Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: sNHtGH3N0LpN94MfuV/XNUmZncs52VGx9oEuYlHkw2M=
Subject key identifier: 92:B7:53:C2:B9:5E:DB:06:D7:AC:2F:CC:30:7E:27:BE:70:75:28:0F
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 019D38D37187A1AA6320A52E7EAEEA218C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 1314
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: +ijGKyM2ZrOHtSAKZKkRrtnL62+FRRmUP6Rin4NEDO0=)
2: f7TRcxcu5eFFG3edJtWO5LjNKUc.roa (hash: RBZM0y5g0NU2rB7JA5FE3fTKLxia7y0PmMp6qlYV9vo=)
3: kaCQ02B6gGfO7Q-84pz4Ur-huUU.roa (hash: EdGjBuxGJOuKZYVXyp/XaU7JSLAitiAqjCSTwhWKNJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:71:87:a1:aa:63:20:a5:2e:7e:ae:ea:21:8c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=92b753c2b95edb06d7ac2fcc307e27be7075280f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:e5:83:d7:aa:a8:f2:2e:08:81:90:95:ee:
55:e0:2c:94:75:ca:fd:dd:c2:af:b7:b6:56:63:da:
54:c8:86:b2:af:4f:a7:ed:d4:3e:08:e6:6c:05:dd:
6f:27:9b:8f:a1:68:8a:4d:80:18:20:9a:f7:b5:36:
dd:d5:80:d0:bd:5d:a8:70:b5:31:35:51:b9:c6:ca:
ee:da:7b:a8:0e:bd:0b:24:ce:ba:bc:4e:20:cc:13:
ae:3e:fe:5f:41:74:7b:70:93:a4:97:e7:4e:04:02:
e0:f0:e5:f5:5b:89:6e:a1:45:c5:ce:c9:81:c7:7d:
18:11:89:80:6d:6e:91:a5:5b:3e:c2:6b:eb:dc:b8:
b0:23:a2:f2:89:8e:19:79:91:b1:50:71:dd:38:48:
06:e2:55:73:17:f7:5d:09:f2:5c:57:3e:97:8d:6d:
a1:63:48:e4:ff:be:9b:e3:f5:ff:86:20:43:f0:ee:
ba:4c:d0:4b:23:4b:31:7f:85:df:68:58:55:8b:4d:
f3:a4:7a:fe:02:6b:cd:c1:7f:99:b7:ea:7b:0e:08:
6f:07:70:b2:d7:cb:3f:b8:27:29:48:a9:c4:63:b5:
da:9a:b1:a6:fe:fa:ed:1b:46:4e:ce:c2:19:5b:2c:
09:d4:2f:ed:41:95:89:3e:61:57:f4:1c:0d:7a:86:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:53:C2:B9:5E:DB:06:D7:AC:2F:CC:30:7E:27:BE:70:75:28:0F
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b0:a4:13:3f:bf:66:3c:86:a1:0a:cc:de:1b:81:64:a3:6b:
a2:98:ed:7f:de:49:67:20:10:51:9c:81:33:db:37:57:cb:a6:
6d:81:df:0a:f5:d0:cb:1e:21:36:0c:7b:62:00:ed:16:b4:5f:
85:70:44:d8:d6:b8:f5:76:52:ca:8c:99:be:fc:d1:60:62:3e:
bd:a7:9b:a0:9a:b6:99:e1:80:1b:dd:5b:b3:a4:e3:1d:db:63:
df:86:1f:c3:e7:ae:f3:3d:2b:17:38:30:46:93:9a:16:df:49:
32:40:d8:4f:48:c1:06:13:85:a5:6b:f4:42:84:0c:17:f4:56:
3f:01:0d:cd:65:8f:1b:6f:22:bc:f6:ea:d4:0f:8b:84:23:18:
69:de:6f:96:68:ec:8d:30:15:36:09:44:9f:b0:8f:56:9c:20:
c8:98:e1:05:74:ad:07:31:3e:dd:5b:ff:76:c9:0a:cf:29:53:
f4:fb:5f:56:06:4c:ee:ce:60:8e:d5:e7:82:4e:70:c9:bf:d6:
b2:ae:c6:de:04:00:61:12:bc:91:a1:f7:41:b0:dd:31:35:c0:
19:6c:fd:95:17:7f:c0:f0:ac:75:ff:99:d6:37:aa:5a:ab:71:
30:a8:4d:6d:f9:96:82:92:bb:20:8f:08:72:7a:97:33:ba:d0:
ee:6b:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:18 2026 by rpki-client