Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier: JG+coUmPqmo84IR4BVc8Vu5CgF/ITtzsj8SaWmVpAKo=
Subject key identifier: 5A:42:0A:87:6D:BA:52:37:93:69:B2:D6:34:E4:1B:66:22:9B:F2:85
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 019D25BAD46AF777A4AFE33EAEE386125CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number: 17ED
Signing time: Wed 25 Mar 2026 16:01:34 +0000
Manifest this update: Wed 25 Mar 2026 16:01:34 +0000
Manifest next update: Thu 26 Mar 2026 16:01:34 +0000
Files and hashes: 1: BvtEp7ZykJYdaMqo7blsUuKtvPY.roa (hash: JWrGFKwI8ZmYJkc5AseOHeCw/Nb3xRt6/+xGW3jCg44=)
2: d9IYgCb4O0zZISXP4tK4QuK4cvs.roa (hash: jBG8EC6qVRrjvDS0o4yvkb3drCofFVHmM9LgSbzRM0s=)
3: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: qF2NBiMaReMCZr/zW4Yx6yxZzSclyHk7wgd7JZl1O/M=)
4: zKQ09Wpk_sKjI1YhqBd22SglJPI.roa (hash: sGEPj5oiG+Z1hsWttL/M7GZNmLLDhgxlhH4HT0fE8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d4:6a:f7:77:a4:af:e3:3e:ae:e3:86:12:5c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Mar 25 16:01:34 2026 GMT
Not After : Mar 26 16:01:34 2026 GMT
Subject: CN=5a420a876dba52379369b2d634e41b66229bf285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:a6:5d:bd:4e:6c:e9:c4:2c:7c:47:a7:0f:
d1:5b:12:48:c0:04:49:39:a4:3e:ae:66:1f:a8:46:
17:e1:d0:cc:58:7f:a0:38:2d:bf:8d:c1:f8:9e:3e:
9f:1b:91:ed:4c:25:2d:35:93:36:a6:30:3b:d8:2e:
1d:22:8b:6d:e4:c6:46:99:7c:4a:18:16:6b:e9:eb:
f8:b8:6c:2a:50:b1:da:3d:ab:23:e0:09:e3:9c:17:
d6:d8:5a:2d:5e:7a:62:4e:f0:eb:1e:31:1d:e6:2a:
1b:ce:15:8b:8c:69:1f:4e:98:6f:db:69:9d:31:48:
c8:fc:58:f3:7e:cd:0e:96:fd:13:25:a9:45:0f:ab:
b1:27:ba:ca:01:57:07:ec:79:e4:40:ed:ae:e0:bc:
a6:b2:ea:66:b7:40:2e:a0:66:30:e6:89:7a:d6:83:
c6:8e:8e:8a:fd:21:13:ad:2a:6e:ae:b1:4b:d4:f8:
89:ee:b4:6b:93:be:43:17:2b:11:98:92:b9:e9:75:
ed:89:29:ad:a3:ba:7b:a8:24:44:4f:0a:82:d2:e1:
cc:28:eb:4e:cb:f1:b5:6d:21:94:7a:89:26:4e:d8:
9d:a5:b8:75:2f:24:30:0d:e5:39:0f:ed:91:78:ea:
3b:c2:c0:46:e3:c7:df:50:22:05:31:f0:47:9b:31:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:42:0A:87:6D:BA:52:37:93:69:B2:D6:34:E4:1B:66:22:9B:F2:85
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c1:94:23:66:f1:70:cd:03:ec:b0:26:af:cd:0c:2e:0d:f2:
5b:97:d4:df:50:4f:a2:90:e9:29:c7:80:ac:df:c3:4c:0f:8c:
2a:3e:fb:00:c2:26:93:ea:28:91:e0:d8:06:2e:17:59:b3:ad:
1c:5f:2e:75:4b:28:51:35:0a:11:ad:6e:db:86:28:16:04:a1:
c8:7d:0c:83:b7:30:2f:28:64:89:aa:a5:60:99:81:0a:e1:e2:
f5:8e:09:3d:e6:12:ff:67:9b:e2:33:51:fa:f3:a1:ad:eb:a0:
db:1c:61:f2:48:dc:98:10:85:92:b7:f2:59:fd:58:db:c6:6a:
86:dc:c2:9f:8e:c2:21:4c:ea:87:b4:d0:ee:00:f9:42:0b:ce:
63:18:2e:42:3a:f9:f5:55:c7:6e:87:2f:bd:a1:e6:19:9d:87:
b7:ae:19:a8:e0:fa:da:03:c9:f1:57:2b:b3:f7:ba:2b:30:b2:
70:48:5c:6c:1d:65:4e:9f:d6:09:df:fe:74:b7:95:3f:06:c7:
8f:69:c8:13:84:be:d4:2e:ca:43:e1:20:eb:fd:8f:a3:93:b5:
47:7b:58:a3:ef:37:15:35:83:cf:64:b7:13:da:8d:6a:5f:74:
6f:96:5b:51:e0:d4:76:e3:34:32:a5:e6:b6:76:90:35:47:ff:
ca:12:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:05 2026 by rpki-client