Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
File: QiDU__u-ArE02Y5KK0X6e39Vh0w.mft (raw, json)
Hash identifier: oZBUg3M1BpuXN+zdBKr1w/yc2OYFwFSVc3FfYskw0aw=
Subject key identifier: 26:06:1C:1C:76:05:09:5C:19:CD:37:31:77:7F:74:03:C6:49:EB:0C
Authority key identifier: 42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
Certificate issuer: /CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Certificate serial: 019D378956569C838D54BA11DA2D2065772E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
Manifest number: 01AE
Signing time: Sun 29 Mar 2026 03:00:40 +0000
Manifest this update: Sun 29 Mar 2026 03:00:40 +0000
Manifest next update: Mon 30 Mar 2026 03:00:40 +0000
Files and hashes: 1: Nz3SX1ili_hMO_1sKV-Z-Vs-dFg.roa (hash: tWFA6luZXm6+YFp43tgoM3FIlmo/3WZAxBWjup0VIJs=)
2: QiDU__u-ArE02Y5KK0X6e39Vh0w.crl (hash: xB6SK1zgKwpliksmf0SJw1vsSi+KTE6nCJLBOZiaJMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:56:56:9c:83:8d:54:ba:11:da:2d:20:65:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Validity
Not Before: Mar 29 03:00:40 2026 GMT
Not After : Mar 30 03:00:40 2026 GMT
Subject: CN=26061c1c7605095c19cd3731777f7403c649eb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:13:5f:dd:ee:4a:32:7b:6c:ad:9f:42:7f:
51:6f:cf:81:00:6b:ad:9c:1c:70:56:f4:af:1a:2a:
19:af:aa:ca:26:4a:dd:19:98:74:2e:a3:c6:2c:e0:
a3:2c:84:0e:37:ef:43:89:48:bd:39:83:18:8e:f3:
e7:84:6d:ee:23:8b:e8:6e:7a:a4:7b:ed:95:8c:53:
1d:e5:63:90:d1:8a:75:22:35:c4:51:87:bd:2e:b3:
4a:12:f9:10:8c:85:83:5a:28:16:d8:92:8b:b4:03:
78:4f:bf:fc:f8:4a:8e:fa:3b:ce:9c:45:d0:be:c9:
92:8e:00:a4:d4:0e:6b:4e:04:f8:49:b4:f1:19:c5:
1f:7f:4d:f4:63:27:0a:36:28:85:02:ce:cf:08:39:
f7:f5:13:f2:63:a0:8a:83:3a:34:66:fe:6c:cc:ac:
0b:6d:e0:95:a3:db:16:a3:2f:cb:f4:16:55:65:7e:
22:5f:79:08:ed:ad:21:ec:9d:95:60:cb:08:c9:57:
7b:93:6f:80:41:59:73:80:6b:da:29:0c:85:f7:31:
16:fc:0b:fe:d9:9f:11:82:2b:41:4f:25:89:ee:fa:
7f:f5:e1:b2:36:ca:fe:79:b0:04:18:a4:4f:6a:e6:
fc:6c:27:45:f6:c9:39:1c:3a:1b:9c:56:8a:c4:b6:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:1C:1C:76:05:09:5C:19:CD:37:31:77:7F:74:03:C6:49:EB:0C
X509v3 Authority Key Identifier:
keyid:42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9d:78:a6:a3:79:92:8c:aa:a1:71:fd:d0:30:1f:01:46:16:
b2:c8:65:06:48:36:16:db:aa:d9:fc:d9:9a:76:65:9a:80:33:
