Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: IraKIlwpduBS2KZzXe1I0PjJhNk6HWIeo2PUGdtCPDA=
Subject key identifier: EC:E7:2D:AC:77:C7:CF:E8:89:D4:2A:61:C6:95:E6:46:CC:C6:1E:99
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 019D389C272AEE24EC5F87FE8A661E6C12B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 0770
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: 1-sDuDT5PyDWTrrUoYprkpEdUV2I.roa (hash: eAjODYNfh7Im2wLs/xUeEWebYtl3ElP2ajyZCTGNlyc=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: b2suM/vpDR0UF2XyfpTS+vd9auQasNbDH1Wkb526lag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:27:2a:ee:24:ec:5f:87:fe:8a:66:1e:6c:12:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=ece72dac77c7cfe889d42a61c695e646ccc61e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:8b:c8:8b:25:36:4a:3e:27:5c:8b:08:d0:
1b:20:cb:36:f9:68:85:7c:95:7f:eb:ef:81:3f:15:
15:f1:f4:0d:81:6f:24:85:cd:b5:e9:9d:02:65:63:
2b:aa:05:1e:ad:c7:03:7c:c3:c1:ad:3a:fb:e4:ab:
85:5e:c7:ef:41:95:f2:85:c1:69:38:66:d4:b1:5c:
eb:f5:7d:dd:08:4c:8e:77:a8:7a:99:25:18:39:eb:
e6:8f:4c:f5:58:15:4f:c1:5d:02:be:6b:98:7f:71:
05:e1:18:f8:57:12:7a:f2:7e:d7:c6:1f:c6:66:35:
0b:b0:b5:44:c5:c1:38:89:29:7e:d1:4a:8f:a6:eb:
28:f9:51:be:28:32:cc:76:1c:d9:40:23:79:bd:90:
1a:6b:31:11:a3:70:17:55:47:9b:68:81:24:9d:4d:
da:83:c7:77:a9:00:46:f3:81:a4:77:93:f7:d5:90:
bf:03:a2:64:7e:1c:7a:09:cd:fb:ea:8a:65:dc:a3:
b1:87:d2:e3:9c:b3:48:c0:ff:4d:84:37:6c:d0:ce:
0d:b2:93:49:8b:0a:b0:5c:ee:a8:0b:f1:fb:50:f2:
0f:11:07:42:f6:73:bf:6a:22:17:69:a0:7a:aa:7a:
80:34:98:d5:c6:38:d8:c5:63:d4:a9:7e:30:e6:73:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:2D:AC:77:C7:CF:E8:89:D4:2A:61:C6:95:E6:46:CC:C6:1E:99
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:56:ee:e1:ed:1e:c3:6a:fe:c5:e0:f6:46:d3:10:01:a2:25:
4d:ef:f5:92:e0:ab:94:f4:6e:7f:73:b3:0d:70:0c:bc:85:55:
0f:2a:bb:dc:da:20:57:5f:75:e7:7d:df:1e:49:59:13:03:fe:
78:a4:05:e2:72:01:ac:c4:bd:79:fc:d9:2c:a7:d3:85:86:68:
8f:db:37:14:32:58:5e:87:a0:6c:c2:d8:66:3a:8b:c9:8e:3b:
29:0c:2a:61:17:80:fd:6d:d3:fd:29:d5:7c:30:23:d0:66:6b:
f2:da:0d:3d:1a:4e:94:82:86:85:b7:11:cf:5e:f4:1e:09:69:
42:a5:07:21:39:d2:88:55:da:97:8f:5b:c1:5a:06:8b:d7:03:
0e:b5:5a:4c:98:3a:6a:a5:9a:28:eb:e3:bd:72:e8:86:f9:ce:
56:88:ef:31:ee:94:99:14:af:68:de:c6:a5:28:a2:3c:87:75:
f0:bc:39:a1:8f:70:5d:33:81:19:b0:ed:f6:21:87:1a:b4:cb:
0c:4c:a9:b7:b5:22:f0:f1:cc:21:e3:5a:77:09:f5:e2:e9:c3:
1f:98:f1:92:b7:e0:a1:54:2a:78:65:ec:29:c8:88:b9:b4:3f:
da:ca:2c:17:3b:ac:52:aa:23:d1:2b:8d:e7:68:8c:03:37:1a:
6d:30:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:21 2026 by rpki-client