Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier: IkljAG5zyFcsLIkceKJh6B7xoFxfDNQSPq5qdinIfA4=
Subject key identifier: 03:AA:BA:C3:BD:EA:67:2B:F9:D7:53:C9:D4:85:37:1E:B0:3A:91:2F
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 019D38D2A8D6ED28BFD0510A53419D0C35C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number: 17E4
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: fbcwLX/Sk5TEM9pMohDAXWob1O2ci3QnJ2i4vz5YDng=)
2: vUZltBKcGS-PyNExw351SsPo8f0.roa (hash: R88L+/UM9Ub6dUxPG9JUIXyMGiUf8ahmjgxxPz1xB4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a8:d6:ed:28:bf:d0:51:0a:53:41:9d:0c:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=03aabac3bdea672bf9d753c9d485371eb03a912f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:82:b5:c6:4e:0b:0b:81:40:5b:10:09:45:
bf:5d:72:32:49:12:52:13:9e:eb:b7:03:15:1b:69:
bc:0d:73:a6:98:df:c2:77:75:7d:b8:c7:d1:ef:3e:
cc:fd:40:8e:6d:fe:80:fe:c7:06:7b:99:10:12:dc:
a2:24:38:df:34:de:4e:70:99:7b:a2:18:82:06:d0:
0c:48:e1:5e:ac:ea:87:1e:b0:1a:1b:6b:dc:5f:c0:
f7:5d:b1:ee:56:cb:e0:13:15:1d:54:42:8d:5a:94:
b8:95:fb:ac:72:27:55:f6:80:fe:cc:42:c7:bb:fa:
ff:6f:a3:d3:d1:4e:11:25:00:ad:a4:6e:24:02:1d:
f4:92:92:2a:cf:1e:41:aa:da:b4:c8:fd:e9:5f:58:
4f:22:07:b2:57:f2:97:a5:6b:67:b4:90:53:3e:31:
48:5d:59:25:e8:f0:f8:3d:23:15:84:b9:64:4f:e8:
83:b8:f8:14:1f:4e:61:1c:cf:b0:2d:d2:2e:a0:95:
42:a3:1e:76:80:da:58:53:c1:94:11:fb:ca:1e:18:
55:bf:5c:af:d2:9b:70:00:16:8c:c2:14:fe:e4:af:
b9:f2:5b:f7:57:32:85:54:8d:8e:0f:8e:de:86:28:
dd:9b:d7:2a:13:2c:e3:ab:3f:a6:47:1e:8f:67:ac:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AA:BA:C3:BD:EA:67:2B:F9:D7:53:C9:D4:85:37:1E:B0:3A:91:2F
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ec:c6:ce:ab:ec:ba:56:8d:0e:c1:6b:e0:14:a1:fb:c2:f6:
6b:2f:05:96:7e:93:4c:9a:5d:02:07:b9:1e:5b:94:0f:7c:21:
47:72:1d:91:59:32:35:55:c3:ea:57:57:3f:bf:01:84:c7:af:
9d:17:ff:93:f1:67:d4:bd:f6:69:cc:19:e3:b4:32:9b:9a:d6:
8a:6e:1b:fc:35:58:cd:77:ac:bd:ba:c8:f5:ee:d8:e7:99:c2:
89:2b:cb:84:0a:37:e7:62:3c:76:00:fd:b9:8e:79:10:33:ec:
23:56:6a:44:19:fb:72:d6:0b:89:29:9d:2a:90:41:77:09:d5:
dc:f0:91:4b:c4:9a:07:4d:3c:36:79:b1:53:85:d1:61:04:db:
2e:9b:34:c3:98:49:a3:fc:5a:3e:90:ee:80:c0:1d:7e:d6:18:
2b:b2:f1:49:6b:19:26:71:db:06:37:16:4c:2d:fa:12:6a:c6:
20:f0:e1:f7:18:ce:73:f7:4a:9e:18:25:fd:7f:05:77:f1:b6:
e9:c4:c5:6f:50:3b:cd:dd:1b:45:08:d2:06:ed:7a:f2:95:dd:
c0:72:ae:f6:b2:59:4c:75:55:30:21:aa:b7:4d:7b:0f:9b:3a:
9d:0f:15:e9:99:60:e3:a0:9a:d5:a1:e4:4b:64:2e:25:ff:ff:
9c:57:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:40 2026 by rpki-client