Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: 2OZcEXfhdrFq83Yb6QGOwHaSQF5yQLr3BY/zj5+Wh+E=
Subject key identifier: 76:A0:E8:E7:E6:CE:9B:D1:D7:9A:76:15:C9:96:8E:46:F4:E1:21:37
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 019D2A72B711DF00F9B4FBA40BE84AA207D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 14:00:54 +0000
Manifest this update: Thu 26 Mar 2026 14:00:54 +0000
Manifest next update: Fri 27 Mar 2026 14:00:54 +0000
Files and hashes: 1: 4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa (hash: 6AZogLPcjIIOPEMq9zRkZQNHkdZ8ldzB51VGATYSTPA=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: jOM7uB3tQzyIDx54KhsmF7MDVZ1aL2OpaMlLaRnnrEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b7:11:df:00:f9:b4:fb:a4:0b:e8:4a:a2:07:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Mar 26 14:00:54 2026 GMT
Not After : Mar 27 14:00:54 2026 GMT
Subject: CN=76a0e8e7e6ce9bd1d79a7615c9968e46f4e12137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:3d:5f:85:3d:2c:d2:44:f5:27:f0:12:c6:
f8:ab:04:88:a4:a4:3e:d5:9b:ff:e5:9e:b1:50:a8:
43:d1:bf:5c:70:7a:e1:39:c7:be:30:66:96:f0:90:
2c:c6:b2:8f:19:e2:7b:5d:a5:a6:fe:cf:a4:0e:5f:
a6:c0:0c:27:97:8b:05:67:30:71:90:65:25:6a:83:
0d:35:f6:5f:5f:99:1e:40:62:4e:81:d4:18:34:06:
7d:e5:88:33:3e:84:0a:b6:d8:87:a6:5d:de:c8:44:
51:5a:e4:9b:43:1b:34:4d:55:4e:fd:11:ad:74:9a:
1c:f7:74:6f:58:2b:19:8a:88:d3:9b:4f:bc:2e:01:
26:0b:52:c9:50:4e:c7:c2:ac:4a:a7:5f:82:91:da:
49:42:0b:91:d6:83:ce:7b:c7:4f:67:b7:2a:fc:dc:
0b:ee:42:5f:f7:22:1a:7d:dd:f2:86:cd:c5:66:5d:
45:4c:d5:90:07:08:27:5a:81:c6:7e:05:e8:61:9d:
4f:8f:53:58:74:6c:f4:45:b9:a9:9e:79:fc:bd:60:
b9:0f:d1:39:d3:27:18:af:e7:10:51:79:ea:fb:f9:
b2:5a:25:bf:4f:88:17:5d:14:07:9b:e6:32:2a:cb:
f8:a9:7d:d0:4b:c1:97:f2:71:d5:16:1c:56:39:72:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A0:E8:E7:E6:CE:9B:D1:D7:9A:76:15:C9:96:8E:46:F4:E1:21:37
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:64:07:f3:54:d9:45:a5:37:da:3c:6f:7f:89:c5:e2:8c:9c:
4c:2e:ba:43:e6:12:34:76:71:64:b8:66:fc:82:c1:a1:02:29:
ca:d7:91:4e:cb:3e:68:bd:58:64:e4:bb:92:03:27:c0:32:23:
36:33:c9:a3:a6:d0:6e:f3:1d:b5:c2:61:3f:bb:ef:bb:cf:97:
7a:8e:37:a1:ff:91:b0:7b:14:a2:95:82:6e:0d:80:d2:22:f1:
b6:05:ab:ad:4d:a8:51:d6:2f:95:68:d3:bf:44:0d:71:66:fa:
b8:6d:62:9b:9d:df:f5:4a:b8:34:43:92:6b:99:49:3c:6d:3d:
33:9a:34:93:bf:8f:aa:0e:27:ad:db:3d:e0:d0:e1:dc:e2:20:
75:00:c2:e9:e2:92:74:05:9a:6a:8a:af:c6:bd:70:9c:d2:59:
38:9a:09:ec:a4:d9:72:5f:28:ee:93:f0:ff:42:6c:9e:40:3b:
27:d3:ce:49:15:98:b9:9a:7c:c2:33:df:28:3e:3e:63:dc:24:
1e:56:e3:3d:65:2f:14:bf:ad:fa:5c:2b:a6:4e:ba:62:06:6f:
4f:54:b1:2b:8d:72:65:38:68:19:f5:4b:fd:cc:ee:fd:03:a7:
7d:31:67:a7:9d:96:ab:7d:22:d3:73:dc:e9:a6:d5:62:4d:75:
50:c8:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:34:33 2026 by rpki-client