Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: Dj2G5jXEJEO3Cb65yOH+5Dcg2jGSfJiCzAV36yuP/9A=
Subject key identifier: 93:4A:B4:72:F2:1C:72:5B:48:4F:A1:F4:8B:8C:61:5C:FF:F7:83:35
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 019D265FE0EC7D6479A041AF49EC9233A4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0E62
Signing time: Wed 25 Mar 2026 19:01:50 +0000
Manifest this update: Wed 25 Mar 2026 19:01:50 +0000
Manifest next update: Thu 26 Mar 2026 19:01:50 +0000
Files and hashes: 1: lUzKNBJg8UfPcme69tlyDaYrw7I.roa (hash: qrZuoQH6V4bS9GSWmYNEQuhGhYESYIo8galvFyCIozE=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: OSviGhvLLbXPDYhwmk6DcoP8WAvBn2GMaARduM8zxiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e0:ec:7d:64:79:a0:41:af:49:ec:92:33:a4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Mar 25 19:01:50 2026 GMT
Not After : Mar 26 19:01:50 2026 GMT
Subject: CN=934ab472f21c725b484fa1f48b8c615cfff78335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:16:07:36:29:76:36:56:f7:99:03:51:2a:
54:8a:be:c8:20:28:68:e1:5f:e9:6b:c0:b9:3d:02:
6b:20:da:a9:81:cd:77:5f:0d:3a:e2:70:d0:82:5b:
3e:d5:d3:25:dd:c1:0e:1a:b4:2f:05:9d:34:fb:66:
82:c6:51:db:62:15:b6:42:ed:6a:fa:8c:e1:a7:5e:
06:75:a5:d0:b6:4f:99:7d:dc:1d:21:09:6a:ec:fe:
b7:06:d3:8f:d4:c1:39:e3:34:ae:70:8e:af:b7:fb:
f5:e4:37:a3:06:9f:12:9c:40:0a:71:da:83:b0:44:
93:92:b2:c3:a4:b8:8d:5b:6d:b8:2a:e3:71:eb:ed:
d7:36:ee:4c:0a:3b:f2:21:57:c7:37:85:35:99:e4:
1f:b4:1c:87:1e:71:9a:b5:0f:4c:d7:f0:2c:5b:95:
7a:77:4c:33:e9:ff:90:9a:44:60:58:78:65:26:7b:
3c:c4:10:55:1e:35:4b:08:b9:d2:6d:61:2c:35:01:
f9:62:1e:19:6a:05:3d:c5:40:62:ea:33:ff:09:7a:
a4:14:20:a6:84:24:1c:c8:98:44:10:70:03:38:e5:
5a:59:17:ab:a7:ba:1f:32:b2:48:0a:bc:ef:da:f8:
6b:de:1d:e6:d6:17:b2:ce:37:58:1b:6f:01:e9:c5:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:B4:72:F2:1C:72:5B:48:4F:A1:F4:8B:8C:61:5C:FF:F7:83:35
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c3:e4:8e:6a:7a:a0:87:5a:2c:5a:7d:82:1f:0b:97:57:28:
67:66:d5:69:07:99:43:fd:92:cd:89:59:05:d9:d5:e3:42:96:
51:8d:b6:c0:d7:a3:93:cd:df:0a:e6:fb:bf:f7:e4:43:5c:a4:
4c:27:31:a4:65:89:1e:82:11:18:af:e3:d9:2c:9b:97:01:84:
b9:56:72:23:ef:ec:5d:b6:2b:23:94:cf:dc:94:ec:b6:ec:13:
53:84:a2:06:39:e8:7b:0f:0e:f3:71:80:3e:9f:eb:66:c9:ea:
e0:e2:c3:d3:e0:c7:a5:0d:85:9e:f1:8c:d8:3d:c7:d3:c2:b1:
41:fd:7f:84:cd:a9:7d:37:54:5b:fc:4e:a5:60:4a:67:6e:8a:
03:5b:57:35:c9:cb:35:8f:eb:2d:25:55:ae:21:ad:04:c1:05:
d6:76:ca:99:ab:42:e2:29:24:73:4a:36:92:b5:6a:1c:e4:ab:
62:57:a5:da:f6:2b:70:e5:c2:82:2a:d7:07:4d:af:5d:e6:73:
1e:d7:f0:15:7c:49:14:5c:4c:9a:ba:ad:0b:7f:a8:82:13:7f:
9f:2a:02:b9:de:43:58:1c:07:50:c6:87:38:11:e1:2c:15:55:
41:28:3b:89:92:d8:f9:30:ea:56:c4:82:ae:71:7d:49:57:44:
81:f4:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:52 2026 by rpki-client