Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: wUyRgU5GhhFifl5/VXrBP6FXt26icmIEJc1MxxK+x5g=
Subject key identifier: A5:0A:02:26:5F:C4:6F:AF:43:BD:40:A9:84:E9:05:27:FD:3F:42:54
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 019D27E065C601508B164CD45DA05C1C7545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: kW0WK2IFHNGeUqtoeqP2787mYnk.roa (hash: OoUVW67pQ7OzkcQcCKnAORtBV+T6+mdVc97qhb5jPng=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: 9NH/pGk1ez387KSFyxB8XQmj8pFCAnoosUOyzFtkOec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:65:c6:01:50:8b:16:4c:d4:5d:a0:5c:1c:75:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=a50a02265fc46faf43bd40a984e90527fd3f4254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:65:5f:9d:64:e7:18:e3:19:05:ff:f2:7a:7c:
24:3d:b7:d5:3c:3b:d5:d2:df:21:f8:af:6b:d5:37:
e0:2f:67:fb:f5:53:1a:12:57:3b:07:70:97:e6:b7:
25:b1:94:ed:90:42:0d:4b:51:35:be:ea:5f:20:31:
e2:3b:a3:a8:b5:b4:b6:88:f1:27:ce:07:7e:7d:4b:
81:7d:30:d3:37:2f:25:93:32:7f:78:d2:18:76:1d:
95:3e:c3:0b:0b:6c:c2:5b:04:d8:02:2b:97:01:98:
6e:7d:fb:31:f2:90:5f:d8:39:23:fc:d9:48:c5:d6:
a7:a6:e4:8e:21:99:f9:50:6e:eb:82:93:86:9b:fc:
9e:1d:25:59:e5:8e:5e:c7:6b:2e:a3:bb:0c:4e:5f:
e8:38:fd:b7:35:4e:42:32:9e:fb:e8:73:4a:21:87:
46:b8:6c:2a:22:ba:2c:c9:6f:96:c0:d7:11:55:ac:
53:bf:0e:66:e1:f6:0e:09:ec:52:3d:ce:01:2f:70:
d3:26:7f:07:30:73:62:65:ce:04:df:c4:e9:22:da:
a5:98:f1:c0:8d:6e:90:18:ed:7c:f4:b9:ee:a2:e7:
5a:55:b0:64:a5:3b:c3:a2:fd:7d:2f:9b:d8:9c:55:
d5:f3:0e:80:31:24:bd:82:f1:d6:fb:5a:c8:26:65:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:02:26:5F:C4:6F:AF:43:BD:40:A9:84:E9:05:27:FD:3F:42:54
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:45:41:11:90:da:73:9c:2a:00:0d:2d:32:af:fb:89:d3:59:
17:b7:44:d7:cf:f3:6d:e8:62:fc:f9:3d:12:e9:65:f9:58:71:
91:1b:b9:52:5a:81:64:86:68:4f:fe:09:e3:51:78:44:cf:07:
d8:b5:87:e2:a2:d1:e4:19:65:32:a0:b2:83:a6:8e:2a:ee:cb:
a7:e1:7e:dd:31:68:a1:5a:19:c3:80:a5:3b:14:13:db:4f:a5:
ac:95:e9:1a:a6:b4:ad:42:33:c2:54:8a:94:f6:a1:ab:95:4a:
ff:d5:5d:33:87:2b:0d:cd:45:41:d3:ea:c7:c0:20:24:ac:14:
95:19:77:e0:f7:a6:43:63:6a:8e:10:67:ce:6d:5c:db:4a:7b:
c7:cc:c5:01:2a:6b:69:b5:a4:11:b9:27:76:b9:46:b8:e8:8e:
79:4d:59:47:8d:2a:55:ba:95:38:58:a8:28:07:36:bd:87:f1:
55:38:ee:71:87:6e:16:1e:53:2c:bb:31:9e:86:1e:45:89:b6:
4a:96:91:ea:db:54:2d:b7:b7:4f:36:92:c4:9e:1c:60:e2:35:
ab:5b:86:af:23:50:a4:e1:9b:20:6f:07:b9:af:47:2e:43:d7:
8f:2c:86:78:06:ed:ce:d8:36:d1:61:36:92:fe:7d:6b:1d:5c:
9d:dd:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:43 2026 by rpki-client