Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
File: _QwhhAzBSt9SamgcB25mxDQxWCw.mft (raw, json)
Hash identifier: QNqgMb30VXBRk8VVcVsSGakfImQLvg6NVNogvbZJHNo=
Subject key identifier: B7:9B:DD:43:AF:3E:5E:C7:0A:70:14:23:AA:C8:F2:D3:7F:F4:6C:11
Authority key identifier: FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C
Certificate issuer: /CN=fd0c21840cc14adf526a681c076e66c43431582c
Certificate serial: 019D389BACDC4814FF8A57168593A0EE1848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
Manifest number: 01A9
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: _QwhhAzBSt9SamgcB25mxDQxWCw.crl (hash: HlhGDP6V/avTng15PdNdClEZNX7C8WWPtN820GWoACI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ac:dc:48:14:ff:8a:57:16:85:93:a0:ee:18:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c21840cc14adf526a681c076e66c43431582c
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=b79bdd43af3e5ec70a701423aac8f2d37ff46c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:d6:a6:79:62:82:4e:30:0d:68:45:a1:bf:
12:d3:83:34:8a:b8:4b:7e:f4:a2:52:17:36:1d:12:
98:1c:f2:40:d2:ed:a3:2f:cf:9f:ac:a7:64:3e:03:
61:78:2f:bc:5d:28:76:2f:89:c5:cf:ba:2c:0d:d4:
00:88:dc:a6:be:43:89:e1:26:de:d7:b6:5f:03:86:
fc:8c:43:81:02:5b:73:39:66:1b:ae:86:d7:a5:57:
48:ae:b4:b0:72:9d:56:c2:33:c2:de:53:76:aa:af:
a8:10:93:3f:0e:b4:52:ff:98:16:eb:1c:e5:0d:7e:
33:ad:e5:6a:a1:ec:38:0b:42:3f:4b:2c:a1:b8:e8:
a7:64:18:9e:89:42:10:6d:3b:5d:36:f5:dd:50:c3:
05:e6:5f:64:b4:6f:89:90:12:9d:4b:b2:3d:1f:4b:
ae:f8:e5:ae:63:46:15:4f:5a:cc:75:89:76:3c:75:
09:de:09:c5:f4:23:b0:90:c1:3f:ae:46:85:2e:cf:
30:2a:a0:53:33:1e:f3:bc:ff:f7:7b:eb:3e:f4:b1:
7f:9f:ca:44:f5:f6:d6:66:ae:20:c6:76:8c:cc:f4:
10:90:d7:9a:21:3d:cf:ce:74:8c:0e:57:98:8e:9f:
f6:8a:cf:14:ff:a1:ef:a9:fe:a0:28:35:8d:b8:c6:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:DD:43:AF:3E:5E:C7:0A:70:14:23:AA:C8:F2:D3:7F:F4:6C:11
X509v3 Authority Key Identifier:
keyid:FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:0f:fa:fe:5c:d0:80:3f:55:80:10:48:1b:4c:6f:44:75:82:
b9:51:78:7a:12:a6:4f:69:9e:c3:a5:73:1b:f2:7a:96:b3:eb:
d3:5f:1d:3f:ce:d4:48:98:a7:9a:94:21:86:96:9a:16:98:bd:
19:c0:c2:c5:25:70:a6:43:ce:27:5b:6d:a8:98:b6:91:01:aa:
ce:f4:85:e0:5f:23:da:9c:2b:46:ee:cf:89:78:ba:0c:89:09:
b4:e9:51:40:d2:ee:d6:1f:6a:d7:94:ed:fe:06:f2:11:c0:ce:
12:68:46:0f:e4:49:de:36:d1:11:ad:ce:ae:c4:eb:31:1e:a9:
c7:60:c5:0a:6f:dd:b7:35:d2:d0:f4:84:d5:44:12:39:3d:a3:
f9:fc:62:3a:0c:02:6b:7b:46:0f:3c:dd:8d:ed:2e:b4:3a:47:
9b:a7:eb:b1:85:78:c5:8f:d9:34:e1:66:5d:d4:ef:e5:e2:f9:
a3:00:fb:20:7f:bf:a0:ad:6a:9f:3a:42:81:f3:06:c9:ca:32:
c7:32:df:3f:33:df:d7:84:00:0c:9f:aa:d8:eb:e8:f5:56:ad:
7c:57:0c:86:d4:1c:17:41:29:6a:71:c8:68:52:25:1d:05:87:
94:3b:42:5c:10:44:48:4e:b6:7e:f6:0c:18:a1:b8:b7:49:d8:
13:6e:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:34 2026 by rpki-client