Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: wilemndt5Kp7yondVdKILebmdTHxju09Sa3o+520CSM=
Subject key identifier: 93:37:8C:82:7E:22:B7:74:49:FE:8D:EC:2D:E0:B0:16:2A:D6:94:22
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 019D27DF8A39E76438ADBFB73B11B6DD1F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:54 +0000
Manifest this update: Thu 26 Mar 2026 02:00:54 +0000
Manifest next update: Fri 27 Mar 2026 02:00:54 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: Cpkvo2fb19VxvemCloFyHNaf/4eKsQmVnhvPknYIwA0=)
2: q1-RUpRuUBWbVUTXhumFkZMtJE0.roa (hash: 3qe5W+9kAiScEd0vW+cxVBghgrjhqeOcbbAjhxWvcx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8a:39:e7:64:38:ad:bf:b7:3b:11:b6:dd:1f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Mar 26 02:00:54 2026 GMT
Not After : Mar 27 02:00:54 2026 GMT
Subject: CN=93378c827e22b77449fe8dec2de0b0162ad69422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:c5:99:ab:81:04:a6:fb:38:54:4c:46:70:
bd:9f:8d:0a:a4:1a:87:ab:26:19:74:86:fa:c7:2f:
82:d9:06:37:68:be:c0:9d:74:5e:09:b2:bb:6d:d6:
12:8b:8f:34:df:31:ae:95:96:50:c2:6e:a5:fb:7f:
ec:1a:b8:2b:7b:77:aa:e8:c0:51:18:bb:d7:82:e5:
5c:4e:ba:bd:82:d1:c3:f1:d8:1e:34:9a:81:58:61:
e3:39:85:bc:c2:0f:d8:cf:2d:e3:d4:8f:94:e7:e7:
b6:bb:5e:b1:2a:01:b0:09:ab:c1:79:87:40:93:f2:
f9:e6:75:7b:06:4e:20:99:cd:00:c5:13:ba:71:15:
33:dd:03:02:d0:bf:75:8e:eb:d2:44:0b:ed:70:7d:
95:e3:bc:5d:8f:14:f0:6b:35:05:16:a6:51:8e:65:
9b:bf:a6:0c:b9:ca:f2:97:f9:58:7f:ac:b9:63:84:
83:e5:fa:77:7e:00:51:2a:90:e8:04:1e:bc:c6:5a:
e9:b3:ee:fe:a5:ac:f3:6e:c5:f2:9b:90:11:4f:80:
d8:12:05:82:c4:bd:e3:3e:8a:9a:e9:8b:01:5a:3d:
f4:0d:eb:02:6c:70:50:60:41:81:51:ab:b8:cd:56:
5d:c5:a2:66:65:fd:ae:03:8f:76:55:51:82:44:35:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:37:8C:82:7E:22:B7:74:49:FE:8D:EC:2D:E0:B0:16:2A:D6:94:22
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0d:5d:28:92:94:2d:1a:03:cd:e8:db:eb:bc:65:99:f2:6f:
f1:29:67:66:a0:e3:8e:23:8d:df:56:89:45:a7:19:78:6f:f6:
67:f6:03:9e:1a:d0:9b:94:b7:fd:2c:b5:ac:27:a5:04:b2:b1:
b3:0b:d5:34:19:f7:52:f2:89:ef:95:4b:27:05:c8:21:bc:27:
6d:50:e2:31:a5:80:4d:63:1f:67:dd:c8:f9:1c:f3:83:75:3b:
64:09:bb:5c:17:a5:ec:b3:a6:e0:58:4f:0c:ed:13:d4:af:32:
b5:7c:e6:bf:68:4d:0e:d4:c3:fd:c4:f4:d2:b2:42:4b:cb:1e:
e2:0d:40:54:54:32:4d:e6:d1:09:f8:22:88:b0:56:4e:b4:58:
bc:35:21:ea:2c:2d:d0:98:94:d4:d5:54:1d:ab:f4:3e:71:9e:
c5:f4:ae:4b:18:55:68:3f:70:95:b6:ba:d8:16:23:fc:0a:72:
3b:a4:3e:fc:5c:cc:f3:13:05:13:79:a7:41:ed:57:2e:02:bf:
9b:2d:05:36:52:3d:0e:78:bc:d6:18:da:57:49:b7:f1:46:67:
09:49:a7:7b:f9:c0:5a:bd:08:01:57:77:bc:12:df:1c:b3:c2:
21:fb:3f:ba:35:3c:55:67:3c:11:c8:ae:4e:76:85:16:d7:4a:
66:b1:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:26 2026 by rpki-client