Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: 8U0rqqWT9XyYGWH9LD7QxtMuEG4DoUIEjFjQn3M83R8=
Subject key identifier: E9:63:0F:B3:9E:A4:32:05:7A:85:FD:CF:56:46:6D:4E:73:D8:D7:84
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 019D25F139B05783069D12388BC2A8DD674F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:00:58 +0000
Manifest this update: Wed 25 Mar 2026 17:00:58 +0000
Manifest next update: Thu 26 Mar 2026 17:00:58 +0000
Files and hashes: 1: pZAFv0jFSIg3T6apn7mzvuziSbo.roa (hash: Mivi7UE7PO7E6vo4gXQ02GjqhdIj6xXgGbCncGPuXD8=)
2: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: UCKyLJgHgKEGsx28VCoCx4JZQqYbyvCTY24bpado9Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:39:b0:57:83:06:9d:12:38:8b:c2:a8:dd:67:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Mar 25 17:00:58 2026 GMT
Not After : Mar 26 17:00:58 2026 GMT
Subject: CN=e9630fb39ea432057a85fdcf56466d4e73d8d784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:73:27:8a:28:f3:0f:ad:9e:50:71:4a:e5:
f2:50:5b:75:a0:bd:ba:d9:f8:28:0c:3c:8a:0a:70:
a7:89:f6:26:9c:3e:8c:47:08:13:07:87:fe:07:6e:
2b:ca:a0:57:c6:e5:d6:4f:e6:21:5e:53:4b:1e:c4:
bb:0a:3d:ab:e1:c2:56:96:93:01:6c:ad:e5:51:40:
3a:e3:b3:15:cc:b8:61:02:93:f1:90:22:6e:e4:00:
10:61:18:32:45:5b:0a:d4:e3:ec:b6:23:f5:3d:21:
a4:a5:69:5c:9d:51:80:10:74:ad:ae:dc:58:89:cf:
b0:6a:77:2b:cd:7f:c1:82:c1:06:72:8a:6a:b3:0d:
3e:d7:96:94:0d:ba:5c:dd:98:8e:8d:e1:6a:44:03:
4c:56:82:4d:1b:b7:2a:56:ac:c9:60:09:42:a6:d7:
f3:b6:26:19:44:3b:c9:32:74:87:de:56:29:6d:69:
c7:20:94:d3:50:78:de:54:d0:34:85:00:24:78:e6:
32:50:4a:ff:c8:72:0c:e0:7c:c2:9a:5f:d9:23:86:
53:51:59:a9:b5:b6:e2:0f:98:4a:27:89:44:19:7b:
58:fd:0f:d1:03:b0:90:97:17:ec:88:27:ad:b8:74:
64:fa:b4:b2:22:b5:56:a5:12:c9:a0:f7:78:e3:f7:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:63:0F:B3:9E:A4:32:05:7A:85:FD:CF:56:46:6D:4E:73:D8:D7:84
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:53:0f:1b:05:f8:4d:d2:aa:28:e1:f2:d6:43:22:db:66:f6:
0b:66:bc:8a:d5:4b:ea:fc:b3:f9:98:b7:aa:89:7e:37:7e:d1:
80:00:26:37:65:f8:e7:75:a7:c7:7d:df:dd:61:a6:87:01:d0:
31:bf:8e:b3:e3:57:bf:4e:d4:5a:a4:c6:6c:95:38:9c:65:b9:
1f:ac:ef:46:df:08:eb:bc:7c:85:e6:7e:f7:8c:76:a1:56:ac:
67:06:94:10:9d:82:50:a0:9b:3e:40:90:0e:05:86:1f:64:54:
43:74:db:89:9d:e5:9f:b0:5d:39:17:0d:14:cf:77:b3:3d:e0:
10:28:a3:93:a2:75:b2:60:87:b6:02:05:3a:aa:1e:6f:a4:41:
43:17:c8:c6:65:ca:8d:e5:78:51:1f:ff:85:6f:49:5e:4a:8b:
f9:df:e3:9e:e4:65:20:76:1e:f2:90:a0:d7:26:b3:fb:9d:ac:
63:55:50:a3:42:d2:a1:e4:b1:75:f1:2a:0b:e9:16:a8:02:61:
73:54:e7:04:52:b7:a4:d7:ea:94:2f:2a:30:08:74:a4:39:8c:
60:4e:4b:a3:e0:b5:9b:5d:bb:db:27:16:1b:b6:e6:0c:23:bb:
4c:94:37:98:21:94:cb:37:d5:d7:f1:da:02:43:83:c5:03:05:
6b:e3:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:56 2026 by rpki-client