Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: OSn6RUI5A7KDgDChuTC9tddIOjR6i7yuwPZen4WfNDM=
Subject key identifier: 65:A3:5B:87:76:06:20:26:01:61:45:A9:FF:6E:1E:13:72:8D:AB:18
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019CAAFD1E7E1951CC767ECFCF6BC39B7983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 074C
Signing time: Sun 01 Mar 2026 20:00:40 +0000
Manifest this update: Sun 01 Mar 2026 20:00:40 +0000
Manifest next update: Mon 02 Mar 2026 20:00:40 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: yuxMriyI/lB8Iqb24/wGSsp6v1giKuYrxAB3xUZrTwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1e:7e:19:51:cc:76:7e:cf:cf:6b:c3:9b:79:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Mar 1 20:00:40 2026 GMT
Not After : Mar 2 20:00:40 2026 GMT
Subject: CN=65a35b8776062026016145a9ff6e1e13728dab18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:bb:67:0f:3b:99:b6:40:73:43:ae:4f:04:
ee:a7:e0:74:cc:c3:92:76:5c:07:27:c5:09:09:35:
27:03:03:50:ad:f6:98:23:ec:e4:91:77:6b:54:fe:
ef:16:04:94:34:a6:a8:c1:0c:29:3b:38:ba:ab:18:
8c:c5:50:21:3c:1f:78:63:b1:18:6e:d6:1c:f7:06:
64:9c:08:42:bd:48:e6:1c:9d:fb:b6:34:c1:4d:0a:
62:c6:92:f4:0d:ce:22:7f:4e:5b:66:f7:ea:d7:17:
f6:7c:d7:45:bd:1d:b2:4f:dd:2f:3d:7d:ba:f1:e0:
ee:28:24:a1:2e:1c:fe:b3:03:f3:2f:69:18:90:ba:
45:68:75:ef:02:6c:98:6a:74:8b:39:3f:9a:8d:d4:
48:2f:0e:95:bf:38:66:1d:1e:10:f1:48:69:d5:78:
5a:4f:a0:7e:7c:b2:69:06:14:2e:2e:2e:cc:d8:e6:
3c:1e:8f:c6:a2:16:14:41:f1:8e:5f:11:76:6a:96:
60:ee:eb:49:0f:70:bb:8b:fe:9c:2b:b0:99:9b:6d:
84:d1:9d:67:ea:1b:da:bd:30:3d:c5:3d:c1:e4:50:
bd:f7:62:d6:2c:84:2b:12:1e:e3:7e:4c:35:95:92:
f6:0b:d6:97:83:d3:90:94:33:2f:4d:70:6b:3b:1e:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A3:5B:87:76:06:20:26:01:61:45:A9:FF:6E:1E:13:72:8D:AB:18
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1d:7b:30:85:58:d2:c4:6e:af:6d:63:66:8c:87:88:1e:32:
1c:e4:16:1b:7e:cd:94:42:43:9b:da:48:39:e5:52:57:ef:9e:
c8:e3:37:97:88:c1:ec:35:39:1a:ce:fe:aa:3e:ef:60:97:e9:
89:55:f6:ea:16:4c:3e:d8:0f:b4:4e:b6:a2:9d:c0:3b:92:51:
f6:13:31:fa:79:18:dc:17:d7:69:50:b9:3c:80:4c:1c:11:58:
b4:da:a3:b9:bb:b2:d1:a7:95:97:26:19:06:6a:d6:21:b4:84:
70:f1:be:c1:e8:d8:ab:6d:1b:db:0a:22:42:41:ee:a3:d2:1f:
f0:3f:5e:bc:66:7c:98:78:9a:0a:8d:bd:6d:b1:27:cb:94:3d:
82:df:00:97:a0:ad:9b:6a:93:04:50:02:ba:9f:93:3c:4b:fe:
19:e7:b0:54:84:ac:16:53:78:cc:e3:20:e6:9e:7f:24:7e:2d:
32:a1:ec:31:01:3d:43:96:27:4a:66:31:3e:2c:ac:ad:17:7f:
65:73:38:12:c3:96:df:58:2b:6b:f7:89:05:b6:15:a3:ec:7f:
0c:56:b7:1f:6c:c8:f1:bd:62:8c:ea:e8:56:ec:4b:27:4f:0e:
30:75:63:94:c4:e5:c1:c5:5a:0d:4d:6a:41:79:1f:3f:2d:f3:
b0:15:fe:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:36 2026 by rpki-client