Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: l/E1dudUQuh78lUMJv5qSubIMQD4jFgmnBBqfBq3QDY=
Subject key identifier: 4D:46:78:C1:1F:47:7A:A6:FB:82:CC:13:10:1D:C1:B4:D8:61:2B:25
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 019D273AE019E4462AA70479978E88E18941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: UrVvZVnA9sxhDnytnq_6CJMVGDY.roa (hash: Eo7tDFpvsB5+kGHIClxenKJ/I8v5IPSf0jD2mkBbqy8=)
2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: lU45YWyOR2RJQHzGAUI8SSFok+rNqgwmTTKC+XeOSGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e0:19:e4:46:2a:a7:04:79:97:8e:88:e1:89:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=4d4678c11f477aa6fb82cc13101dc1b4d8612b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:45:b6:1b:d5:b8:54:3e:ac:fb:6e:b3:c9:
2f:6b:52:09:51:fe:83:10:a8:7f:f2:39:46:ae:06:
cd:86:58:55:b7:7a:d7:ef:e3:aa:2d:9b:d2:00:2e:
a1:50:bc:15:70:53:14:a0:11:81:98:f7:cb:8a:2c:
4d:1a:e6:93:b0:d9:b6:2d:88:54:94:72:56:ff:60:
cc:d6:de:85:be:51:4a:78:5f:91:24:85:a9:49:f3:
13:ed:f8:76:c8:6a:09:a7:0a:49:fc:eb:ce:90:61:
a4:0e:a6:7c:f4:f5:c4:9c:8d:89:cd:fa:4f:7b:e5:
54:de:b5:3f:cc:3c:1e:2c:dd:7f:aa:e1:08:c6:2b:
da:b7:94:95:4d:e0:8d:fd:41:e2:df:87:92:8a:b3:
a3:26:bb:4c:f4:8e:17:38:b3:98:da:26:bf:fa:15:
81:01:1d:5c:da:d5:f7:45:9c:15:e2:2a:48:43:5f:
4c:49:cd:ad:f8:26:f5:ce:6d:1a:b8:4d:97:1e:48:
02:21:90:41:94:11:81:d1:fa:6e:fd:2d:78:9c:33:
14:bb:66:0e:ab:62:51:7e:bc:34:6d:5a:ce:bc:b8:
f2:1e:34:b8:f3:ca:70:a2:b3:1f:70:f4:4b:a0:57:
52:61:bc:1a:da:3a:d5:e9:a4:62:41:5b:eb:7f:b3:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:46:78:C1:1F:47:7A:A6:FB:82:CC:13:10:1D:C1:B4:D8:61:2B:25
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:dd:99:37:ae:82:b6:65:89:43:f0:76:d9:a8:01:bf:ee:dd:
b6:77:88:c8:84:74:83:15:9b:47:a0:cc:71:6c:1f:1a:37:c4:
e6:dc:3b:0a:b6:0f:7c:ce:a3:1f:7f:d5:5d:84:77:44:1b:11:
95:67:0b:61:94:2f:2e:45:e9:4e:f7:34:1f:ba:c8:96:41:84:
b6:0e:88:1c:8f:ea:58:88:ed:40:e5:dd:d0:1e:e9:6b:8e:0b:
e1:e4:0d:05:b4:1b:77:ec:c1:34:69:6a:68:7b:b9:ce:b6:e7:
23:79:fa:5c:fa:b0:cb:64:aa:da:76:8c:7c:91:a6:2e:8c:bd:
c0:02:46:9d:3c:76:e5:01:73:6f:7c:c8:87:5a:ec:61:69:3c:
02:58:bd:2d:80:12:bc:5f:b3:40:1c:2a:4b:5f:08:be:3b:0c:
ac:5a:8a:9c:f6:f6:20:35:99:e8:76:6a:1e:0d:e1:e5:e8:11:
88:3c:dd:1c:3b:07:f5:ee:73:0e:d2:a5:75:de:78:d6:5d:bb:
68:35:a1:92:24:78:e5:a8:72:f1:47:99:f3:fb:74:cd:a7:b8:
8e:60:76:10:2a:ee:dd:0d:f9:de:c9:77:7c:af:6d:ce:c4:1d:
7b:cd:0a:df:c8:7a:ba:2e:e6:b8:39:00:56:fd:f0:51:2a:cd:
51:9b:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:07 2026 by rpki-client