Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json)
Hash identifier: 97Ax90tyAbczFdGYX3MrTsOV6CwmvrGVtsufoBWqdzA=
Subject key identifier: 93:3E:95:5D:06:72:0A:80:FD:69:B4:E1:B0:24:73:4B:4F:FE:CF:23
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial: 019D28BB63533854A820DFDD84731B3CC751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
Manifest number: 0393
Signing time: Thu 26 Mar 2026 06:01:02 +0000
Manifest this update: Thu 26 Mar 2026 06:01:02 +0000
Manifest next update: Fri 27 Mar 2026 06:01:02 +0000
Files and hashes: 1: 7W24_Rf5Ko2iEUxEGRog5wJv6lg.roa (hash: dJfyXH3Ih6KNLcTIHiS1qro2e4tZl7n+nF8SgkkUKW8=)
2: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: 5TA43+zf1cjSljSqPiVIF+cShImDr8kK3OwnQ6S63Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:63:53:38:54:a8:20:df:dd:84:73:1b:3c:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Validity
Not Before: Mar 26 06:01:02 2026 GMT
Not After : Mar 27 06:01:02 2026 GMT
Subject: CN=933e955d06720a80fd69b4e1b024734b4ffecf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:a7:7a:00:1d:bc:5d:52:8b:99:07:8a:f5:
78:e1:b6:83:9b:79:40:8c:43:38:5b:39:54:f5:0e:
b7:e5:5a:a4:04:85:d6:50:97:3d:29:08:2c:48:be:
d8:dc:ef:df:e2:83:29:48:57:b7:ff:51:24:4f:d0:
d7:71:1f:dc:b8:61:3e:7c:41:5f:98:3d:55:1e:aa:
be:44:0e:25:59:18:94:f1:5b:cc:46:78:7c:3c:ed:
f1:5b:94:7d:6d:b7:e8:be:d0:1c:32:f8:f1:b9:63:
06:63:3b:0c:75:0b:b2:bb:74:c8:9c:3a:e6:32:6d:
cf:fb:ad:86:8e:2d:11:17:57:12:91:c8:1e:3d:99:
41:69:da:75:fb:3d:c8:9a:40:89:77:f1:87:64:a4:
a4:b6:87:4c:82:e5:78:fb:ea:3e:07:d1:df:b3:3e:
91:28:ad:b1:21:3f:85:50:c5:20:22:f2:fb:ed:18:
27:1c:3c:2f:76:39:07:5a:06:14:bd:e5:f3:ab:c8:
55:9b:3b:8b:ff:14:bc:aa:9b:6a:09:d2:10:1e:7a:
2d:08:c0:6b:ec:e5:ef:8a:e7:95:e4:f9:f2:7a:34:
cd:58:56:b5:a4:61:03:5d:19:b4:2d:8b:2e:62:96:
93:b3:e9:f9:ff:3b:b5:5a:f0:c5:39:2b:4c:b8:3a:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3E:95:5D:06:72:0A:80:FD:69:B4:E1:B0:24:73:4B:4F:FE:CF:23
X509v3 Authority Key Identifier:
keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:72:f3:f8:ef:07:3d:c2:0f:72:9c:66:4d:5d:a3:b8:c8:26:
fd:d8:90:d9:30:29:1a:af:5f:ca:ab:a7:1f:26:1c:2b:7c:16:
78:68:e9:e6:d0:cb:5d:5b:32:91:12:53:57:4c:b9:8e:83:03:
86:a7:ee:58:92:09:22:12:f5:69:72:6d:7d:15:8f:42:4d:7a:
53:4c:2d:83:34:19:2f:13:21:78:72:b6:c2:9f:d8:13:e8:d6:
a4:76:98:f4:1e:50:e0:dd:03:fc:34:37:b4:e7:3c:d0:43:a3:
2c:88:07:1e:81:eb:40:3e:e8:ba:52:3b:1a:e8:ee:1e:3b:e8:
4b:23:49:91:19:0b:e9:33:84:6f:0b:ba:08:d2:b8:06:7d:43:
85:10:2e:0d:d6:89:b7:07:57:1c:d8:70:f4:3b:df:9e:a3:9f:
56:c8:7c:ae:4e:f7:1e:1d:0c:ce:05:18:15:09:1b:b1:98:81:
79:0d:83:4b:39:f0:e0:d7:87:4d:92:5c:7b:4b:4d:9f:08:14:
33:ca:c7:57:ff:88:d4:eb:2f:90:7a:e9:9c:f5:57:bf:70:ce:
2f:e9:fd:f6:cc:9d:34:e9:3f:9e:a0:75:9d:7b:1d:f8:07:c2:
e5:c6:29:f2:93:08:37:82:f5:ba:5a:45:f3:da:a0:da:61:a0:
cf:e7:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:59 2026 by rpki-client