Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: GJzSjye/KggD1GwiFHc3GLC2kZpkbe8Zz+Q/ecx5yyI=
Subject key identifier: AD:2E:B3:C8:34:BF:35:25:8E:58:ED:A7:3D:FE:47:21:DE:3C:27:5D
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019CE44815E69CD23D636AE166FDFDCCCE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0C95
Signing time: Thu 12 Mar 2026 23:00:55 +0000
Manifest this update: Thu 12 Mar 2026 23:00:55 +0000
Manifest next update: Fri 13 Mar 2026 23:00:55 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: pvNMhQFGRvMh9lu8jI6hEmFXpBECUBODakO/F5V10nQ=)
3: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (hash: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:15:e6:9c:d2:3d:63:6a:e1:66:fd:fd:cc:ce:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Mar 12 23:00:55 2026 GMT
Not After : Mar 13 23:00:55 2026 GMT
Subject: CN=ad2eb3c834bf35258e58eda73dfe4721de3c275d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:ad:e9:a2:e7:59:3e:3c:f5:1e:bf:53:06:
f0:d8:ff:ed:99:ff:4a:c9:9b:e0:b4:15:e8:e8:b8:
fd:99:5b:d5:57:22:dc:95:5f:2d:55:04:5d:b3:b4:
b6:36:3b:f9:38:81:14:ff:e9:bb:36:6e:e2:8a:d9:
0e:f9:0a:3b:72:9c:1e:f9:08:26:08:53:db:69:ff:
0b:a4:2b:d6:3f:af:44:fd:2b:e2:2d:2f:6e:38:50:
a4:41:a5:cc:0f:a0:8b:3f:74:ff:6c:c0:75:1e:99:
45:bb:a0:a7:a7:c0:8d:d5:00:72:4c:fb:78:2d:d4:
c8:07:b3:1f:7b:aa:c8:72:a8:85:af:f1:88:2e:b6:
7c:e4:6e:80:7e:30:f0:2d:5b:a9:c3:b2:f7:28:8a:
dd:f6:ee:d9:54:f3:90:d5:7f:44:b1:ce:c4:84:10:
ac:92:00:01:63:29:f2:fa:01:fe:fe:4e:f6:be:38:
b0:b9:47:b4:de:8b:c8:54:3b:86:78:92:d1:4c:49:
50:00:f7:31:9e:7f:aa:fe:68:9b:5c:e5:51:a3:5f:
23:ff:94:3b:62:56:b1:43:dd:f9:68:59:fa:bb:f4:
32:1b:ce:ef:63:40:94:d4:ba:d7:b5:9c:cd:07:6a:
65:1a:e5:23:23:0a:1f:00:14:81:7e:eb:38:3c:1e:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2E:B3:C8:34:BF:35:25:8E:58:ED:A7:3D:FE:47:21:DE:3C:27:5D
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:c7:52:48:71:a8:92:3e:c4:cc:10:31:81:9e:18:59:12:
c4:c2:a3:06:0a:7d:db:71:6a:0e:9d:56:aa:33:50:e1:70:fb:
99:88:17:2f:17:f8:f5:e0:f3:11:75:b8:39:b1:20:ee:b8:f7:
c7:a0:b8:4f:40:a8:1e:07:38:14:ce:f0:a5:0a:99:43:16:3a:
7e:22:0a:4d:f1:46:a4:1e:82:9d:89:0a:4e:18:a8:e2:dd:ea:
da:46:40:bd:a5:c5:1b:71:f4:7c:dd:00:cd:96:07:3a:53:84:
cf:d7:72:ee:4a:4e:d8:0d:bb:17:6a:4a:da:b2:12:13:e4:22:
91:58:2d:be:d7:bc:ae:16:f9:12:f1:be:99:18:83:07:8f:ea:
dd:8b:f4:43:62:17:bd:b2:3f:8e:b8:d2:c7:de:ea:15:2d:07:
59:3f:fa:4e:72:a3:35:4b:02:29:3f:01:30:e7:ed:2a:e7:b2:
57:91:94:90:46:a3:95:79:4f:b1:f3:d5:ef:6c:40:93:0e:18:
73:c2:7b:8a:29:35:81:9f:f6:83:26:5a:f0:d9:8b:e9:26:6d:
2d:6a:e9:bc:8e:70:a9:16:94:e8:2f:b3:59:65:0f:76:60:65:
b0:0a:fd:52:03:1d:58:b4:e4:17:ae:92:cb:96:9d:4e:89:86:
40:67:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:10 2026 by rpki-client