Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File: rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier: ypl74qpz9AugvAKHw+NtTJGhK4SptPIJ+vXoDxawaGc=
Subject key identifier: 88:14:CA:CF:25:F3:87:FF:33:44:56:09:66:30:D7:66:8E:C6:88:A0
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial: 019D26CD523817847AE9673802BD3A8994BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number: 034B
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (hash: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4=)
2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: VBK/VLCMIKc959ChvFPcQJj1kauyl+aFLU3KTQ+J6Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:52:38:17:84:7a:e9:67:38:02:bd:3a:89:94:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=8814cacf25f387ff334456096630d7668ec688a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:22:74:6b:36:13:0a:95:4b:20:d8:bf:c1:
73:e4:8d:6a:30:8d:1e:f9:d7:4c:b2:d4:21:0d:94:
22:02:ff:35:09:68:c6:41:2b:a8:65:47:4f:52:e4:
c3:b6:7d:75:d3:42:cd:fd:4c:41:b4:0d:eb:58:2f:
6a:d8:80:b6:0a:55:f0:16:54:95:73:57:ba:8f:fd:
de:a8:21:67:17:6b:5e:85:d3:da:57:b6:aa:2c:0e:
80:6c:04:0e:3b:ac:e4:b1:ae:cd:0d:ff:2d:ec:b8:
e7:3b:1b:25:be:22:09:31:b9:8c:a7:7f:78:1b:47:
1c:5c:be:6d:b0:f8:0b:25:9b:25:2c:b5:3a:0f:b0:
2f:77:fd:94:dd:fb:39:55:9f:c7:50:e6:3a:bb:f9:
39:20:a6:44:0f:ee:e8:9a:01:4c:3f:4d:bb:d2:73:
b6:92:22:e0:59:fa:d6:80:58:a4:d1:08:56:72:33:
7c:e5:f0:a4:31:4f:18:58:94:3c:9e:3f:16:07:d9:
f6:80:88:9d:66:0a:74:6d:27:cb:8b:b9:b5:71:7e:
9b:57:95:a0:f6:a1:f7:9e:63:d4:cc:98:9e:e3:30:
75:aa:5a:71:34:d4:9f:ae:44:e3:c2:95:e3:2a:98:
34:1b:1f:e5:6c:09:1c:32:36:1e:3e:52:28:df:2a:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:CA:CF:25:F3:87:FF:33:44:56:09:66:30:D7:66:8E:C6:88:A0
X509v3 Authority Key Identifier:
keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3a:d1:fa:52:d7:a7:6f:86:cd:a5:67:bb:db:50:d8:cf:c8:
4e:a1:92:ac:34:d6:45:c6:ee:7b:8f:9d:02:94:23:83:27:d7:
89:fc:24:e1:86:8c:dd:41:87:86:ee:57:21:66:b1:d5:f4:91:
f2:55:d7:18:94:cf:5f:84:63:e1:65:c6:aa:a4:ab:c8:57:ea:
21:64:f3:29:41:83:2d:fe:5a:fe:40:35:65:ed:d9:32:12:dc:
57:d8:6a:11:4e:4f:c5:2c:26:f3:fa:1b:2e:ac:3d:9a:70:c8:
6e:de:33:13:db:44:c4:b6:43:e3:10:d1:b0:9d:50:4e:d4:22:
8b:83:87:6b:06:50:42:bb:f8:b9:ff:bb:d7:38:78:fc:a0:2c:
1d:41:25:2f:1b:c4:78:f1:5f:44:17:6e:1b:51:0a:b9:3a:62:
91:92:c0:22:1a:a2:02:55:80:2a:86:3a:8c:9e:03:85:bc:f5:
9c:c5:7a:21:a7:1d:2f:13:a3:df:b7:bb:22:8f:9d:06:6b:66:
0d:67:25:42:a5:dd:c8:37:b1:1e:dd:50:27:1c:b5:fb:7b:c6:
b4:0d:5c:12:58:16:66:24:5f:52:e1:f4:78:a4:16:15:7a:26:
ef:a2:5d:7e:20:8c:b8:8b:18:fa:1a:cb:6e:a1:90:02:80:8f:
e1:b5:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:06 2026 by rpki-client