Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: wxPEZb9nd5CvlyZl+9RItPtDrGRCOIofzGWo+J1dWso=
Subject key identifier: 16:57:75:15:63:6D:A7:3D:21:6D:AD:CE:67:61:3D:B9:E3:C1:07:7F
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 019D26CD8E7BEA6EB987C847910DC88758F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:01:38 +0000
Manifest this update: Wed 25 Mar 2026 21:01:38 +0000
Manifest next update: Thu 26 Mar 2026 21:01:38 +0000
Files and hashes: 1: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: oeIUEb/xY724zQIYEe6XKCQ2UmnMlcBh0eJtpUeYkug=)
2: u73VKktNNDp99ZZ8-aw2FkAHHqE.roa (hash: 50jFlydOYBg1FIR0dL8Ur0REyQFfT4z/eOZDEpcxAyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8e:7b:ea:6e:b9:87:c8:47:91:0d:c8:87:58:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Mar 25 21:01:38 2026 GMT
Not After : Mar 26 21:01:38 2026 GMT
Subject: CN=16577515636da73d216dadce67613db9e3c1077f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:72:c8:53:99:b5:ab:fa:4a:22:b4:0e:1e:
ef:5a:5f:04:80:a8:78:cf:ad:e1:2d:ec:0b:64:f3:
da:f7:a4:e1:1c:f2:ef:ae:f5:fc:72:19:d7:3d:bc:
78:7b:e8:17:bd:70:17:0b:36:80:1b:72:2c:f4:88:
33:29:2e:d2:8b:3e:6d:dc:27:11:aa:2a:c4:4e:b6:
9b:37:fd:92:b5:18:fc:66:4e:e9:ff:0e:64:01:8c:
d0:bc:42:48:2c:66:9a:8f:b5:34:3e:c0:61:45:e0:
9d:dd:2d:56:21:46:64:0c:d9:0f:5f:89:22:81:7c:
7e:1f:5a:f9:91:c7:c7:40:24:d9:6d:a9:1b:43:dc:
7a:26:5a:99:fa:34:88:29:46:29:a0:8e:43:44:81:
76:c9:85:a2:fa:86:e1:ee:71:d1:01:50:f6:ec:65:
d3:e9:82:ae:74:c4:87:df:b7:15:be:fd:2d:7f:a2:
25:0c:fe:19:93:cc:5d:6c:b3:50:41:c9:63:4d:16:
b3:aa:f9:3f:a4:9d:12:a1:be:19:0e:b5:52:bd:ae:
5a:b4:d7:eb:2b:c5:37:7e:ef:f2:9d:71:6c:78:6b:
4b:ee:f9:c5:cc:41:77:31:da:e2:5a:e6:25:36:d7:
3d:7f:c4:53:a8:17:6d:84:f0:83:14:45:bb:92:55:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:75:15:63:6D:A7:3D:21:6D:AD:CE:67:61:3D:B9:E3:C1:07:7F
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:50:6b:e4:f4:4c:32:5a:d5:f6:86:f4:e4:54:f1:39:59:ff:
55:1c:b5:83:01:7a:3b:8e:93:d4:40:f6:53:f6:1e:fc:08:6d:
b1:67:71:ae:15:78:1f:14:8b:4e:2e:28:83:aa:a0:8e:52:ed:
13:d0:78:fb:d5:e2:33:e2:c8:b7:6a:a3:8d:97:43:f7:c5:c0:
d9:a8:1b:9b:13:bd:7a:60:b8:8a:37:b1:ab:c0:f9:62:ac:dc:
5f:a9:56:ec:ee:29:27:57:ba:14:fe:35:e8:80:6f:4f:05:a8:
05:6f:5b:81:3e:91:af:5b:10:be:09:c5:41:31:9b:f5:21:a4:
3b:71:b5:4a:ac:06:4d:9b:0e:a0:7e:16:85:00:60:b1:6f:50:
cb:71:54:52:e8:0d:d6:1f:d9:e2:1c:44:7d:0a:dd:2a:e3:99:
06:30:ad:52:2e:8a:06:b9:4f:04:86:43:7a:b1:2c:3a:06:ba:
29:6c:73:c0:90:8c:5c:69:b2:68:86:d3:0e:a6:11:58:70:2d:
d8:db:96:81:9c:ca:5d:f5:fc:5a:a8:9d:c8:16:e8:87:fa:70:
29:e0:f0:c8:ef:d2:b9:35:04:b4:b4:02:63:b9:63:6b:15:58:
cb:1f:48:0f:fc:78:a2:1c:17:b4:5e:6a:f9:c4:58:fb:53:d6:
29:3f:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:20 2026 by rpki-client