Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: +bQC2XrXcDf5Ao+2UfH9m5SQlaNwwMJ133KciIMsvoA=
Subject key identifier: 88:64:13:D2:D3:90:31:67:52:A9:B5:C5:36:92:5D:ED:FF:BD:48:4D
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019D28BBB2080964920419DF15BA3A1A3BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 182B
Signing time: Thu 26 Mar 2026 06:01:22 +0000
Manifest this update: Thu 26 Mar 2026 06:01:22 +0000
Manifest next update: Fri 27 Mar 2026 06:01:22 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: mHF52GV//iLRRPJeipYnM5FXl/mzv64ksUF/xIay3ts=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b2:08:09:64:92:04:19:df:15:ba:3a:1a:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Mar 26 06:01:22 2026 GMT
Not After : Mar 27 06:01:22 2026 GMT
Subject: CN=886413d2d390316752a9b5c536925dedffbd484d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:67:11:9b:c1:5d:a9:42:df:c1:c9:a3:40:
f7:9a:10:9b:d7:40:fe:8a:63:4c:56:f9:fd:89:36:
b9:25:37:42:8a:1c:1d:12:37:8f:c9:67:64:49:52:
87:31:23:df:7b:da:8d:fc:e1:dc:08:e2:49:6b:f5:
84:f1:bd:74:a6:48:89:5d:ab:12:ee:8c:8a:8a:59:
d5:ad:e9:aa:54:e9:74:ba:3b:19:20:d4:24:c4:6e:
86:4a:62:83:40:4e:d1:a5:69:16:fd:77:0f:80:b5:
31:93:a1:1d:7a:36:ad:6b:4a:f5:77:d2:04:fd:42:
91:b5:67:e2:c7:42:29:06:39:d1:49:76:09:b4:08:
bd:22:85:c6:2e:d2:5f:a4:0b:43:d6:ab:5e:1e:ae:
5b:f4:ed:a2:af:5b:36:a2:4e:46:fc:a7:da:3c:d8:
38:83:49:0b:66:56:e1:3e:ba:8d:73:66:09:44:41:
2d:0f:b3:16:85:1b:ba:53:82:21:8b:9b:b8:7d:e0:
d9:de:61:57:65:31:01:e7:1f:b5:f3:c8:07:4a:b4:
32:5b:4f:3b:6e:44:aa:93:43:24:49:90:72:d4:17:
ab:a0:b2:1b:76:ce:e7:24:84:10:f4:8b:1b:57:10:
b8:ee:a4:72:5e:86:49:08:89:c8:25:fa:b2:51:c0:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:64:13:D2:D3:90:31:67:52:A9:B5:C5:36:92:5D:ED:FF:BD:48:4D
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2b:27:89:42:84:f6:80:88:ee:f1:02:39:71:57:96:d0:1b:
5b:5b:5f:f7:e3:e5:c7:b1:00:dd:96:cd:4c:02:00:7c:9d:36:
c7:89:6a:4a:59:d5:65:73:59:4f:09:51:b2:22:14:56:f1:16:
be:23:d9:f4:2b:dc:98:54:fc:e9:32:50:8b:97:5b:be:d0:47:
4c:f3:d7:57:bc:f2:43:96:02:9d:b7:9b:e3:95:c8:f8:27:07:
9b:a9:16:f4:2a:2c:ac:2e:56:f2:d5:a6:17:66:0e:18:ac:a0:
ee:83:0f:01:f8:2a:d6:94:fc:fb:2c:6d:a8:1d:a4:6e:db:86:
00:9c:d5:56:42:c7:3c:81:2e:48:09:3f:54:e0:37:43:fc:dc:
ac:75:75:1e:85:51:f9:bb:ff:fe:4c:36:8e:42:17:a3:72:72:
10:65:a8:9f:b3:9f:16:cb:e5:a4:77:fe:5a:4c:66:9c:68:56:
c5:35:1a:f5:ab:86:48:0f:d2:7f:78:df:f8:d7:3b:92:4f:5c:
7e:11:9b:08:2f:64:a9:b9:c3:ad:4f:7d:96:61:74:83:17:eb:
ce:7d:83:39:66:ca:17:83:40:ca:bf:65:9e:8c:bb:a7:b0:df:
d9:f5:90:66:cc:11:4d:21:40:03:c3:7a:87:21:20:81:ca:dc:
19:df:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:54 2026 by rpki-client