Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
File: qklDGDthG-Ogd1OCUJSQBIsK1zg.mft (raw, json)
Hash identifier: zwrxiVDI0ilA6nkvwetSi0Ss61IsfzcHpxLjVF+a/uM=
Subject key identifier: 84:29:84:7D:5D:85:5A:05:33:36:08:29:DB:34:65:33:95:BC:32:A8
Authority key identifier: AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
Certificate issuer: /CN=aa4943183b611be3a0775382509490048b0ad738
Certificate serial: 019D29608113D525C3441E83ABC921CBD405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:23 +0000
Manifest this update: Thu 26 Mar 2026 09:01:23 +0000
Manifest next update: Fri 27 Mar 2026 09:01:23 +0000
Files and hashes: 1: 979-UeeMesUYtKwgSXJYqxuZCeQ.roa (hash: Gy12Ft/uLr8x9z8NPGEB7zTkTDi5D4+71v/AaSEGb9w=)
2: qklDGDthG-Ogd1OCUJSQBIsK1zg.crl (hash: BozzaG01LlUBKn7RIhtpGRHxJXm9Qt7rlbyKY4x+jVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:81:13:d5:25:c3:44:1e:83:ab:c9:21:cb:d4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4943183b611be3a0775382509490048b0ad738
Validity
Not Before: Mar 26 09:01:23 2026 GMT
Not After : Mar 27 09:01:23 2026 GMT
Subject: CN=8429847d5d855a0533360829db34653395bc32a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:f0:ee:ba:8f:5c:dc:84:e0:09:44:53:f7:
cd:4e:21:78:9d:da:74:a2:f9:99:a3:cc:a4:fd:a1:
d6:39:66:b5:3a:b2:64:5a:3d:8b:1b:db:32:9a:77:
fd:68:19:eb:6c:1e:80:51:68:9d:14:36:28:4a:ef:
30:52:40:49:b8:a5:77:12:18:43:97:99:97:4a:3b:
98:f3:0a:8d:e6:65:3c:1d:4c:83:46:4a:86:98:5e:
a1:65:e9:4c:53:f3:12:6d:31:d8:0e:5e:b5:a6:b9:
c5:45:de:cc:29:37:c1:0b:2d:7b:25:27:0e:49:1b:
7a:65:4f:df:54:4b:42:91:fb:7e:aa:29:7b:93:49:
02:14:82:fc:1e:19:e3:0d:a3:65:cb:d7:4c:35:a9:
e5:cc:d5:b6:e2:76:91:d2:47:e3:bb:40:03:3b:bb:
b5:9c:c3:8e:51:b0:d5:17:b2:fb:53:6e:da:4e:42:
a8:5f:9b:52:3a:ad:55:fd:f9:30:d3:35:5c:4c:c8:
a7:ff:99:61:99:c1:0c:fb:be:cf:d5:52:5f:08:29:
85:c7:dd:84:43:0e:ff:82:ba:f4:8f:ca:d0:c9:ec:
7c:95:16:4d:41:2c:9c:ed:8d:9d:a9:54:7f:66:f2:
65:13:69:16:52:c5:ef:ce:26:78:8b:d0:50:29:c0:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:29:84:7D:5D:85:5A:05:33:36:08:29:DB:34:65:33:95:BC:32:A8
X509v3 Authority Key Identifier:
keyid:AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e1:b1:a6:b5:48:d8:8f:cb:ad:a1:d6:ca:d0:b3:6b:96:e9:
7d:b0:e2:4a:8e:35:cb:22:2b:ff:10:7e:d3:91:47:e0:0b:4d:
a4:d3:97:cb:3f:c6:3e:cd:62:df:2d:b2:6f:94:8a:2a:a7:94:
1f:c0:78:f9:e6:35:8a:46:b5:42:5d:76:c4:a5:1a:2f:1b:44:
f8:e7:04:d7:ed:12:7c:ec:cc:2e:83:ac:87:13:6a:7b:52:89:
67:bc:9e:8c:f6:ac:dd:b8:82:74:c6:8e:ac:ea:1d:01:1a:91:
54:81:ed:f0:b3:ee:f0:77:f9:92:1f:8a:7a:f3:c4:ba:b2:75:
22:07:83:62:f0:c2:e9:32:9a:80:10:fc:43:04:ac:15:68:d9:
75:22:dd:10:fb:4d:c2:49:c1:b8:5d:c7:51:e6:ee:fc:a5:df:
b3:96:fe:2f:ed:f2:ea:bd:3f:85:38:2a:1e:42:4e:0a:aa:e5:
c9:a9:f5:16:75:35:6a:a8:c5:a7:41:64:61:77:e0:93:e2:ce:
da:5b:13:7b:0c:d8:6c:7f:a9:fa:7b:7f:0a:e2:50:35:c8:00:
e6:b6:70:b8:99:6a:66:b4:4a:f1:19:d9:2c:0b:3a:aa:5a:8d:
f4:1f:95:75:97:35:cf:56:3c:05:eb:60:2b:76:e9:17:05:85:
08:e7:bc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:04 2026 by rpki-client