Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier: jvw33VVFoy4aYT4idC8cyYyKjV+jMdHuoc12L8vcAQg=
Subject key identifier: 78:4B:53:D6:DB:B2:17:F1:08:F8:05:C5:FF:9C:8F:68:DC:4E:7A:19
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial: 019D31F57DC584E539330686B1DFAE493B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number: 1899
Signing time: Sat 28 Mar 2026 01:01:05 +0000
Manifest this update: Sat 28 Mar 2026 01:01:05 +0000
Manifest next update: Sun 29 Mar 2026 01:01:05 +0000
Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=)
2: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=)
3: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=)
4: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=)
5: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=)
6: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=)
7: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=)
8: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=)
9: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: bNPU68lOB20qFJS+rhCH6XFpIQYUzzxz+Nou4AlfQzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:7d:c5:84:e5:39:33:06:86:b1:df:ae:49:3b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Validity
Not Before: Mar 28 01:01:05 2026 GMT
Not After : Mar 29 01:01:05 2026 GMT
Subject: CN=784b53d6dbb217f108f805c5ff9c8f68dc4e7a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:ab:d1:e4:1c:79:36:e4:64:90:5d:f3:c8:
ad:22:cd:45:e8:80:ad:94:31:cc:d2:a8:40:e7:1b:
ce:68:d7:79:65:62:cc:b7:f9:15:05:8f:12:b0:34:
a4:49:89:40:0f:e4:c2:84:14:08:18:2c:4e:c3:ed:
8d:8c:94:5d:e5:e9:e0:ea:cf:45:63:aa:0f:f9:7d:
0d:e8:ee:c2:8e:ef:b8:fe:aa:b2:dd:ee:75:a4:8d:
58:21:41:78:7c:dd:f5:64:c4:17:c3:8d:0a:81:83:
c5:3e:53:4b:d8:34:37:5f:39:46:82:79:c9:60:79:
c2:96:58:37:81:cf:3a:ea:19:a9:bb:02:96:b9:d9:
ee:43:de:5c:5c:63:23:6f:3a:0a:e3:c2:81:d0:a2:
9a:f6:1d:64:a7:a8:42:60:e3:47:7c:e0:d9:63:13:
30:83:b2:20:07:60:4f:06:5c:18:5b:b0:39:c3:03:
c5:81:71:01:f9:f9:3a:a2:7c:1b:0c:4d:d1:ae:5d:
4a:4c:79:03:eb:18:cb:cf:bd:71:07:56:05:be:e7:
1f:af:2c:8b:48:77:9b:49:4a:b2:26:a1:2a:3f:dc:
56:69:68:93:44:72:ac:99:07:cd:b6:55:10:08:a8:
74:28:8a:57:de:6d:ba:4e:08:1a:fe:c9:ae:41:e0:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:53:D6:DB:B2:17:F1:08:F8:05:C5:FF:9C:8F:68:DC:4E:7A:19
X509v3 Authority Key Identifier:
keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:b5:80:45:4a:a7:a3:7f:e2:f7:a3:2e:2b:4d:43:96:61:
b8:a7:a7:e4:01:c4:40:e3:79:f7:bf:78:49:10:39:67:52:b5:
bf:eb:07:4b:2a:e4:5b:79:98:f7:5f:a5:6c:91:81:22:7f:1e:
80:29:aa:1f:e9:10:16:a3:77:42:fc:45:6d:50:d3:6f:d9:7a:
90:4e:26:e6:b8:13:a2:79:ee:79:87:2a:ae:38:6a:55:2b:36:
ed:59:a1:34:7c:44:39:0b:c1:ac:85:ab:63:91:9a:35:6a:37:
c3:e1:8d:9c:df:f9:e3:85:43:fc:d4:8f:57:0b:fe:dc:71:b0:
38:51:65:b8:d0:84:9d:60:b5:2f:90:c8:95:fd:30:fe:44:ad:
b3:f9:45:92:0f:39:61:4c:48:8c:1d:28:ff:01:e0:66:ce:74:
eb:11:4f:37:8f:5f:40:dd:06:63:14:7c:bb:9e:46:0b:a0:f0:
84:c5:40:f9:15:be:dc:43:4e:03:08:c1:16:fe:fa:96:16:fd:
df:fd:24:ab:95:5f:a3:c1:e1:84:c4:fc:98:d1:4c:80:f6:11:
54:b2:06:17:00:b3:5a:92:3b:72:01:62:44:cc:00:66:f5:e1:
52:ed:55:cb:d8:37:75:0e:74:3a:bb:eb:ed:a5:c8:b0:f0:80:
a2:2e:ab:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:32:02 2026 by rpki-client