32:56:ed:10:dc:87:29:8c:fc:91:40:a3:a8:0e:fb:eb:17:7f:
06:f5:a5:cb:b7:53:3a:7d:bc:e4:a7:1e:46:62:2f:d6:a3:d2:
24:00:db:05:34:bc:c1:e5:16:9b:8c:f1:69:49:22:a3:21:cd:
aa:aa:6f:69:c6:2d:95:20:e4:bb:a1:00:b4:9a:8c:5b:32:bb:
c2:ee:38:26:7f:5e:03:7a:f3:85:0e:ec:19:fa:c8:2d:0a:c8:
d6:60:8e:c6:5d:e9:9f:f1:74:0d:23:47:01:e4:ff:68:ee:f0:
31:4f:5e:2f:63:67:dd:50:fb:ea:72:25:48:e4:0a:49:99:bf:
2b:1c:2a:b6:7d:b3:ad:4f:7c:72:55:ed:ee:2c:96:cb:f6:ce:
3c:e5:82:4d:5c:9c:db:39:f9:cb:c7:d3:c8:bf:64:06:00:9c:
72:d7:a6:3f:f5:36:d1:6d:93:11:cd:1b:98:86:62:07:91:37:
f6:ec:8b:72:40:9c:27:73:15:d9:70:45:70:45:96:0d:24:43:
0a:f2:ac:dc:16:cd:4c:2e:19:95:88:d9:52:08:a0:53:a1:34:
3e:8f:15:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iVZWnIONVLoR2i0gZXcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjBkNGZmZmJiZTAyYjEzNGQ5OGU0YTJiNDVmYTdiN2Y1
NTg3NGMwHhcNMjYwMzI5MDMwMDQwWhcNMjYwMzMwMDMwMDQwWjAzMTEwLwYDVQQD
EygyNjA2MWMxYzc2MDUwOTVjMTljZDM3MzE3NzdmNzQwM2M2NDllYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3YTX93uSjJ7bK2fQn9Rb8+BAGut
nBxwVvSvGioZr6rKJkrdGZh0LqPGLOCjLIQON+9DiUi9OYMYjvPnhG3uI4vobnqk
e+2VjFMd5WOQ0Yp1IjXEUYe9LrNKEvkQjIWDWigW2JKLtAN4T7/8+EqO+jvOnEXQ
vsmSjgCk1A5rTgT4SbTxGcUff030YycKNiiFAs7PCDn39RPyY6CKgzo0Zv5szKwL
beCVo9sWoy/L9BZVZX4iX3kI7a0h7J2VYMsIyVd7k2+AQVlzgGvaKQyF9zEW/Av+
2Z8RgitBTyWJ7vp/9eGyNsr+ebAEGKRPaub8bCdF9sk5HDobnFaKxLbU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYGHBx2BQlcGc03MXd/dAPGSesMMB8GA1UdIwQY
MBaAFEIg1P/7vgKxNNmOSitF+nt/VYdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlEVV9fdS1BckUwMlk1S0swWDZlMzlWaDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wYWVhMGQtMTFjOS00MTM0LTk4MjUt
NzQzZTU2MDk1NDk5LzEvUWlEVV9fdS1BckUwMlk1S0swWDZlMzlWaDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wYWVhMGQtMTFjOS00MTM0LTk4MjUtNzQzZTU2MDk1NDk5
LzEvUWlEVV9fdS1BckUwMlk1S0swWDZlMzlWaDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPp14pqN5
koyqoXH90DAfAUYWsshlBkg2Ftuq2fzZmnZlmoAzMlbtENyHKYz8kUCjqA776xd/
BvWly7dTOn285KceRmIv1qPSJADbBTS8weUWm4zxaUkioyHNqqpvacYtlSDku6EA
tJqMWzK7wu44Jn9eA3rzhQ7sGfrILQrI1mCOxl3pn/F0DSNHAeT/aO7wMU9eL2Nn
3VD76nIlSOQKSZm/Kxwqtn2zrU98clXt7iyWy/bOPOWCTVyc2zn5y8fTyL9kBgCc
ctemP/U20W2TEc0bmIZiB5E39uyLckCcJ3MV2XBFcEWWDSRDCvKs3BbNTC4ZlYjZ
UgigU6E0Po8V8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:53 2026 by rpki-client