Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier: vBDJDbV3dnihM5dLyPOBf+AgDPVuJriGG1vcZeCZkMM=
Subject key identifier: CD:32:69:96:A1:A2:A1:61:F7:C0:2F:A7:2E:DD:FF:C3:42:84:44:0A
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial: 019D265F7A36F1F04A950556F93A4326068B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number: 1893
Signing time: Wed 25 Mar 2026 19:01:24 +0000
Manifest this update: Wed 25 Mar 2026 19:01:24 +0000
Manifest next update: Thu 26 Mar 2026 19:01:24 +0000
Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=)
2: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=)
3: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=)
4: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=)
5: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=)
6: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=)
7: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=)
8: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=)
9: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: VvhnsLwbsfWeLn19tOMWaO1xSnlbTbEyCvK1DW99n0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7a:36:f1:f0:4a:95:05:56:f9:3a:43:26:06:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Validity
Not Before: Mar 25 19:01:24 2026 GMT
Not After : Mar 26 19:01:24 2026 GMT
Subject: CN=cd326996a1a2a161f7c02fa72eddffc34284440a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:98:c4:36:26:81:ea:64:69:18:f7:4f:10:
94:2c:06:cf:e3:4b:a6:52:e0:64:70:5a:9b:c2:88:
d1:e9:8c:d7:8a:0d:60:49:03:b6:a0:19:f8:4e:cf:
d0:84:0a:04:0a:f1:53:3e:cd:7a:d8:02:43:b7:e9:
be:5c:48:92:91:e1:43:cd:93:a7:f6:f1:bb:7e:9e:
7f:ce:8b:42:a3:98:e5:ff:d4:0e:b8:53:bc:9d:47:
ea:b9:61:94:f3:4c:31:3b:89:4a:8a:13:5b:d6:7b:
c4:8d:e8:8a:c7:81:bd:d0:c4:41:10:82:a8:f2:b9:
40:c2:1e:9f:64:f4:12:02:7d:17:da:17:e5:1b:76:
54:f1:36:93:0a:f2:71:c1:46:ce:81:a3:78:06:95:
90:69:2b:04:d9:21:eb:59:8c:49:fe:d0:b7:08:fb:
9f:9d:1c:9b:77:f8:e0:02:a6:83:33:0b:64:21:96:
30:de:bc:b0:12:8e:88:5d:f4:0a:28:7c:bd:77:bb:
4c:9c:15:d6:a8:7b:4a:a5:7d:f3:94:f9:a4:62:03:
dd:24:9d:56:e1:66:17:0d:b6:b4:de:69:d2:a9:8f:
5b:af:0f:4d:60:63:59:4c:de:64:f5:c5:db:15:aa:
8c:ed:c5:7d:d5:96:2b:34:59:e9:00:49:03:a0:fa:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:69:96:A1:A2:A1:61:F7:C0:2F:A7:2E:DD:FF:C3:42:84:44:0A
X509v3 Authority Key Identifier:
keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:95:1c:3e:e3:c5:35:0f:69:31:81:65:29:62:f1:88:b7:14:
b5:8d:ce:db:f0:11:ab:2d:a2:25:a9:ca:be:8f:5c:ff:ea:a7:
9b:af:1f:56:0e:30:b9:b3:d9:f1:3c:93:a7:92:0a:1a:3c:1d:
73:36:cf:b6:72:18:1e:99:ff:6d:fa:6e:aa:8e:04:3c:e1:99:
2c:8e:39:38:ef:a0:87:6c:df:1d:68:c7:6a:96:d5:37:70:0e:
33:62:28:0e:f1:dd:3e:02:ef:fc:51:eb:c1:af:c9:4c:a1:2d:
51:a3:6d:af:fc:66:c6:04:b9:72:33:22:a0:06:3c:d4:16:2b:
50:e5:15:fa:81:cc:af:f8:c1:50:1c:9f:47:ba:73:23:6a:a8:
b6:a3:a2:00:2a:3e:33:68:42:aa:e5:97:63:10:e4:ef:77:c6:
ae:d0:b7:22:97:9d:3e:77:d6:cf:35:b9:a5:ce:cb:ea:e2:d3:
f6:c3:16:ee:75:60:e0:3f:79:51:01:55:f6:35:16:d3:3d:be:
93:ad:ce:05:b0:36:88:72:5e:a0:d3:08:fd:72:d0:6c:3b:43:
b4:f6:ac:c9:74:38:22:ae:47:e6:37:01:01:c5:d0:97:b4:06:
4f:e0:b5:34:94:b2:81:6f:df:0c:77:c1:02:4f:a9:82:a9:98:
cc:a9:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:35 2026 by rpki-client