Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: 8T8ugT9njv9CJjC6QwYq8SXWgyOGPleD4fhOsdeal/E=
Subject key identifier: 10:8A:94:A8:A5:87:69:24:BB:63:D2:0F:67:1A:4A:00:2E:DE:C6:4B
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 019D2B4F0E3720680BCDA2531903971CA855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 18:01:34 +0000
Manifest this update: Thu 26 Mar 2026 18:01:34 +0000
Manifest next update: Fri 27 Mar 2026 18:01:34 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: sPvN6B74/UW//lM8CjOy5vkIoHCsXTKQsWeFTr1T2qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:0e:37:20:68:0b:cd:a2:53:19:03:97:1c:a8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Mar 26 18:01:34 2026 GMT
Not After : Mar 27 18:01:34 2026 GMT
Subject: CN=108a94a8a5876924bb63d20f671a4a002edec64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:b5:2f:26:12:d2:13:7e:4e:e6:77:68:7c:
4b:55:41:2e:5e:d6:c5:6c:c0:6d:ff:71:63:eb:a3:
10:e3:10:7c:0f:54:d8:3c:4c:28:fe:89:c6:24:3b:
32:d3:f2:5f:f4:34:85:27:43:08:bd:c9:9e:97:b7:
28:ae:9c:14:46:79:95:c9:ea:20:bb:98:7a:12:97:
ef:4a:68:3b:7c:7c:3e:21:f2:5a:cb:82:9d:00:dc:
ff:73:fa:f4:7a:80:47:48:57:dc:97:f4:9d:e1:98:
fc:e7:a3:9d:03:65:03:a4:1c:ea:c5:6e:25:29:49:
13:b6:53:fc:7c:69:a9:3c:bc:c5:e0:67:9c:ac:02:
9b:9c:52:f5:15:ac:f8:d8:38:a4:94:ee:29:82:eb:
22:74:a5:86:cf:5e:55:a6:46:5f:22:9e:95:3f:49:
4f:95:6f:0d:1b:46:9f:4c:88:93:16:ac:1d:9c:63:
81:eb:81:f4:57:65:4f:e3:95:7e:13:8a:f1:43:5f:
42:94:62:75:74:66:6c:2e:26:d3:8e:62:e1:1e:db:
3f:0f:67:c4:db:3d:cf:52:a0:70:2f:2f:39:35:10:
0a:a0:36:fe:ac:61:61:23:80:d3:84:91:2d:dc:85:
4b:24:8e:ae:9c:b5:63:65:df:d9:51:66:e3:77:f9:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8A:94:A8:A5:87:69:24:BB:63:D2:0F:67:1A:4A:00:2E:DE:C6:4B
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e7:f6:8c:13:79:e2:27:d1:71:59:6b:cd:82:54:50:1b:96:
45:87:6a:16:10:ff:86:7c:0f:9b:e5:bf:1e:1f:69:4d:21:5d:
ac:7b:12:20:91:dd:e6:84:4e:40:40:f5:2c:6d:1f:19:ed:a8:
a7:0d:4a:78:28:fc:e4:49:2c:fe:7a:73:09:d6:14:82:c0:5b:
4f:bd:2c:66:d6:c6:46:43:38:26:98:22:c1:c8:87:73:2f:60:
57:c6:8c:2e:3d:a3:4c:f5:00:55:73:30:22:50:44:95:89:08:
c9:01:15:5c:15:b1:2b:af:b0:52:fc:80:6f:c8:e7:9f:a5:af:
7a:45:f1:1e:9b:4c:72:47:18:8e:8b:da:21:19:65:91:4d:3e:
75:94:59:72:b3:4e:bf:4c:a5:5e:9f:31:63:df:93:d2:9a:6a:
49:3b:4e:77:2a:e4:c2:2d:fd:2b:52:b8:1c:fb:e0:b3:8b:54:
04:55:f6:f1:60:5f:b0:20:ca:cb:67:e7:b8:87:83:97:9e:c3:
9a:84:c4:80:bc:4e:84:be:cb:0f:6e:d4:05:e2:fc:81:93:8e:
a2:5a:d0:cc:be:0d:a6:d7:b5:27:c0:88:90:99:88:f2:8c:90:
c9:5c:01:8b:07:72:02:f7:14:3a:e0:35:7c:46:55:25:af:34:
8b:c9:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:02 2026 by rpki-client