Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: e6B8jNY2LOCW8WQ7KVYWL2G8eX7M7vbuoVH43i6RYDA=
Subject key identifier: 08:3D:E9:10:FE:11:BF:39:B7:76:88:D0:51:BF:7B:7B:91:FE:DE:24
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019D2A3C18834DA21C5EAD453DC67C8B7CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 181D
Signing time: Thu 26 Mar 2026 13:01:14 +0000
Manifest this update: Thu 26 Mar 2026 13:01:14 +0000
Manifest next update: Fri 27 Mar 2026 13:01:14 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: nmQNULXt+7BEi9x3+EVX6CMCyZBLK1ndEr7kjJZ6r2o=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:18:83:4d:a2:1c:5e:ad:45:3d:c6:7c:8b:7c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Mar 26 13:01:14 2026 GMT
Not After : Mar 27 13:01:14 2026 GMT
Subject: CN=083de910fe11bf39b77688d051bf7b7b91fede24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:60:47:1d:37:3f:e4:62:ed:68:28:e9:84:
9e:5f:b4:e6:ea:3a:27:5f:bc:75:db:c3:4e:e9:74:
e4:fb:70:d4:ab:fe:bc:d6:12:61:19:b2:9b:bc:f6:
ba:d4:86:18:1b:50:0d:a3:10:9f:bc:e1:46:0f:93:
9c:8c:75:60:22:9c:d4:ed:8f:5b:27:9e:c1:28:8c:
3d:73:9c:5f:3b:9f:53:a4:c9:68:be:ac:e5:7c:d2:
4b:33:32:20:29:a7:43:b1:62:3c:1e:a9:06:4a:e0:
67:0a:82:ff:09:6c:be:cf:f8:07:d8:5b:bf:9e:e1:
0c:25:42:51:64:94:3d:9d:fb:3a:f1:70:aa:01:85:
5b:b4:b7:82:82:85:c2:a5:18:2a:86:5b:a4:77:2b:
19:ce:ca:35:dc:41:a0:25:a5:06:00:28:e8:92:76:
21:24:9d:6a:c3:d5:8d:6e:ba:d5:29:31:c9:30:68:
bf:f7:37:33:ce:da:d7:c9:75:ff:84:a8:a5:64:00:
08:9f:57:f2:7f:cf:c0:c0:a0:b7:eb:9f:ea:45:61:
52:be:06:67:18:3e:d6:c8:b7:22:3f:dc:dd:a2:9a:
cc:20:a0:6f:f2:24:e2:01:34:a0:3a:84:f9:4e:1a:
9c:bf:5e:f7:f2:95:f0:a2:96:9b:b5:55:19:f7:69:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3D:E9:10:FE:11:BF:39:B7:76:88:D0:51:BF:7B:7B:91:FE:DE:24
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c1:63:00:e5:79:49:f0:c0:2c:61:3e:1c:9b:7a:f6:ec:3f:
6e:ed:1a:4d:9f:44:f7:67:fb:7f:9a:f5:2d:69:1c:70:94:40:
a9:1d:54:eb:b0:f1:ac:58:4f:3b:77:39:53:d3:5a:5c:19:58:
47:2f:5e:94:b9:8c:7a:69:09:18:77:9d:08:5a:88:0a:e3:85:
b1:1d:2d:31:63:92:73:48:7f:69:17:41:29:f8:aa:7c:8c:33:
16:cc:f7:43:f2:a2:0a:a6:4e:ad:0e:6f:f4:6d:d7:6d:64:48:
69:6c:69:95:ba:7c:cd:df:ac:f5:18:8a:f5:c0:0a:a4:d2:b1:
06:7c:4a:21:54:72:42:7f:f1:8f:6b:c4:fd:bf:39:88:14:38:
52:51:a7:c1:41:3e:ca:b3:1b:9c:43:16:aa:42:1c:08:01:02:
c0:b3:f7:12:cd:b1:20:8d:87:53:83:43:81:15:e4:2b:db:03:
32:5d:e6:77:6b:59:ba:74:3d:ea:4e:8f:80:07:b1:16:64:1c:
86:d7:8f:d7:e0:33:1d:6f:11:af:83:66:a4:1c:8a:6c:cd:17:
9d:80:86:4f:7c:4c:b4:c5:c4:0f:f6:f8:ce:b3:61:2f:24:b2:
b6:00:eb:e5:7e:f8:1e:6f:e9:7b:63:bb:8f:99:75:cd:8b:44:
97:0d:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:42 2026 by rpki-client