Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: ZjnxMiCDRdpTCm3zX3ICcJloVjR4zCbVBNihs2SQPM0=
Subject key identifier: 0C:E6:FB:29:62:1B:A5:3F:7E:5C:86:B3:5A:44:1C:3D:65:73:E5:C6
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019DA41C92CC6976B918CBB2A6D4125FCF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 07CD
Signing time: Sun 19 Apr 2026 05:00:29 +0000
Manifest this update: Sun 19 Apr 2026 05:00:29 +0000
Manifest next update: Mon 20 Apr 2026 05:00:29 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: vtO1s9bnlR+fG0jyXOpCijqoZflq1z9x9AVA6MuNa7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:92:cc:69:76:b9:18:cb:b2:a6:d4:12:5f:cf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Apr 19 05:00:29 2026 GMT
Not After : Apr 20 05:00:29 2026 GMT
Subject: CN=0ce6fb29621ba53f7e5c86b35a441c3d6573e5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:61:5d:e6:6b:0b:2a:9d:dd:4a:04:c0:45:
7e:06:d8:c8:07:db:8f:eb:e9:d0:e4:06:3e:55:7f:
36:0a:c6:3f:3c:f1:83:ce:53:b6:a5:0c:90:42:76:
09:3a:d1:5f:67:05:6e:c4:bf:f4:4e:79:87:f6:26:
85:3b:4c:00:9b:84:fa:92:7b:4e:fd:0c:fb:40:76:
f9:7d:09:34:80:52:c1:8c:a7:70:78:9a:b5:bf:94:
25:8b:41:57:72:94:96:e1:56:fe:4f:45:0e:50:c4:
f1:1c:ba:a9:1b:35:b1:90:9a:2f:62:f2:95:53:6f:
4e:8b:73:4a:25:51:bf:08:4b:58:2d:19:91:7d:a5:
d2:60:44:f1:4d:fc:39:c9:5b:ec:c9:7f:31:0d:2a:
12:98:98:20:ae:52:21:07:6a:8f:73:37:1d:c0:c9:
d5:1b:3e:1c:d4:ce:79:ae:e9:25:d8:ce:19:4f:af:
9a:9b:e7:e9:98:73:6b:e6:ba:55:93:8c:59:80:ce:
0a:a5:e9:2e:77:99:32:97:c2:c5:5e:a3:05:db:db:
0a:a8:83:23:f5:59:bb:63:60:e0:26:28:b4:40:b7:
1f:46:9e:fe:5a:ab:60:d9:a0:59:b0:46:63:36:8a:
ce:f7:fd:8e:35:7f:b0:8f:91:4c:fa:ae:79:0e:64:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E6:FB:29:62:1B:A5:3F:7E:5C:86:B3:5A:44:1C:3D:65:73:E5:C6
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:06:80:d8:13:be:d6:b3:64:a6:bc:52:84:b9:ff:6a:cf:32:
61:75:cd:3a:9a:db:ea:f2:f3:a2:b2:24:d3:7b:07:a9:a5:26:
15:24:8d:0a:d4:2c:57:6e:f5:49:b6:8c:6f:00:8a:8e:4f:1b:
69:de:55:76:a9:ee:1a:3b:fa:40:44:cd:b1:78:8d:90:3e:62:
9b:38:ac:a5:1b:2b:4e:73:f0:63:23:02:2f:9b:f7:3b:e2:2b:
48:b0:c0:f6:f6:0c:a5:3b:88:31:e9:1b:f3:66:14:9f:df:2c:
fb:35:e2:d4:fa:b8:87:24:d5:1a:28:5b:a3:83:ac:24:ee:f6:
d6:b3:b6:45:62:bc:9b:3c:6d:6b:3d:e2:39:66:23:20:a4:ad:
16:61:38:3f:2d:3e:6e:30:ba:54:7d:2a:36:e5:5b:7e:64:f1:
aa:e6:c9:8b:77:7d:bb:91:d5:73:8f:90:f8:8f:8b:3d:f1:5d:
85:22:af:c4:cb:0d:91:29:a1:ea:1e:7d:ec:4c:83:b8:c8:59:
4a:71:9e:f2:d2:1f:49:80:d2:25:47:1f:25:df:b4:a1:9c:3e:
4a:57:b0:80:82:55:03:94:20:d5:da:81:a4:b2:20:a8:c9:aa:
94:ca:f9:16:fe:6f:69:e6:02:88:27:f3:5b:cc:b2:21:76:83:
dc:e0:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:43 2026 by rpki-client