Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: uv+vLtuP9IIxZL816lVtSVZZFXiWxT2wnvMD5UBA3Gk=
Subject key identifier: DF:CB:AB:06:D4:36:FB:D0:78:80:69:6A:6D:86:F6:19:CE:FF:75:23
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019D28BBB66A7AE238CE19D1F8737F2FDB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1860
Signing time: Thu 26 Mar 2026 06:01:23 +0000
Manifest this update: Thu 26 Mar 2026 06:01:23 +0000
Manifest next update: Fri 27 Mar 2026 06:01:23 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: 00RPtqPncyRwYMwnpjhoJdkOSGrkaStOcYiYZjoe904=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b6:6a:7a:e2:38:ce:19:d1:f8:73:7f:2f:db:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Mar 26 06:01:23 2026 GMT
Not After : Mar 27 06:01:23 2026 GMT
Subject: CN=dfcbab06d436fbd07880696a6d86f619ceff7523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:96:04:22:a6:5f:c4:0a:25:49:91:93:0c:
16:f4:b0:8a:ca:59:03:5b:e3:6f:e7:95:b4:8f:35:
66:57:92:91:b2:62:53:50:05:ab:95:c1:b4:7f:15:
42:b8:c2:dd:b2:e7:a5:af:f1:91:e2:c3:fc:cb:25:
5e:19:d9:ef:d9:77:c4:83:dd:25:ed:36:44:33:3a:
e8:08:2b:bf:89:56:22:92:e8:4e:b6:96:d1:74:e2:
83:73:7d:2a:75:a9:d2:6c:65:cf:99:79:5d:36:dd:
6c:04:8d:31:0f:ca:9a:08:b2:0f:7c:72:92:38:b3:
dd:7f:d6:53:91:8b:54:61:b2:69:41:ce:d6:59:86:
1d:8f:9d:7a:07:2d:4a:69:ec:f0:9c:38:ed:36:35:
7f:87:21:45:e0:05:bd:07:72:f1:7b:8c:fb:86:3b:
a8:20:0f:3b:2b:6f:92:3c:e9:31:83:c3:f6:2d:ad:
66:1c:55:b6:2b:0b:68:72:5b:02:c1:e2:47:8d:59:
22:42:91:66:07:fc:8f:2a:95:3e:22:e4:ef:6d:df:
e7:a3:4f:62:c0:4f:65:f9:78:27:7f:b7:b5:1e:25:
c0:40:a7:5f:da:58:22:93:ed:2b:cb:bf:77:bb:47:
19:d7:83:ea:70:77:dc:5f:89:bf:7d:05:65:0b:2f:
16:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CB:AB:06:D4:36:FB:D0:78:80:69:6A:6D:86:F6:19:CE:FF:75:23
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:61:ec:21:a1:49:46:04:d4:1c:71:22:cc:84:82:70:00:24:
6a:a2:9c:40:58:4c:fe:b8:a3:68:9b:6f:3b:c4:2f:83:99:e5:
e5:a2:8c:f4:db:5d:ba:de:4b:e8:87:61:41:e7:13:da:f7:70:
4c:3c:b5:04:65:7a:9b:5a:16:cb:ab:42:d3:60:d4:91:15:ef:
29:de:ee:38:b7:e5:b9:00:64:ed:69:1e:4c:66:b1:30:53:f7:
04:26:47:8e:40:fb:db:aa:02:d7:5b:40:2d:41:52:0a:ac:a8:
28:a2:0b:86:89:d8:d3:fb:00:3d:46:be:88:cd:89:05:b1:94:
e0:f9:de:d5:be:89:8e:89:03:68:ab:f7:82:49:9e:ee:f0:10:
4c:08:84:86:6d:49:fa:83:52:2d:c4:6c:69:93:7c:06:29:37:
e8:bf:22:cb:f5:9d:4c:ad:28:bb:f4:2b:3f:17:fa:e6:d5:6b:
d2:54:40:7a:9c:c2:38:66:8c:ec:76:df:c4:b5:d6:2b:8b:1b:
e8:e1:3d:f3:d9:25:ab:d9:37:96:71:ca:61:23:f2:ae:1b:41:
7a:01:1b:c7:5b:cb:6e:d1:f5:7b:82:28:6d:fe:e2:be:a2:c9:
6e:65:e3:71:ba:72:0c:71:fb:77:11:de:bf:8c:4a:2b:ce:fb:
cb:43:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:20 2026 by rpki-client