Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: 8koAsHxSQhIYcSqS6Vv8GnMnBdmpTdQfyojctZr7dtE=
Subject key identifier: ED:B2:75:FC:26:60:45:99:17:28:5A:02:93:8A:F0:93:8A:34:55:AB
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 019D2A050D58F626033B2F2D34142D38CA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 12:01:07 +0000
Manifest this update: Thu 26 Mar 2026 12:01:07 +0000
Manifest next update: Fri 27 Mar 2026 12:01:07 +0000
Files and hashes: 1: NMKwSUUrM8k8eQKWjQoXhVr67Q0.roa (hash: CYXCafl1+25dso4rJFuju+aK/xutXRo5p4nK7eGdbTw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: 5gF1YAcFWTVNwefZFN5hHSZnqP6jzRR/BY0jC80RyFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:0d:58:f6:26:03:3b:2f:2d:34:14:2d:38:ca:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Mar 26 12:01:07 2026 GMT
Not After : Mar 27 12:01:07 2026 GMT
Subject: CN=edb275fc2660459917285a02938af0938a3455ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:7e:1c:3e:60:e9:0a:aa:2a:42:55:3c:c9:
9c:51:dc:52:e1:2f:22:d6:f5:b0:77:2b:d2:c1:13:
79:4e:cd:eb:2e:a8:3f:08:69:e9:61:9c:6d:2e:2b:
fe:bf:a3:1f:15:02:d8:93:66:e4:49:04:5b:ab:75:
87:8e:58:84:e9:19:d8:02:71:13:4a:00:33:16:23:
94:09:59:5f:b4:92:f0:11:0f:de:ab:43:9b:2a:ef:
fe:e4:db:c1:ce:5a:be:50:9f:eb:f0:85:f5:7c:35:
86:5c:f9:ab:c2:d3:95:05:a6:4f:42:00:10:ba:73:
d8:64:11:22:44:54:e0:82:8e:34:e7:db:af:c5:5c:
c5:56:2b:06:4d:04:ec:29:06:c4:b3:41:ab:74:9b:
73:b1:56:af:b5:ba:db:1e:2d:5d:63:b4:6a:4e:8b:
a9:01:96:43:5c:ba:59:8e:4a:05:dc:ce:a5:be:9f:
e7:dd:3b:1a:d9:e9:8c:79:0b:f6:10:9d:e2:50:d3:
d3:0f:84:36:e9:c3:bf:41:2d:1b:0a:b1:dd:28:82:
29:1e:57:2e:e3:45:02:9c:56:9c:1d:ee:0b:5e:52:
35:c6:f6:d7:64:a1:26:9f:dc:74:52:61:ab:17:1f:
eb:01:19:07:ec:7b:b3:15:17:d1:fc:cc:51:37:5e:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:75:FC:26:60:45:99:17:28:5A:02:93:8A:F0:93:8A:34:55:AB
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:40:2f:30:e2:c2:0f:17:39:25:ea:f9:77:1b:57:75:08:8f:
05:c2:0d:f4:26:3b:98:88:cf:ed:c2:02:94:2e:5f:1b:46:07:
9c:e3:8b:e8:48:13:d3:1e:41:99:3c:bf:e4:3f:56:8e:74:9c:
72:33:a2:78:1f:ea:a7:e6:6e:3b:5b:47:50:f8:ea:c2:45:ff:
52:b3:e8:f0:0f:74:c8:20:83:16:2d:2b:e8:a9:26:0a:dc:1e:
f2:87:52:31:c3:fb:cd:a2:5e:ea:4e:d3:f5:a0:67:43:42:0d:
f4:71:83:13:d0:b9:c2:66:fd:2a:e0:0b:52:a2:76:9f:51:25:
4b:3d:ca:c6:8a:47:5b:1e:0a:83:59:ac:16:1a:40:a8:32:49:
ae:38:3c:cf:cc:5d:ef:f7:ee:99:35:10:01:78:29:5e:cb:ef:
2f:dd:80:d4:43:7c:90:dc:8a:a9:95:e6:56:62:9b:b4:0d:2d:
b7:88:f4:48:23:98:a6:0f:26:f3:4b:9e:74:b4:44:16:7c:71:
49:ad:f7:e7:0d:df:49:3a:0a:c9:0d:f9:b1:6b:c0:0a:ff:4c:
90:83:56:8e:9e:0b:71:39:00:63:37:88:7e:ee:ae:c2:81:c7:
83:5c:86:60:e7:36:61:17:75:f4:18:56:89:1c:f2:f9:61:b1:
7c:8c:70:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:24 2026 by rpki-client