Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: G8GMjU6qqb9/haPsowsJLy9dmXxdTsVcD4bOyWtJx5w=
Subject key identifier: 7A:5A:3E:21:22:40:8B:6D:93:B6:7A:B6:C5:55:B3:03:E7:FA:7D:82
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 019D3A1C488E70F072224AB728530A8A2B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 0E64
Signing time: Sun 29 Mar 2026 15:00:25 +0000
Manifest this update: Sun 29 Mar 2026 15:00:25 +0000
Manifest next update: Mon 30 Mar 2026 15:00:25 +0000
Files and hashes: 1: 2UrjK_FlsYX5StVCQ2WmRFfnp6U.roa (hash: jZ7AryuTGRinL/OIX+iNfd8KYT9tdCnaqxvwfiWTks8=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: UqxYIeQBTg8tCl4x8ghZo0N4w/AXuiehv9a/IBrRdis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:48:8e:70:f0:72:22:4a:b7:28:53:0a:8a:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Mar 29 15:00:25 2026 GMT
Not After : Mar 30 15:00:25 2026 GMT
Subject: CN=7a5a3e2122408b6d93b67ab6c555b303e7fa7d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:d9:51:b4:63:43:e8:c0:56:1e:62:dd:78:
48:59:03:99:5f:b7:eb:9b:6b:7f:da:a4:b7:56:35:
a6:15:e3:54:dd:71:00:fb:e2:99:f4:65:7c:fe:e5:
83:71:26:cd:80:b9:f5:6d:40:4e:df:32:33:b8:29:
4a:13:43:20:5c:e6:d5:a0:c8:30:06:37:dc:28:6c:
f7:92:c0:9c:e9:fb:91:37:eb:7f:dd:63:87:15:04:
50:33:53:d4:00:e9:7a:0f:cf:cf:bb:e6:e8:da:d8:
2d:40:b6:45:04:64:6e:8b:8c:a2:3b:e1:1c:3c:ec:
96:67:03:39:50:d5:d3:a5:bc:18:2a:bd:26:45:47:
91:69:7a:59:cb:2e:78:4e:62:51:2e:16:54:fc:10:
bf:0b:f5:d4:fc:fb:d4:d0:8e:2a:5a:d5:a5:b7:64:
b3:3e:01:08:3e:2d:52:3e:85:8f:33:ef:51:57:11:
8b:2c:70:57:ca:e7:ea:18:bb:b0:65:35:35:66:4a:
ae:08:cb:05:54:e6:d1:2a:6d:15:cd:0f:e5:ed:9e:
7a:0d:33:5b:6a:b5:7f:7c:af:a6:00:b0:46:43:da:
f1:a9:79:1e:d3:94:27:4b:50:b5:d3:db:86:d6:4f:
2e:eb:0e:64:c0:f3:b0:94:f1:15:c2:8c:f1:73:fb:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5A:3E:21:22:40:8B:6D:93:B6:7A:B6:C5:55:B3:03:E7:FA:7D:82
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f6:ab:00:45:48:84:37:6c:05:7e:aa:f6:c6:1c:32:4c:3b:
7b:fb:fd:91:de:d1:6e:e8:86:7b:22:c2:f2:de:76:d8:21:fd:
cd:8b:43:38:12:1a:99:77:40:d8:3c:90:ef:f9:35:ae:82:b6:
9c:07:c1:5f:2f:61:23:31:58:2f:70:0e:f7:d1:b7:a4:5a:79:
71:e6:bf:69:e2:d4:75:67:68:62:82:fc:d1:b5:99:09:96:0c:
de:13:5d:2e:1e:54:34:3d:bc:77:ba:37:28:e3:d3:f6:2e:be:
0d:b2:d0:a8:07:aa:b5:4a:aa:bd:2f:2c:55:93:a7:b0:0f:b6:
8c:b2:ca:8b:bb:35:08:ed:ea:5c:fd:ab:be:0d:91:81:9d:e6:
3b:43:c8:d3:ee:13:ec:f4:cd:de:e4:6a:80:ca:e7:5d:a6:e5:
15:5c:29:e6:95:0b:8e:7c:7f:e4:6f:eb:30:49:37:05:de:36:
ea:be:9b:e3:25:4c:68:8e:19:6a:b0:43:70:46:e7:c7:3e:50:
57:f8:1a:49:04:b3:f8:a1:3f:db:8c:69:c4:99:67:ef:ea:d2:
6b:d1:4f:da:ba:43:e9:e6:24:a7:19:db:3a:d8:c9:76:b9:72:
43:34:35:9a:9b:17:46:67:6b:21:03:26:64:92:04:d1:ec:65:
81:c2:ba:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:19 2026 by rpki-client