Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json)
Hash identifier: JepFujU/dd7sgu09VCE/3EJR01RkTDPL7/QhYm7v3U0=
Subject key identifier: FB:3A:64:09:6A:D1:B9:6E:71:43:3D:88:08:04:5D:E1:73:C4:EB:4F
Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579
Certificate serial: 019D375339C95B4075A9294FBEA7F3E1BC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
Manifest number: 063A
Signing time: Sun 29 Mar 2026 02:01:34 +0000
Manifest this update: Sun 29 Mar 2026 02:01:34 +0000
Manifest next update: Mon 30 Mar 2026 02:01:34 +0000
Files and hashes: 1: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: ZwigILsQKNPAfNH3aObTRHZTxSwiD9zuQAedoEhBp5M=)
2: xUUV-CZdo9Ukf7sKRtxgVj_1MqU.roa (hash: jpUT41SLpbot+5R4BFOYYkdz+MS0rf+UNRgr8WOjpTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:39:c9:5b:40:75:a9:29:4f:be:a7:f3:e1:bc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419b379a246412810e8a8052a62a39688ca34579
Validity
Not Before: Mar 29 02:01:34 2026 GMT
Not After : Mar 30 02:01:34 2026 GMT
Subject: CN=fb3a64096ad1b96e71433d8808045de173c4eb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:e5:5c:dc:db:38:4d:0c:98:14:17:83:38:
fc:96:86:21:ed:1b:a1:4f:31:3b:10:ed:5b:81:4e:
59:59:f3:8d:c6:d0:50:0a:17:57:21:3f:a3:33:68:
87:f4:53:45:b1:b2:f4:4c:f2:c9:5d:96:63:b9:7e:
19:a3:48:2b:9a:b1:e2:05:27:f9:55:b9:36:a3:1e:
2e:81:7a:2f:da:dd:24:6f:cc:32:fe:4d:7a:88:34:
cf:09:7c:f3:9f:02:6f:10:1e:92:3b:5b:f5:be:98:
bd:3f:5a:1c:89:e2:ab:8d:e0:9a:19:26:1c:82:07:
17:40:f6:7a:46:ef:33:ba:4e:9f:0a:33:08:a2:3d:
ff:8d:7a:63:f1:fa:50:70:31:d1:ad:b7:b5:63:67:
f4:b4:20:3f:91:69:87:13:c1:55:f9:67:63:d1:94:
8a:0c:04:30:78:a3:57:3a:e5:57:c9:87:6d:84:83:
f0:8c:02:09:81:40:60:21:85:5c:c3:11:f6:36:af:
51:dd:47:db:7d:09:dc:ce:5d:c1:37:89:c5:56:ee:
72:b3:4c:50:84:c5:c2:a2:3f:29:1d:8e:6f:9c:f4:
78:eb:7f:de:dc:22:cb:a7:3b:2a:ac:ac:9a:3f:87:
ad:fd:af:17:00:e8:a1:09:23:e8:db:b3:63:45:e8:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:64:09:6A:D1:B9:6E:71:43:3D:88:08:04:5D:E1:73:C4:EB:4F
X509v3 Authority Key Identifier:
keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ee:3a:b1:45:5d:11:3d:63:af:37:49:ba:ad:58:2b:e0:70:
37:c3:5d:ac:ec:f4:25:7e:0c:e1:e7:bb:cf:b1:18:a9:2e:5d:
1d:ab:d0:8c:d2:0e:71:68:ee:5c:04:16:b8:c5:05:fe:f8:81:
2c:67:d1:5a:0f:64:dd:43:97:d8:43:3d:1b:21:f6:ea:d0:7a:
e8:cd:ec:7a:20:ef:97:46:b7:ce:d8:88:de:91:8d:37:01:28:
03:88:31:08:21:ae:cb:79:33:e2:3f:19:17:85:d5:4f:1b:da:
75:af:e4:ed:26:d8:bf:22:5e:0d:e8:29:87:42:6c:d0:71:f8:
b5:d8:9f:3c:29:a6:d6:a0:26:da:1f:98:f8:85:45:de:0a:77:
bd:ec:2c:56:05:c1:81:48:bb:75:be:47:8f:49:26:4f:0f:34:
73:0e:51:83:49:18:01:95:4d:b3:30:af:0f:ee:29:fd:61:ca:
80:17:25:78:9f:fd:8e:78:28:79:e7:87:20:69:65:71:d5:f9:
c5:c2:a3:5d:ff:5d:e8:40:a4:92:5f:d4:39:64:b3:b1:9a:af:
05:d2:42:6a:57:6e:c0:a4:70:c6:50:6f:eb:55:dd:83:11:6a:
e3:a9:d9:1c:02:56:eb:ba:35:b0:b8:5a:f7:2f:d2:2a:03:ab:
76:c5:1c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:35 2026 by rpki-client