Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: ZFLHnIOfgG0TqIhQaPTKX4i0MlnzhBzuVCe0JrMRCfE=
Subject key identifier: 82:C8:26:18:55:53:48:1D:33:3C:E8:61:3F:13:86:8E:2A:D1:73:AC
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019CAA5847F8F33ADDB70954B3F2558F6374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0C77
Signing time: Sun 01 Mar 2026 17:00:38 +0000
Manifest this update: Sun 01 Mar 2026 17:00:38 +0000
Manifest next update: Mon 02 Mar 2026 17:00:38 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: 54rOg/R+r5VCYdePssG2wUzK3ZgKYCTSFWkfeRx1wZA=)
3: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (hash: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:47:f8:f3:3a:dd:b7:09:54:b3:f2:55:8f:63:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Mar 1 17:00:38 2026 GMT
Not After : Mar 2 17:00:38 2026 GMT
Subject: CN=82c826185553481d333ce8613f13868e2ad173ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:de:55:83:7d:32:19:dc:ba:9c:b2:b7:fa:92:
85:1b:2d:e0:eb:37:90:ec:67:0e:a6:d8:a0:7b:37:
6e:b1:6a:f4:83:94:08:31:7c:32:6c:bc:8f:11:62:
28:5c:54:41:4c:06:fe:cd:95:aa:92:1c:cb:31:ce:
82:70:03:88:04:65:06:53:72:62:01:b1:bf:ce:2c:
d2:ef:23:a8:2d:a0:85:84:3b:ec:02:86:8b:9c:69:
fb:02:bf:6d:9d:02:25:e3:b9:e8:c5:1c:ca:14:f0:
12:c2:fb:ed:ea:59:c8:db:42:83:f8:bb:4e:b2:c3:
58:13:72:3f:87:42:d6:6f:d4:b5:08:c0:c0:20:76:
91:78:c2:2a:83:64:89:63:33:bf:af:09:4a:7d:97:
e3:f1:40:98:93:e6:3f:9f:e0:31:ff:9a:87:27:89:
80:53:a6:ae:86:79:f4:de:22:1c:e0:1b:0a:4f:fc:
2a:63:c1:92:c2:10:fe:60:52:05:b4:14:74:4c:5a:
c9:c1:aa:82:f7:2f:90:64:09:a1:0b:a1:44:07:63:
40:55:c8:19:e0:ff:2e:13:4e:6c:08:9c:a6:aa:35:
c8:58:ec:2f:7d:ef:18:1f:75:11:3b:ff:63:8b:bb:
7b:d1:91:f8:99:34:d7:43:43:81:95:a5:48:a9:90:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C8:26:18:55:53:48:1D:33:3C:E8:61:3F:13:86:8E:2A:D1:73:AC
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:84:7f:6f:bd:53:66:1d:7b:21:52:85:56:a0:69:38:2b:cf:
f7:ee:88:64:b3:27:ce:49:9e:24:aa:3a:0d:2b:dc:6d:a6:9a:
88:54:fc:2d:78:89:a9:3c:af:5b:f8:eb:37:76:25:04:61:ce:
05:66:d5:ca:af:10:53:49:78:ad:e2:4e:e8:57:4c:38:4d:89:
be:15:eb:a5:01:06:88:74:eb:d7:ad:31:cb:30:9c:59:21:d7:
ce:64:ee:89:03:62:eb:4e:1a:aa:76:14:b4:89:a2:5c:a2:32:
05:57:d2:22:bd:4d:5e:90:ed:eb:de:ea:ee:ef:0e:2e:07:ba:
1e:7e:c2:11:bf:13:f4:25:17:9a:71:eb:3f:01:2f:7b:a4:12:
56:ae:29:b9:f4:9b:90:5d:67:4a:e4:14:9b:b3:4b:f3:a9:10:
ef:c9:9d:d9:59:93:e9:f0:28:5e:43:0e:90:bb:61:a9:d6:3b:
b0:43:7a:d6:a9:99:fb:40:c2:a5:97:1e:6a:33:78:69:5c:38:
9f:bc:c6:26:c3:35:66:f2:4a:53:93:50:97:11:f4:ef:ef:28:
a3:8e:3a:7f:71:58:9a:5a:85:38:13:d8:1b:c7:a4:a9:9b:a0:
8f:e4:76:6b:1d:a2:7f:37:21:59:c3:f8:87:b5:41:c1:7d:29:
f6:95:61:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:36 2026 by rpki-client