Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: rD2vBvesixdSs0voMKamXjLx7TUfcyTPMZwQ25wZCkg=
Subject key identifier: F4:DC:42:87:26:E0:7A:1B:F8:A0:66:32:60:CB:25:0E:16:16:3E:EB
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 019D27E05A409018F3B1C758CA2A261D766D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0DFC
Signing time: Thu 26 Mar 2026 02:01:47 +0000
Manifest this update: Thu 26 Mar 2026 02:01:47 +0000
Manifest next update: Fri 27 Mar 2026 02:01:47 +0000
Files and hashes: 1: qBBRB8HmJZEtxi-niy9T8cyyncw.roa (hash: cgLv9kyCGCoNq0/R+t8v8q6At3djIYgfHJi87YrPrCE=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: 27E/3nDBJglaYYR8D755MIj8FnlYZ4flUiD+ShLJ6h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:5a:40:90:18:f3:b1:c7:58:ca:2a:26:1d:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Mar 26 02:01:47 2026 GMT
Not After : Mar 27 02:01:47 2026 GMT
Subject: CN=f4dc428726e07a1bf8a0663260cb250e16163eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:bd:a3:5a:fd:63:34:5e:2d:ad:d9:82:5c:
03:c6:5e:ef:2d:d3:cb:09:a9:75:69:a2:68:99:ee:
a7:4b:f6:71:07:cf:7e:ad:a3:ba:c9:b3:4f:ff:4a:
4a:51:54:c6:b8:2e:77:b9:4b:b0:45:fc:b3:67:f6:
78:fd:21:3d:f4:39:26:60:2b:5f:c4:76:94:54:c0:
2c:68:8e:c7:67:e0:ab:42:34:68:d3:11:89:00:9c:
79:a4:d2:a2:96:1f:bd:e1:5d:7c:c4:9d:57:a6:71:
98:98:41:3d:de:35:8c:cf:13:37:ed:c7:4c:14:f1:
ed:37:49:02:16:2e:e6:71:e3:fc:80:49:7e:45:47:
b6:53:eb:7b:47:2a:71:30:ae:6c:a5:0f:54:20:a5:
51:3f:85:81:39:e8:c0:18:3c:ed:2a:b9:0d:c7:a6:
ad:ad:8e:de:cd:7f:d3:7c:f5:aa:3d:5e:4a:fd:48:
37:3f:fa:7b:50:f9:70:33:e7:22:b6:fc:15:0b:55:
4c:05:fc:a0:ec:15:7c:36:8e:cf:8c:0b:f2:ad:3a:
a1:0a:5e:10:35:55:3a:b0:7c:43:9f:eb:7e:0e:d7:
4e:13:9c:30:c0:3a:da:79:c5:4f:bb:45:8d:8e:0f:
c5:38:dd:50:66:22:4d:47:9d:e0:e4:7e:11:b1:cd:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DC:42:87:26:E0:7A:1B:F8:A0:66:32:60:CB:25:0E:16:16:3E:EB
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6a:76:14:b4:c8:d2:93:fe:1f:4a:2a:e0:1f:e5:58:10:f9:
3b:4d:f8:7c:98:7b:28:3b:23:17:8f:ee:c3:fd:d1:bc:52:6c:
a9:18:6e:d4:76:65:c2:54:e1:38:ab:85:53:83:ac:1f:b8:2b:
67:7c:d1:07:dc:13:06:37:47:56:81:cb:31:fd:24:74:22:2d:
69:09:a0:1c:83:d9:1e:07:e3:9b:df:74:4b:10:4e:42:b1:ad:
54:9c:fb:3a:cf:19:69:d8:c4:af:f3:14:dd:b7:26:aa:0b:df:
32:43:c7:2e:58:bc:95:b5:6e:9e:38:de:8d:90:c4:a6:bf:f0:
a1:15:e5:c0:65:ff:d4:bb:47:9b:2c:a1:53:6e:9d:35:34:de:
91:41:de:33:84:d5:09:04:1f:9a:8c:6f:66:49:12:e2:a6:a5:
2c:4e:4d:4f:d9:28:12:cd:e2:ae:e5:ce:3a:d0:f8:59:b3:a6:
b7:89:1e:75:32:ca:0b:91:2e:ea:bb:35:e5:e0:eb:d0:8e:45:
40:fd:31:92:82:a5:a0:87:d3:ce:8a:66:81:11:ef:d9:82:4a:
f8:ca:da:a7:ba:9f:28:cc:46:1d:a4:f8:06:4f:94:cf:a2:0b:
3c:0a:eb:c8:89:f4:10:00:13:d8:9a:bc:75:ed:a1:c1:d3:fc:
4e:a5:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:19 2026 by rpki-client