Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: ukf6k3DoHZXtW6fbUgsj9p8piW9vb2MKYk2ygm9AJQM=
Subject key identifier: 4D:7B:1F:71:4D:EE:13:25:93:2C:5B:F3:E0:D6:2E:A8:70:77:1D:6B
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019D27A8FDC73EE51130509758F2C93DDA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 10A8
Signing time: Thu 26 Mar 2026 01:01:19 +0000
Manifest this update: Thu 26 Mar 2026 01:01:19 +0000
Manifest next update: Fri 27 Mar 2026 01:01:19 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: /JfqvbDvcPfl+y1vUJx2RusSI+EDTgu31Wj8MPhvSUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:fd:c7:3e:e5:11:30:50:97:58:f2:c9:3d:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Mar 26 01:01:19 2026 GMT
Not After : Mar 27 01:01:19 2026 GMT
Subject: CN=4d7b1f714dee1325932c5bf3e0d62ea870771d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:f4:e7:0f:8b:b4:be:81:b1:33:55:d9:65:
46:4e:4f:2a:b0:9a:7f:d2:65:9d:4f:3d:81:c2:ec:
86:12:cc:ff:85:38:ed:ff:c8:00:58:3b:dc:a3:67:
f4:a6:06:44:d2:19:bf:1a:b1:51:9d:9e:30:81:6d:
d5:87:f4:9b:c3:a0:37:68:3f:3c:91:3e:60:af:5a:
1d:ba:7a:af:29:fd:86:f9:91:5f:fe:0c:aa:94:86:
0f:4d:9d:cd:50:e9:3b:b5:e6:f4:76:7c:bd:03:3e:
8c:f1:f3:9f:64:8c:ff:c1:d3:c4:a6:67:bb:9f:76:
38:65:11:5f:38:a8:af:9f:5d:24:a2:96:0b:e2:ac:
c5:ae:b1:f8:f8:cd:1d:b9:57:13:57:0a:7e:e7:f2:
51:2a:3f:94:b1:6b:6f:06:2d:27:f3:fc:0f:d6:7b:
5b:ea:64:7e:9e:d3:40:a4:12:77:26:e0:68:c7:bf:
d2:88:46:11:b2:5a:94:d5:e8:93:23:9a:b3:5c:29:
81:cb:ad:54:a7:7c:20:74:4e:b6:b6:7b:93:bf:68:
ee:30:85:06:9d:6d:0d:69:a3:f2:e0:b8:f9:8e:fb:
b4:44:61:4c:94:c2:f6:e9:59:6a:e8:e9:45:c4:98:
61:98:d1:c6:3b:92:09:2b:4a:bb:33:74:1e:98:64:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7B:1F:71:4D:EE:13:25:93:2C:5B:F3:E0:D6:2E:A8:70:77:1D:6B
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a5:b6:42:2a:53:31:d3:8f:af:58:e0:d0:7f:63:8f:e4:42:
bc:0c:9b:15:20:02:3c:3d:69:d4:7d:7f:e5:f8:a7:e8:40:b5:
df:87:50:ed:25:d2:df:ec:18:7b:0a:2a:44:9f:d0:09:ee:37:
0a:ba:f0:33:ff:95:67:f7:8e:ef:51:91:6f:14:a5:58:cb:21:
7d:a5:c4:2c:44:02:c6:be:a0:b0:49:e5:28:de:36:ed:c4:8b:
41:cb:59:29:ee:d4:e3:fc:39:a5:76:ec:4d:12:81:ca:fc:54:
74:23:0d:f8:2d:13:08:5a:17:35:83:8d:5c:08:47:49:28:85:
34:00:3a:59:33:04:8d:f5:db:08:ea:76:21:c1:e0:e8:b0:1e:
95:14:75:f5:d7:42:42:40:50:0b:f4:d4:2c:d1:e7:92:ee:69:
46:6d:82:33:66:98:ef:a1:95:49:2b:5a:a2:22:15:48:2d:f5:
e7:40:02:ec:59:54:8c:b8:77:68:cc:9d:3c:12:83:62:62:3c:
f6:05:b9:ea:7f:e9:eb:27:40:1f:ca:00:01:be:f7:ee:2e:f0:
4e:ee:97:ef:b1:d5:11:b5:34:5c:b1:fa:1a:0b:64:08:c8:e6:
53:b9:4e:7b:6a:05:11:7e:8f:9e:a5:76:92:a9:a0:6d:0e:5b:
b6:f7:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:16:22 2026 by rpki-client