Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: Y6+CyZelyL/0ktFFAqfTWXRZLx7Dx4Y8DfqizmZ7PhY=
Subject key identifier: 7E:A3:5C:15:C1:AF:4A:A7:BB:02:59:FA:0E:E2:C5:47:FA:68:4D:19
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 019D26282B4A9D98FDC8186DD2BA470B6904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0AE7
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (hash: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4=)
2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: WTPDTbRd/KrWRyEhktk2Vk1S0n/Cg5P7yKBI/KoDxsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2b:4a:9d:98:fd:c8:18:6d:d2:ba:47:0b:69:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=7ea35c15c1af4aa7bb0259fa0ee2c547fa684d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:15:49:3a:b0:1a:a9:95:e2:e5:ce:40:e5:
b4:49:7b:7b:62:6e:4f:10:6e:4b:7a:19:fb:d7:f3:
b6:7e:de:4e:dd:c2:a1:a5:be:75:a1:df:d2:b2:45:
da:be:78:04:70:f2:93:7b:66:7f:4c:61:5c:bd:95:
2a:9e:f8:8c:37:5d:eb:e4:67:83:81:cc:dc:ae:a3:
0a:d8:d6:2d:a8:2a:07:c5:b4:9c:17:72:0e:74:4f:
a9:c4:aa:ae:a6:6c:f8:94:73:1c:49:be:38:b0:21:
96:87:10:f2:13:6a:a0:51:34:91:17:56:3e:73:85:
2f:8e:8c:6d:48:fd:22:2a:38:d4:f6:90:d5:7b:00:
a2:7d:9c:9b:73:1b:57:2c:d9:b6:50:83:d9:be:61:
b8:c7:bd:c5:d5:c0:c2:10:5d:c6:1d:32:59:22:b6:
2e:7f:8c:c4:2c:76:da:d2:00:b0:ff:fd:11:9e:3e:
20:61:3c:bf:d3:78:1c:77:68:ac:da:52:75:4e:6e:
79:f5:d0:ea:ef:c7:19:6e:bb:a8:b6:31:d0:a5:e2:
8d:2a:9c:9f:61:73:59:d0:70:bc:ef:f9:3b:c3:67:
eb:5e:ce:b7:db:ba:1f:b7:c3:10:21:f8:87:8d:51:
96:83:1e:c4:17:a5:5e:0f:e4:5a:0d:6c:4a:96:13:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A3:5C:15:C1:AF:4A:A7:BB:02:59:FA:0E:E2:C5:47:FA:68:4D:19
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:64:56:d8:a5:f3:c2:67:2b:e8:fd:ba:61:c2:56:18:75:8e:
63:a4:c3:67:09:ce:89:bf:25:92:69:7f:3c:01:7a:6c:92:49:
58:af:d8:08:dc:4d:e4:6c:1b:86:d4:9f:e1:23:ff:7c:36:3e:
33:76:35:69:ac:78:ed:bd:53:03:4d:4b:51:03:2e:06:0a:b9:
5f:1b:2c:58:e2:a2:a9:0e:dd:79:8e:4e:78:a8:63:98:7b:01:
56:79:40:13:88:de:28:f8:8d:a9:5b:66:36:1c:fa:73:f8:fb:
af:cc:4d:a2:e5:2a:d9:67:58:7a:d2:18:c0:c6:c1:52:07:53:
7c:fd:d9:73:56:25:51:5e:3b:72:8e:67:4e:76:5f:de:a4:d2:
67:ec:df:ad:d7:db:e2:ac:70:0d:8e:e6:55:c7:26:a9:78:50:
43:ef:e3:1a:e0:16:8c:13:73:d8:63:9d:38:b4:0e:7d:43:bc:
e8:8c:36:03:cb:c7:3e:bb:77:34:e4:23:d4:ca:d9:90:e4:20:
de:0b:ac:6d:d1:e8:0d:01:63:8e:70:d1:16:42:15:ce:49:18:
d8:7a:9f:51:da:55:1f:21:a2:b0:7c:8a:31:26:53:0a:c5:7f:
9a:44:ea:ae:1c:01:24:5f:de:66:13:e7:fd:e6:ca:bc:3f:a9:
55:21:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:53 2026 by rpki-client