Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: nvyhZPgdQs+CQU19/LsbgrODqy7XainXV9PU2vudPu4=
Subject key identifier: AA:DD:60:32:2A:DF:54:58:CE:C5:D9:B7:0C:3E:F1:90:B4:89:9E:97
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 019D27A864369A1AF6653705771AB9E31F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 1650
Signing time: Thu 26 Mar 2026 01:00:40 +0000
Manifest this update: Thu 26 Mar 2026 01:00:40 +0000
Manifest next update: Fri 27 Mar 2026 01:00:40 +0000
Files and hashes: 1: brwHnJn9j349deS3lmnqCOoNhq8.roa (hash: m2Te8mjf6FkoLB1a3b50ZNfCC4MLvjshErjN5GPxq0M=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: bvpxApx6Gv9Xb8jVou/0qwuQ0rmsNzgyoDtohSq0A+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:64:36:9a:1a:f6:65:37:05:77:1a:b9:e3:1f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Mar 26 01:00:40 2026 GMT
Not After : Mar 27 01:00:40 2026 GMT
Subject: CN=aadd60322adf5458cec5d9b70c3ef190b4899e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:ac:9f:86:f3:4d:9b:02:92:04:5f:15:c7:
aa:35:0a:70:1d:c9:8d:0a:6d:07:1b:4d:cf:ea:19:
b6:f7:74:2e:96:1c:be:f9:6b:8c:f2:64:97:43:60:
94:29:c4:30:0f:2e:18:bb:22:4e:d8:94:a4:44:5e:
1f:1b:8f:d2:a3:f5:6d:0f:82:ab:48:89:f0:e0:47:
66:43:ad:cf:2d:05:eb:ad:c1:2d:53:e7:1b:bb:b2:
a0:35:b3:95:38:66:0c:1e:ae:63:10:33:5b:27:5f:
2d:39:b1:39:38:fb:81:50:ac:21:02:e4:e3:6d:69:
a5:b3:43:ce:8a:1c:a7:82:ff:01:b3:3d:24:90:a7:
91:c8:94:c4:82:e8:35:0f:59:d1:65:79:29:fb:3e:
3c:29:b0:a5:e8:9e:66:4e:79:c6:c0:b7:7c:71:4b:
b1:45:8f:f0:02:68:19:62:73:2a:cd:59:79:9d:86:
03:89:63:cd:b7:48:47:66:f2:83:a9:73:ab:03:10:
b9:1b:93:78:54:d6:5f:29:8e:16:80:68:56:5c:dc:
27:2e:81:c5:9c:c8:a7:d3:f1:01:5f:51:b0:62:d4:
99:2b:36:88:2f:c9:02:0b:2f:14:b8:fd:c9:8d:3d:
e6:43:c2:19:28:8f:16:11:ba:c3:c5:44:0f:2e:39:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:60:32:2A:DF:54:58:CE:C5:D9:B7:0C:3E:F1:90:B4:89:9E:97
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d8:b6:1b:57:12:28:db:12:b9:03:44:25:76:9a:e7:84:40:
2d:58:b9:15:76:b1:74:4b:87:97:82:6d:39:2b:35:da:94:c0:
c3:be:78:a9:1e:c0:f6:52:2d:da:9d:f6:25:69:8b:76:a0:3a:
44:00:0a:be:da:10:ed:d7:c2:94:7d:aa:81:82:45:65:d2:af:
30:ee:b0:78:a6:27:56:05:c3:37:7f:9d:e4:17:99:c3:c1:44:
c8:91:84:c3:3d:f7:8f:79:25:f3:a8:b9:ed:e7:7f:9e:e4:be:
29:4d:4b:5f:bf:d4:0d:27:15:dd:c2:b8:f4:d3:2d:61:db:9d:
95:de:9d:0c:31:b9:41:91:67:06:ce:bf:fc:45:b2:d7:24:11:
96:dc:11:1e:1b:70:32:65:ff:ac:00:d6:81:41:a6:97:90:a3:
3e:a5:80:b5:ab:00:5d:33:9d:85:04:b7:b6:3b:7d:09:b1:80:
29:24:1f:ac:b0:79:72:7e:02:a8:8d:e0:15:f9:ed:20:2a:66:
3e:b9:b3:9d:54:3b:de:3f:d1:85:57:53:20:48:29:36:35:ad:
fe:aa:2d:e7:f9:5d:c3:c3:47:69:65:9f:ce:22:80:84:8f:ef:
10:a6:86:00:44:65:ad:9a:15:e7:54:f4:b7:ea:02:57:2a:f2:
25:48:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:05 2026 by rpki-client