Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: I+vb1zK69tsBP1A8X+Dk1ogx+c9aSUs/nGVeh7t9yJo=
Subject key identifier: F3:1F:43:10:8E:7A:53:76:DB:A8:42:09:B5:AD:63:87:FF:62:5D:D0
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019D37C0F1148ADDFD78C9228D9FBAE8F39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 120F
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa (hash: aK0mESa/pTNFNbE9AYjmY5ObclP62vz5mDsyUcql268=)
2: PKIsDHUR7jxFAsus-wdsRMLiSqA.roa (hash: gaSVKfmjUGAGycTPbk7kLy1z07Kh829WcikSnbJ29nU=)
3: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: hAwM6MOU8bRWYX3PPooHtyvDff/FWHz/FLNjEW9UAzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f1:14:8a:dd:fd:78:c9:22:8d:9f:ba:e8:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=f31f43108e7a5376dba84209b5ad6387ff625dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:52:c4:fd:3a:d9:90:f7:e7:53:a7:1f:45:
c4:1f:88:85:ba:8d:7e:e0:46:e0:58:42:ec:61:20:
2d:6a:f0:31:9a:4f:e7:79:dc:b8:93:0a:1c:45:16:
6a:fa:30:d3:51:7a:6c:2b:e9:d2:21:f9:13:ed:00:
32:b6:a6:a8:c0:f8:27:70:1d:d4:b8:61:20:c8:91:
27:38:4a:05:36:0d:45:9c:69:ee:26:2c:41:aa:5a:
89:5c:d9:e1:1e:bd:4d:1e:fd:c7:8c:48:e8:7a:cd:
4c:a4:7c:04:9d:15:a1:d2:9f:e8:0b:51:90:8d:c1:
c5:ee:5f:a2:9d:c7:aa:8a:f7:21:a7:fa:5d:ae:50:
b8:9b:0c:7f:5d:c4:24:a4:ca:5b:10:1a:80:93:17:
b8:22:ef:f9:27:49:4f:df:bb:1d:e5:27:83:88:74:
3c:e9:75:30:ab:28:19:75:ce:1f:ef:32:ee:a8:db:
58:ca:b4:a7:86:b7:1d:b6:69:de:7f:0b:31:75:6d:
33:dc:94:dd:a5:d5:48:60:8e:22:95:fe:9e:2e:42:
5f:2d:7f:3c:14:cf:5a:a9:94:11:02:e2:ef:7f:8a:
97:ad:47:b3:83:00:24:6e:cb:78:a2:9d:ab:6f:df:
0b:b7:dd:52:3b:33:b4:fe:fe:2d:35:fa:bd:30:9f:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1F:43:10:8E:7A:53:76:DB:A8:42:09:B5:AD:63:87:FF:62:5D:D0
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2a:fa:3f:85:62:0b:2b:8a:8d:14:78:74:d5:59:e9:8f:2b:
62:b5:2c:73:a7:3e:72:3e:63:0f:79:41:0d:59:ae:16:84:94:
94:ea:24:13:4a:0c:04:91:b8:c6:0d:20:73:f8:a3:2a:0f:25:
20:2c:24:96:5b:e5:09:b4:62:31:f1:fe:c7:c7:0a:d6:36:09:
dc:6b:ca:b1:98:bb:69:02:ae:ab:8f:48:7f:2f:99:eb:45:c1:
21:0e:ba:6d:4b:77:2d:2a:25:59:a5:47:64:e2:5a:2b:70:48:
e3:39:a3:78:55:c7:58:03:98:9b:9e:9b:8a:25:34:6a:51:f9:
15:41:f4:8a:31:3d:6a:4a:a0:42:07:eb:a1:a3:1a:17:fe:91:
ac:85:c0:49:a1:93:da:fb:bf:c4:c9:5c:0b:f8:ac:4f:37:8d:
18:71:27:ac:f4:4b:ab:06:84:6c:ed:99:db:26:63:ef:6e:25:
2f:a7:13:22:c7:b9:35:e0:59:15:75:53:e4:83:27:55:b4:37:
bb:9c:c8:c9:f2:8b:61:89:59:58:08:04:24:be:9a:f3:7b:14:
d8:85:91:c0:13:7c:61:1b:15:9d:a8:2e:35:c0:e9:d0:8e:40:
e8:99:95:d1:6a:c9:d4:82:55:e1:a8:55:48:32:f9:92:b5:2c:
3c:e9:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:43 2026 by rpki-client