Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File: qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier: sDIhj+Ouh8hLqVhlbntZ3qvUgoR6GEFWAUo9fojF3gM=
Subject key identifier: AD:1B:B5:30:8C:C3:1F:15:E0:2A:C5:29:04:B7:74:6D:28:28:56:6A
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer: /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial: 019D27DF72A3A425D3B63ACF6C5B48B1EAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: kla2VVj9ky8HxO5Y9CpkO5ym6TSjbd/Tj+PsNM7tIjY=)
2: s4z6KSPU66aHa9IpWr4h0fSsZEc.roa (hash: T4mhOBKBFlKgTip//Yw1HwCgxWQpfJTZCSk6zAZ8jes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:72:a3:a4:25:d3:b6:3a:cf:6c:5b:48:b1:ea:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=ad1bb5308cc31f15e02ac52904b7746d2828566a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:05:1f:b5:43:80:a0:54:31:c8:22:7e:43:
cb:fe:2e:84:51:04:cf:68:02:5b:2b:3b:49:85:6f:
3b:ce:25:9d:ba:c2:5e:1f:6b:4e:7c:86:97:1b:f1:
b6:90:a0:71:75:55:10:bb:80:69:e2:a6:24:78:f7:
af:cd:bb:73:91:96:00:c5:02:c6:bd:83:6d:87:a0:
b6:16:38:02:c8:5f:24:44:89:d4:fa:17:86:33:e3:
eb:ff:4a:90:74:b9:14:2e:e9:d2:33:05:f2:37:d7:
c5:5a:57:e6:77:f7:2a:9a:7e:bf:e7:1e:28:39:ac:
23:1c:b1:8f:d7:b9:f8:25:cf:8e:60:ed:22:b6:74:
3a:0f:07:61:d1:65:6f:49:1d:05:24:55:59:25:bf:
7d:6d:91:a0:a7:c5:19:a2:f7:3d:35:a5:be:90:67:
0c:ce:4d:20:ad:48:f8:14:5b:c6:ff:86:3d:36:36:
c3:93:48:63:2c:a3:5e:e3:aa:c7:20:57:37:3f:7c:
b2:d2:b8:2e:d5:a5:11:7b:d5:d7:6b:a2:88:f2:97:
5e:f7:3e:35:20:8c:da:71:97:40:bd:de:b9:7a:90:
7e:c8:36:fe:76:b6:43:da:ea:fa:35:59:52:5d:e9:
81:4d:ed:5d:90:ec:6e:97:18:b4:fc:ae:55:60:7f:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:B5:30:8C:C3:1F:15:E0:2A:C5:29:04:B7:74:6D:28:28:56:6A
X509v3 Authority Key Identifier:
keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:28:18:29:0f:db:c1:f0:c6:3c:61:20:5d:1c:e7:59:db:27:
2c:e3:4c:39:e6:b5:63:1e:c3:e3:21:1b:b2:89:96:50:72:05:
f5:77:0b:1e:fd:09:b5:40:e4:c7:35:45:7d:3c:4b:bf:96:0b:
a0:80:4b:dd:b1:c0:9e:c7:6a:f1:61:e1:04:64:9d:ca:bc:fb:
19:2d:d1:27:17:0b:fb:ea:f0:86:04:3a:e5:ab:63:aa:75:9d:
c7:e5:c0:d4:c5:44:1f:21:c0:cd:c6:60:6f:4a:ba:b9:63:a0:
a8:94:04:52:55:22:a5:1c:eb:fb:ef:57:52:ac:19:41:c7:65:
c6:0d:1f:e4:ed:a7:8c:de:09:ea:47:2d:6c:b7:87:27:7c:24:
ce:7a:de:49:24:07:d1:5c:c6:cb:1f:7b:e7:a4:a4:f2:49:0b:
e6:e5:54:f7:a1:6e:0d:85:a2:76:af:af:e1:46:60:f0:3c:af:
69:d1:3d:9f:03:9f:1e:37:20:83:33:b3:6f:8e:3e:68:5b:f0:
b4:17:43:6a:17:4b:fb:31:4a:32:f8:b9:d4:dc:d7:1f:ce:35:
53:cc:b1:ee:30:03:0e:97:4b:b1:3c:4d:2f:d8:8b:60:22:cb:
2e:b5:4d:e2:ca:29:00:33:5e:22:56:ec:52:7b:0a:0c:3d:bb:
2a:0a:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:03:41 2026 by rpki-client