Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: oMqS2jrThk1Xv1akvzl0a7e1q3lzVlWKWIg51p6o+gY=
Subject key identifier: DE:1E:E2:48:4A:9B:5E:16:62:A2:96:D4:BE:D3:EC:64:FE:B2:0A:AA
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 019D273AA785088918A81C78376C44E4EA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0DF7
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: 9n3RpYWv3b3NFe0P0IRqmn11xFp7dZkIWKgB/1SHDHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a7:85:08:89:18:a8:1c:78:37:6c:44:e4:ea:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=de1ee2484a9b5e1662a296d4bed3ec64feb20aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:94:4b:c6:08:96:3a:77:6f:07:c1:2d:d2:
90:73:9c:82:c9:a2:cd:5d:4f:39:aa:7f:33:ce:65:
6d:20:72:2a:c0:70:2d:31:f5:c7:5b:26:81:49:51:
bf:7f:99:3d:ee:9b:c2:49:2e:81:f6:01:d6:19:4e:
01:1d:06:69:ad:20:9f:6b:5c:2a:77:6b:2b:c8:92:
4f:0f:00:d9:c5:38:b2:3d:94:1f:09:b4:46:8c:7f:
4d:13:00:21:d8:33:b0:f8:16:e6:e8:9f:10:62:42:
61:fb:10:8f:39:f6:a7:d2:c6:8a:4a:9c:73:74:00:
6f:7b:86:5f:32:d6:e0:56:5d:83:d7:15:e3:e4:17:
6c:84:70:12:6d:06:f8:4f:de:8d:c4:0c:98:77:e5:
ce:bb:60:a5:a1:f1:37:9e:29:a8:0e:e8:88:3d:f6:
fb:dd:b8:ad:e3:53:d7:84:0a:1e:a5:41:d0:44:8d:
79:06:34:5a:37:87:be:9d:3b:32:a1:8d:2d:55:2c:
64:9d:33:68:d8:34:e0:ab:37:c9:35:48:2c:b0:0b:
50:cc:bf:8d:4b:76:f4:04:ef:61:7b:4e:38:72:7e:
51:7b:72:a9:c8:b3:99:f2:a1:4f:c1:23:64:5c:51:
7d:92:91:ad:c4:70:54:e6:65:30:c4:83:91:39:9c:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:E2:48:4A:9B:5E:16:62:A2:96:D4:BE:D3:EC:64:FE:B2:0A:AA
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1c:15:a2:6c:a4:00:f7:44:4d:ba:76:af:69:51:dd:fb:03:
ef:e0:74:8a:c8:7c:ef:f6:65:4f:93:02:5f:23:85:e9:28:ee:
8e:82:59:8a:9b:df:44:15:38:db:43:39:2b:73:8b:9e:21:bd:
c4:8d:5f:42:bd:ed:8c:3a:b1:58:20:92:7c:ae:fd:90:0b:08:
82:0f:b8:34:0a:59:cf:0d:06:ae:dc:97:74:d6:55:49:77:09:
38:22:f2:38:b1:4d:ab:54:cb:9b:08:e1:cb:f8:1a:92:d8:94:
ac:35:da:30:fb:e7:02:ea:7f:0d:fa:5f:7b:78:12:f7:d8:e4:
52:78:8b:2a:8c:cd:c2:78:72:40:e7:b6:ba:31:a5:3f:32:74:
be:1d:b2:50:9d:07:41:87:d7:61:6e:66:23:e3:04:1b:54:d4:
10:5b:c8:d8:1a:f2:ec:57:92:bb:be:40:dc:b6:09:b1:f8:f9:
a3:30:80:42:5e:85:69:b1:83:3c:79:ca:5c:1e:95:70:a1:f3:
e4:7d:1c:a1:c8:74:5f:17:a5:45:1c:07:05:0a:c9:1e:d8:52:
5a:69:34:c2:4e:63:a0:e0:4d:82:75:5d:5c:fd:ab:94:2b:1b:
ab:aa:7e:cb:57:2a:41:bd:34:f2:81:b8:1d:52:91:85:9a:f0:
60:70:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:01 2026 by rpki-client