Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
File: QiDU__u-ArE02Y5KK0X6e39Vh0w.mft (raw, json)
Hash identifier: mo61QoKNMMOPPXdHEIDFYrHbqvmHfsjx5hpJ90dcpw0=
Subject key identifier: 0E:6B:5D:2C:6F:D4:C6:B9:74:2C:89:5C:CD:1E:EF:E6:C5:E0:8F:D0
Authority key identifier: 42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
Certificate issuer: /CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Certificate serial: 019CAE6C61F406E44A0A0FE3E3DA25173192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
Manifest number: 0167
Signing time: Mon 02 Mar 2026 12:01:04 +0000
Manifest this update: Mon 02 Mar 2026 12:01:04 +0000
Manifest next update: Tue 03 Mar 2026 12:01:04 +0000
Files and hashes: 1: Nz3SX1ili_hMO_1sKV-Z-Vs-dFg.roa (hash: tWFA6luZXm6+YFp43tgoM3FIlmo/3WZAxBWjup0VIJs=)
2: QiDU__u-ArE02Y5KK0X6e39Vh0w.crl (hash: ODpQ0Frj62dSW0Ao5DTqxDWqSUvHEUVs5+6AaQaEFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:61:f4:06:e4:4a:0a:0f:e3:e3:da:25:17:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Validity
Not Before: Mar 2 12:01:04 2026 GMT
Not After : Mar 3 12:01:04 2026 GMT
Subject: CN=0e6b5d2c6fd4c6b9742c895ccd1eefe6c5e08fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:d6:fe:59:d0:a1:1a:cd:10:87:d2:60:7c:
3a:35:86:7b:5e:77:8b:22:9f:b2:cb:03:cc:17:74:
a3:14:86:4b:91:1c:af:0d:dd:74:39:1d:58:ad:e2:
d2:e1:1b:ec:d8:d0:6a:55:7a:00:ac:75:15:13:df:
06:6b:05:3a:d5:15:ad:ac:d7:12:f6:6b:51:76:ec:
e5:d0:91:9b:79:1e:d6:16:1f:fe:22:2e:b6:56:95:
b4:47:39:21:5a:3a:a9:1c:da:8b:1b:be:28:dc:8f:
6b:1a:22:2a:10:d6:be:55:61:f3:c8:a0:95:10:a0:
f1:27:12:fe:ca:e5:d0:c2:1f:9f:56:25:3f:06:b2:
cc:6c:62:09:33:6d:aa:c7:f3:5e:f5:39:45:90:bb:
49:90:e1:43:53:ec:fe:38:07:e8:de:4a:81:e9:6e:
97:c2:45:a0:ba:f2:04:33:c6:64:b7:47:55:ac:68:
1a:be:53:7e:c8:c6:f0:a5:05:4e:5b:32:0f:a4:7d:
9b:ed:2e:ee:54:f6:81:43:9d:46:fd:13:1a:22:43:
ba:39:a4:52:27:52:4c:8e:f7:18:b0:62:a5:44:52:
02:74:a3:e7:7c:0a:66:c4:14:e5:70:9d:2a:72:8b:
a1:5c:d3:a4:a0:70:17:55:05:00:f1:a2:f3:c5:8f:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:5D:2C:6F:D4:C6:B9:74:2C:89:5C:CD:1E:EF:E6:C5:E0:8F:D0
X509v3 Authority Key Identifier:
keyid:42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a4:58:23:0c:14:c5:f3:a1:d0:ec:fc:ac:90:53:66:0b:ab:
69:ee:6a:76:80:5e:65:8d:88:e3:02:5f:68:33:f6:61:4e:44:
5f:e3:fd:44:02:18:72:75:10:c1:09:18:89:87:98:99:95:dd:
b8:e3:fd:a9:db:4c:d0:f2:12:c4:64:0e:1d:7f:4f:82:f8:b9:
6c:50:81:4d:08:3b:14:81:cb:65:48:49:ff:f9:56:d8:a1:9c:
2b:e2:7b:a3:91:6a:76:ae:f9:39:ab:6d:00:ba:aa:ca:2b:63:
bc:5f:ff:31:e5:86:3e:6a:65:2a:28:72:d3:da:9a:89:10:70:
c3:fe:6a:c7:79:3e:31:bb:4c:f3:14:3b:a1:5e:80:ab:73:69:
ae:9f:f4:13:27:5a:31:c6:f9:53:7f:ee:a5:9a:5b:76:e3:6a:
86:e2:9c:03:df:6b:3b:12:8d:68:a7:74:47:15:6a:95:c3:4a:
2b:4c:e7:55:21:75:5a:fe:e2:3f:ee:9c:c1:f2:4c:b9:55:81:
fc:1a:d1:f4:62:15:3e:c2:14:ba:05:81:07:ad:9b:61:67:98:
05:99:57:29:c8:b0:d8:50:86:5a:2f:9c:03:8a:21:4c:44:a3:
0d:97:35:1b:54:ff:24:44:df:c9:34:d7:d1:15:01:12:d5:5b:
8c:25:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:45:06 2026 by rpki-client