Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File: qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier: Tpvt31MZooeGdyaihUJIBN2wwlw8s95DH+z7DidhRP8=
Subject key identifier: 84:24:9A:8A:CE:73:6B:A2:9B:22:55:41:02:CD:05:A2:84:2D:98:BF
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer: /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial: 019D32D090868D4521BDBCF53547A0EAFC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number: 0139
Signing time: Sat 28 Mar 2026 05:00:22 +0000
Manifest this update: Sat 28 Mar 2026 05:00:22 +0000
Manifest next update: Sun 29 Mar 2026 05:00:22 +0000
Files and hashes: 1: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: RfFTciR78VclmJvLz2nZgPykols1uk0/j94n4FtPu08=)
2: snjhD4ZbdnCjhHGNejLaziB-EQw.asa (hash: k4YrVwNF0xC0R0c1Vt2SsaD9GQCIRybl7XtCYC8QQBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:90:86:8d:45:21:bd:bc:f5:35:47:a0:ea:fc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Validity
Not Before: Mar 28 05:00:22 2026 GMT
Not After : Mar 29 05:00:22 2026 GMT
Subject: CN=84249a8ace736ba29b22554102cd05a2842d98bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:e1:09:b7:2a:d5:15:c7:c2:4d:13:ee:20:
52:64:2c:b6:6c:b4:05:e6:f0:48:61:3a:fb:87:2d:
23:f0:79:12:14:e3:c8:b8:f8:f1:b5:ea:0e:d3:54:
d6:c5:64:e0:e9:43:d9:77:9e:32:1a:32:72:dd:75:
1c:a0:47:ee:aa:f2:c1:3a:b6:56:54:59:e0:1e:6d:
57:42:52:20:44:40:f7:97:52:2c:1d:d6:1b:71:de:
3c:5b:72:9a:35:40:fb:af:70:2c:3d:7a:84:79:27:
1a:b0:98:44:aa:b7:e9:b3:33:6e:2c:74:56:01:41:
ed:73:d6:54:12:41:ba:0f:e4:f4:dc:0d:ad:08:05:
8b:b9:16:6d:6e:77:cd:40:9a:ba:19:3d:0f:42:7a:
8e:4f:b8:61:9a:6f:9f:fd:83:ba:68:79:c0:cf:ab:
4c:08:61:46:be:99:d6:fc:fc:81:be:59:6e:9d:87:
bf:51:d7:6d:14:05:e2:4a:75:df:66:6b:f1:7c:1d:
0f:f6:1d:76:f4:20:1b:ed:11:62:d7:ee:de:07:c4:
72:bc:a8:79:b4:23:a8:89:3b:96:7a:67:3c:a9:9a:
9a:32:91:a6:7b:69:43:a0:af:a5:84:0e:fa:83:e5:
96:b0:65:24:04:75:14:82:1d:d6:49:9f:6f:f3:4c:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:24:9A:8A:CE:73:6B:A2:9B:22:55:41:02:CD:05:A2:84:2D:98:BF
X509v3 Authority Key Identifier:
keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:43:e7:f7:4c:12:2e:09:00:fa:c3:3f:25:e7:47:e3:b0:ee:
4d:26:53:b6:e8:79:61:45:28:65:ed:47:b3:a9:ab:66:e4:6b:
90:f0:05:cb:e0:18:a3:2d:f3:26:14:23:ec:84:18:35:fc:36:
5b:06:3a:68:74:ef:5a:a4:71:29:78:cb:41:16:7b:6e:0e:b3:
85:c7:a1:73:08:6a:c0:88:28:2c:63:7a:55:8c:01:f9:71:52:
6b:ce:20:3a:2d:53:79:5a:a9:4b:2d:08:b2:42:1a:4d:68:72:
e2:2b:02:39:8e:0f:0b:b8:f5:21:39:23:9e:5a:4a:59:f4:24:
20:53:b5:33:18:69:75:78:10:2c:01:83:e3:cc:9a:ec:32:86:
3f:21:15:6d:ae:8f:27:59:1e:3a:41:28:fb:0d:7c:eb:11:ac:
55:4a:9e:19:b8:2b:83:7c:da:25:ad:a4:2a:6f:50:bd:8f:08:
bb:63:21:db:7a:6e:bf:ea:d1:42:dc:0b:18:0b:f8:f4:2f:e7:
e8:ce:16:f7:22:f0:d9:8c:0a:1f:ea:38:e0:d0:fb:c5:66:ab:
a9:66:b0:0d:cf:e6:5c:79:9d:17:54:07:5d:ff:37:66:b7:1e:
7b:4c:5e:5f:91:a5:f0:02:3a:e9:66:b3:47:92:c8:ac:88:24:
7b:b5:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:29 2026 by rpki-client