90:4d:93:25:40:bc:e9:55:b4:2e:98:5b:c5:28:
db:0d:8f:d2:b1:98:0e:e1:0b:39:5f:9c:88:12:67:
da:f0:40:88:a9:0d:17:35:85:0c:53:07:21:6b:c7:
14:14:e2:47:da:4f:e4:47:b8:08:58:92:09:23:11:
30:20:df:d8:ad:97:d6:a4:97:b7:1f:da:a0:81:82:
d6:8d:be:59:13:fa:11:f2:80:cd:7a:d8:d5:43:e5:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:26:1D:9F:EA:7C:8D:BF:52:F1:D7:04:1C:40:CA:A2:A8:D1:BF
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c6:4b:3f:43:37:40:5d:66:a7:6b:f4:80:1f:24:bf:25:71:
c0:a6:bc:3a:5b:3d:a0:04:df:b2:fe:37:dc:33:1d:2d:6b:f3:
ac:2c:46:6d:3e:96:43:74:82:c7:40:11:7f:6f:8a:b1:96:ea:
9f:98:b2:bf:84:e9:94:85:28:b2:14:81:c8:05:cf:94:81:66:
b1:ad:e5:a7:54:45:c7:b3:fe:c9:50:04:25:61:f1:80:0e:fd:
2d:9a:84:ec:d6:bb:c3:00:b1:4f:2a:e9:05:ef:83:23:b3:1f:
94:47:b3:6d:67:ec:27:f5:28:44:88:67:06:04:f1:97:a3:c3:
b1:c8:ef:74:93:13:69:7b:b1:23:ad:f7:53:d5:40:fe:0f:0f:
5b:4a:42:77:31:8b:d8:11:1d:e7:71:f8:84:a5:1f:14:71:d6:
fe:08:55:b6:8c:31:56:71:40:48:9a:42:4c:f8:eb:a6:3f:e6:
3a:2b:ab:70:79:8f:cb:eb:9a:38:a1:16:91:02:26:f1:80:63:
59:4d:a7:fc:86:60:46:74:65:03:7f:69:1d:9f:82:c3:a3:90:
14:e8:ac:58:25:b0:4d:ae:13:6e:7c:32:3a:8f:a4:3b:84:fd:
0f:a2:e2:dd:2b:03:22:3a:ad:5c:b5:fd:65:89:01:d1:8a:2d:
a1:1b:ae:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:44 2026 by rpki-client