Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.mft
File: qcvBJu1Nk1wRzrnc99lyjMTugQA.mft (raw, json)
Hash identifier: WMkSU3yYX6bxmdX+frQmdEkk283tjGVn7qseM9IdS+s=
Subject key identifier: 14:71:3F:BD:F9:AB:E3:48:E8:EA:E1:05:99:56:8B:3C:5B:EA:A6:30
Authority key identifier: A9:CB:C1:26:ED:4D:93:5C:11:CE:B9:DC:F7:D9:72:8C:C4:EE:81:00
Certificate issuer: /CN=a9cbc126ed4d935c11ceb9dcf7d9728cc4ee8100
Certificate serial: 019D25F1B7A937513B2904EE8C214C7DD5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcvBJu1Nk1wRzrnc99lyjMTugQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.mft
Manifest number: 3B
Signing time: Wed 25 Mar 2026 17:01:31 +0000
Manifest this update: Wed 25 Mar 2026 17:01:31 +0000
Manifest next update: Thu 26 Mar 2026 17:01:31 +0000
Files and hashes: 1: 2wTY5Gm7CSw3ysryU-lsYX_7Wqo.roa (hash: tYaP07kcvDwffj5/xbkCu9i1XMAaCPLrJcNb5rto4xs=)
2: 8KJeCBfDeBIyavZ1WctKlr420vc.roa (hash: LDf/JZH0zLtMx88N6zCd8v+gRLqRrAT9RTGvIZY5tC4=)
3: qcvBJu1Nk1wRzrnc99lyjMTugQA.crl (hash: AcAei4S54qcZQ4schiny56lTKd1BHPr4mQ/vMJR4CPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcvBJu1Nk1wRzrnc99lyjMTugQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b7:a9:37:51:3b:29:04:ee:8c:21:4c:7d:d5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cbc126ed4d935c11ceb9dcf7d9728cc4ee8100
Validity
Not Before: Mar 25 17:01:31 2026 GMT
Not After : Mar 26 17:01:31 2026 GMT
Subject: CN=14713fbdf9abe348e8eae10599568b3c5beaa630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8a:77:e8:c0:38:ae:e5:6d:12:8d:4a:37:62:
b0:a6:d4:2f:ba:83:8e:31:36:8c:ac:92:42:dd:d0:
4d:66:4f:ec:fe:23:e4:4a:32:0f:09:fe:7b:80:50:
71:76:1d:79:32:c6:68:a1:55:21:f3:10:8c:5d:17:
86:74:2c:a9:f6:0a:c0:8d:a7:07:5c:5e:4e:81:9e:
4b:23:9c:49:2a:42:7c:4a:7d:97:fc:0d:b8:99:0e:
df:42:5f:60:a8:cb:c3:b5:ad:21:82:fa:7b:1e:03:
e6:cb:8e:9a:07:0f:22:1e:f6:38:da:5e:2d:e9:d6:
af:40:0a:6a:b0:a7:1e:1b:c5:c1:73:eb:f7:83:76:
2e:8c:00:2a:9f:4b:69:18:d8:fb:38:f4:1c:95:f0:
a9:c6:fa:95:89:9c:70:9e:03:81:ca:16:bb:e7:0a:
bc:ce:e9:8d:25:50:19:a0:48:44:54:fe:5e:83:c8:
8d:4c:90:a7:40:cd:cb:30:a2:d0:25:65:29:1f:1c:
c1:0a:65:67:9b:92:23:9a:db:c3:19:d0:87:f3:cb:
60:30:c7:93:2c:96:e7:5d:de:32:0a:91:1b:69:f1:
58:0f:37:43:49:58:ef:2a:65:b3:9f:c8:12:f7:e9:
8a:e9:18:57:56:57:ba:33:e1:52:6c:86:9f:a4:dd:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:71:3F:BD:F9:AB:E3:48:E8:EA:E1:05:99:56:8B:3C:5B:EA:A6:30
X509v3 Authority Key Identifier:
keyid:A9:CB:C1:26:ED:4D:93:5C:11:CE:B9:DC:F7:D9:72:8C:C4:EE:81:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcvBJu1Nk1wRzrnc99lyjMTugQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a0:d8:89:0e:9a:dd:7b:f5:e9:a3:e3:2f:11:ff:4b:d2:46:
4b:2e:38:93:65:d3:b3:1a:75:57:59:a7:c9:6c:8d:c8:4a:5f:
8b:51:d7:07:f8:16:4f:ee:70:c5:4e:47:74:1f:92:f6:02:b7:
19:80:38:92:b9:6a:49:da:9e:20:d1:7c:5e:69:09:94:28:ad:
17:9d:dd:22:0e:2c:34:25:f5:0b:b9:f7:fe:75:48:a7:a4:79:
24:6f:0a:75:ff:6b:09:80:bd:7d:2c:09:48:09:91:62:d3:dc:
47:f2:d0:0a:76:9a:5f:da:f0:83:b1:ac:3e:a8:0c:cd:95:ea:
de:c9:66:fa:0c:61:ce:14:ac:59:09:6a:e7:f0:94:60:e2:54:
41:b7:08:ae:20:21:a9:af:e9:ae:7a:cf:99:11:9c:b0:7c:a5:
c4:f7:65:67:7c:3c:ed:f0:aa:57:37:a2:70:5e:1c:26:3f:c3:
96:6e:6c:5a:cf:9d:58:ed:e5:4f:ed:dc:f6:5e:9e:eb:75:f1:
96:7d:41:0d:92:e0:47:08:77:07:0b:9b:ef:b3:8c:9d:b8:80:
c0:68:aa:ea:ff:85:67:6f:ee:0d:c8:15:d6:d6:dc:ab:0c:c7:
ee:4f:6c:11:f0:58:35:fd:db:a9:b8:a5:12:2c:b5:31:41:ee:
5f:0f:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:25 2026 by rpki-client