Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File: Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier: CfxC5nCQW03iCjmA9oQS7rJ9esVm8doaQsUX0t7qyl4=
Subject key identifier: 3C:99:09:C0:DE:36:1F:CC:CA:F6:0D:2E:E2:45:F5:D6:91:0F:C5:EE
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 019D37C00F7EC171180C3CB6C0CC70319E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number: 0E7F
Signing time: Sun 29 Mar 2026 04:00:26 +0000
Manifest this update: Sun 29 Mar 2026 04:00:26 +0000
Manifest next update: Mon 30 Mar 2026 04:00:26 +0000
Files and hashes: 1: 0m9g0NXw0txcAncd36_l7K-VKNU.roa (hash: XM6ottRdI/IHF8Vp+wdTyFQt/tuJXemQFucG9x2X1io=)
2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: eEV8atnMRbzcBgO6gwoY6EcXmC86+5m0dcdGpYkhHmo=)
3: s_ckIK0LVvqQjN-Fga7N1PGEKnA.roa (hash: TY3JqfxP0JobLxsDQ6EXldUWNXSM4kgsLbFuU3iPfEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0f:7e:c1:71:18:0c:3c:b6:c0:cc:70:31:9e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Mar 29 04:00:26 2026 GMT
Not After : Mar 30 04:00:26 2026 GMT
Subject: CN=3c9909c0de361fcccaf60d2ee245f5d6910fc5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:aa:dc:38:ab:a9:87:a4:67:a5:a8:50:1c:03:
94:2d:9a:ce:ce:02:8d:f0:6f:c3:15:17:7f:5f:76:
d9:bd:8e:3e:0e:fa:38:64:06:50:5c:3d:26:3a:ca:
69:5e:64:15:9a:ee:cf:ca:20:f8:8d:a1:72:f1:e0:
cc:f9:88:84:59:39:fd:ab:bc:c8:71:fc:dc:bf:53:
f0:52:21:f8:c5:c4:2b:4f:b1:4d:d5:7d:2d:cb:6b:
13:a9:5d:36:57:af:0c:82:48:f8:c5:fc:62:9b:34:
e6:7b:8c:68:85:11:13:d2:87:a6:b5:6b:59:e2:ac:
ac:03:b5:09:8a:3b:bf:58:72:f6:54:6e:a2:71:c5:
8b:f5:32:a7:0b:40:1a:ca:a0:2a:26:a0:62:23:23:
f2:3c:2f:bf:03:9b:01:4c:ea:32:0c:4d:c5:06:bb:
08:24:18:54:97:b9:cf:35:ac:d1:cd:20:13:0a:70:
d9:c8:bc:22:24:fd:85:0c:3c:84:a6:d7:ca:5f:ff:
eb:5a:9c:76:b2:c5:e0:55:77:36:09:bc:95:01:8e:
42:c9:1b:27:64:de:26:f3:11:04:ac:bc:60:11:11:
e3:f7:af:a0:7e:a3:49:c8:2a:c8:b4:94:7c:9d:85:
39:30:07:03:59:7a:10:51:66:53:b5:8d:2b:61:66:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:09:C0:DE:36:1F:CC:CA:F6:0D:2E:E2:45:F5:D6:91:0F:C5:EE
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:99:74:55:7c:5a:2d:ac:e7:6b:b1:95:5b:9d:68:fa:3d:9b:
49:f8:aa:65:79:dd:44:46:71:ae:cf:3b:02:c9:b8:53:40:3d:
82:22:38:55:d8:38:4d:59:9f:77:90:12:0a:c8:81:5e:23:aa:
bd:d6:f7:ef:62:f5:5a:42:65:35:ec:fc:77:ef:2d:c6:0f:d9:
66:67:7a:fc:03:aa:22:6e:7b:33:1d:72:4a:ad:6b:54:83:67:
f6:6a:45:78:55:78:a5:37:2c:3f:44:a9:89:58:ff:cf:83:95:
28:e9:eb:4d:a7:c7:eb:95:6d:8a:70:67:c0:02:16:9b:e9:76:
ed:2c:80:df:e5:f5:8a:de:56:ac:50:1c:fb:7f:7a:28:e4:67:
4f:09:14:ff:8f:54:e7:cc:29:91:ed:e2:a2:e1:ae:bf:5b:26:
ae:c6:2b:15:3b:af:b1:b7:60:e1:4f:b1:ba:2b:6c:e8:c4:24:
b1:9d:1e:46:a5:ef:d3:ed:dd:86:39:91:46:a5:a4:d0:38:2d:
90:ad:8b:8a:ad:4f:a5:c5:6d:e1:94:39:88:b8:53:70:3a:c0:
f4:6c:d3:cd:89:e4:e6:ae:87:d5:b2:71:3b:12:c1:c7:41:dd:
24:02:2b:29:96:da:13:ea:fe:c8:74:18:9b:9d:d1:93:93:d8:
92:07:e5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:07 2026 by rpki-client