Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File: qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier: i9OTCCJcETHxSpgWn0JxMHAJlIizH4MGrZCkoKOtjJo=
Subject key identifier: 27:01:CC:81:92:E7:9E:D2:8F:DB:10:71:CC:A3:6F:1E:32:A4:23:D0
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 019D37527F354CE1E24B92D734C9517DEB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number: 16EF
Signing time: Sun 29 Mar 2026 02:00:46 +0000
Manifest this update: Sun 29 Mar 2026 02:00:46 +0000
Manifest next update: Mon 30 Mar 2026 02:00:46 +0000
Files and hashes: 1: D14MO7BIQvaHAdeDBscgN5omBJ4.roa (hash: r6jJ5ch2wUm0LzOkighkT3HkT455ug6IrSIakMtnP58=)
2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: KCuQknZHUxuNlrRNFz0VRpq4lc8Z7GOu1MtrukiljXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7f:35:4c:e1:e2:4b:92:d7:34:c9:51:7d:eb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Mar 29 02:00:46 2026 GMT
Not After : Mar 30 02:00:46 2026 GMT
Subject: CN=2701cc8192e79ed28fdb1071cca36f1e32a423d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:ec:3b:36:8a:a7:66:ca:f7:73:55:f9:c7:
6e:80:19:c4:9e:40:e2:73:27:29:c9:6c:8e:ce:ca:
e0:90:6b:1e:31:6b:da:33:df:b2:19:a9:6f:c1:77:
c1:07:31:0c:f6:87:f6:22:5a:36:fd:74:61:94:57:
12:16:b4:36:ac:f1:06:54:2e:6d:3c:09:d8:b0:01:
de:d0:79:9c:30:dc:f2:61:99:13:ce:30:67:0c:51:
af:e9:8d:2f:15:78:24:c9:e1:d1:84:c2:eb:89:83:
87:17:8e:cf:22:bb:6b:a5:bd:8c:1f:c8:e7:2d:fa:
54:fd:92:35:cc:17:6f:45:9d:59:a3:48:5f:55:f5:
a3:7f:ab:1b:d5:6e:07:68:41:70:fa:a2:7d:51:9e:
3b:c7:ac:04:67:d2:e2:dd:95:f7:00:27:fd:6c:c6:
0d:b9:2a:f0:7d:8f:26:3e:2c:06:b7:d0:3a:1e:72:
7e:29:c7:4b:8e:82:5a:6f:99:05:2e:1f:c7:b3:95:
9d:f9:ed:12:5d:f6:d0:4f:d8:b6:a4:0b:b1:53:70:
63:8b:aa:43:ff:84:56:70:f1:26:f2:39:b6:71:a5:
f4:65:7e:f3:25:2a:a6:96:51:e3:1b:3f:8c:ce:6e:
aa:36:21:cb:ba:32:67:46:86:ad:55:84:76:d3:87:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:CC:81:92:E7:9E:D2:8F:DB:10:71:CC:A3:6F:1E:32:A4:23:D0
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b6:e1:c7:e8:6a:f8:d8:0c:33:2a:ff:cc:56:10:2d:a3:88:
6f:cd:d1:04:42:c7:a1:90:ba:1f:a7:26:59:d8:d0:a6:07:29:
b9:aa:7c:8d:81:a3:9e:d9:cd:80:bf:ab:01:ff:47:c0:09:3c:
03:41:45:67:05:21:4a:78:6b:fc:60:2d:e9:c5:d5:b0:65:45:
70:46:99:7d:e8:c3:07:82:56:f4:e5:f8:27:75:49:42:ab:f3:
44:4c:ef:08:78:85:12:2c:e2:71:c5:eb:c7:3c:d6:f0:af:af:
64:2d:37:b5:b0:47:27:13:5d:02:67:9b:ac:7b:ca:69:6c:97:
d7:71:45:96:61:5b:dd:27:85:40:d9:55:d7:e0:38:30:1d:46:
23:3a:70:38:10:b2:66:c6:05:61:bd:85:60:9b:f8:73:22:1a:
1a:15:60:8c:b8:77:aa:f0:4e:37:47:98:53:e4:b7:e8:d7:48:
e3:25:97:5d:26:92:0a:cc:10:21:2c:f0:a1:f8:e3:05:aa:89:
61:01:73:ab:9b:41:5b:2a:08:23:41:8d:2e:09:db:b9:c0:76:
9d:c8:72:cd:ba:f0:1a:95:68:63:f7:b6:97:47:93:68:3b:eb:
9e:24:2d:e8:a2:f7:64:db:37:93:83:fc:e2:d3:6c:7a:f7:4b:
23:99:9d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:29 2026 by rpki-client