Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: +6R/hQduDbfCkckE2x425Eo5b8f1IZ0Gb/xnVsRoDYc=
Subject key identifier: 91:CE:4F:C4:27:B0:5D:3E:F7:D5:E5:A0:7F:32:B5:0D:ED:3E:2D:BB
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 019D29611C6888627EC808B78B737AEB45FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 121B
Signing time: Thu 26 Mar 2026 09:02:03 +0000
Manifest this update: Thu 26 Mar 2026 09:02:03 +0000
Manifest next update: Fri 27 Mar 2026 09:02:03 +0000
Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=)
2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=)
3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: ef0S3OrbWDv2wySW4YxqTEQYjouYLc82DayLz+YXOJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:1c:68:88:62:7e:c8:08:b7:8b:73:7a:eb:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Mar 26 09:02:03 2026 GMT
Not After : Mar 27 09:02:03 2026 GMT
Subject: CN=91ce4fc427b05d3ef7d5e5a07f32b50ded3e2dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:e4:0d:5b:5e:4a:93:7e:97:34:06:b5:2b:
c0:0b:43:14:39:c9:ee:56:1b:74:3c:50:0b:b8:2d:
36:1e:b0:d5:7c:21:bd:6b:df:e6:8c:ec:7d:4e:de:
12:d1:fb:67:d2:e5:f1:6d:d1:73:9b:4b:e6:2c:7b:
d9:00:f3:bf:35:76:2b:64:68:c2:45:69:3b:47:d9:
86:2b:8e:f3:20:d5:81:2e:60:82:2a:d1:0c:95:43:
f2:fb:2e:e3:eb:2b:d1:62:1a:70:38:8f:64:4e:b1:
cc:ca:96:92:58:31:94:a6:52:5e:34:08:d0:bd:4a:
14:df:d8:8f:62:bd:ef:19:86:80:20:61:19:0f:e0:
f4:8a:b4:c2:a6:bb:2c:41:37:4d:95:86:a4:a1:22:
18:2e:e4:87:6f:d5:92:ec:6d:16:5a:aa:42:bb:63:
11:88:d5:e7:0e:78:73:5c:18:97:06:90:b8:d9:ca:
49:00:55:de:8d:d2:48:1b:1f:fd:52:ba:17:b0:8c:
fc:7d:e4:e9:76:14:5d:63:82:0b:90:06:1c:f3:94:
95:37:b7:2f:ec:28:0b:78:dc:49:df:b3:22:02:8a:
5c:ff:6b:c9:38:92:6d:1c:db:15:19:e0:d0:0e:9a:
5b:4d:ae:ca:f3:59:bc:f4:ef:36:33:96:b8:23:ee:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:4F:C4:27:B0:5D:3E:F7:D5:E5:A0:7F:32:B5:0D:ED:3E:2D:BB
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7e:b1:81:1a:2c:d5:b5:e2:d3:28:af:1b:78:9f:b6:77:94:
0d:f2:74:0a:5e:7c:50:fc:16:26:b9:6f:3f:a0:4c:f0:8a:10:
d2:5f:42:6d:4b:47:49:a3:90:97:fc:ac:1c:ea:f3:c8:1b:3e:
e3:8d:7b:eb:b3:99:03:c2:9f:a5:5f:d1:d5:56:93:6d:c4:69:
1c:9b:90:47:bc:14:ad:25:e5:39:f6:09:5f:be:44:42:e8:ef:
9c:b8:16:9b:fc:61:a5:85:a0:3a:dd:0e:ca:c3:43:58:5a:17:
82:fd:5a:5d:27:43:54:41:29:c1:a4:34:25:76:51:52:28:21:
69:76:60:d3:47:c5:c3:fc:14:53:4d:a2:42:28:b4:a8:3a:6e:
b6:35:e8:7d:ea:4a:ad:db:8b:3c:fe:df:5b:f1:11:77:e5:92:
e2:52:c1:16:03:79:f2:9a:38:82:75:a8:92:1e:89:47:ad:7c:
2a:b9:63:98:48:d7:75:9e:81:f8:3b:c1:3a:93:ed:0b:73:7b:
03:4a:2c:ea:c5:9b:ba:59:68:1f:a2:44:8f:0e:f3:f5:18:cb:
73:a6:4d:d9:fa:d7:6e:e0:51:0a:a2:ae:22:1f:57:08:76:c7:
1c:39:21:88:8e:b5:e9:60:8b:96:ec:b1:86:8a:5e:86:22:50:
f3:2b:37:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:59:15 2026 by rpki-client