Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: lLYI2hf/JquzRpk3a3ACQyICP496AMaihTzSec7zQV0=
Subject key identifier: 4B:6B:2D:51:C6:0B:4E:92:C2:43:45:9C:33:1E:E5:A3:EA:2B:79:2C
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 019D25F1C5EAB971AC2A6F2181EDBAECF42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 17:01:34 +0000
Manifest this update: Wed 25 Mar 2026 17:01:34 +0000
Manifest next update: Thu 26 Mar 2026 17:01:34 +0000
Files and hashes: 1: PZcwljxkluLyPsCu5IOqcb5bfu0.roa (hash: 74prXbYhNn50EgwVIKtgiNZLNDDm+6LO8raCktKadFM=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: e8uy3edqRU1KUkjLJNlSG9rD5zCrmdBoTdromS7oiQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c5:ea:b9:71:ac:2a:6f:21:81:ed:ba:ec:f4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Mar 25 17:01:34 2026 GMT
Not After : Mar 26 17:01:34 2026 GMT
Subject: CN=4b6b2d51c60b4e92c243459c331ee5a3ea2b792c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:ed:85:2a:02:bf:3c:0c:59:44:7a:fb:ef:
5c:40:5c:74:7a:48:65:d4:56:1e:49:0d:61:d3:b0:
d7:d8:81:02:e9:c1:8c:40:1f:9c:3a:a0:c1:5e:75:
82:c4:29:11:65:1e:02:37:a5:39:b7:4c:2f:f1:dc:
3c:40:ea:bf:84:56:3d:fd:ca:fc:43:07:81:d9:16:
07:76:73:b5:e7:cb:66:6a:9a:d5:59:8b:24:94:ca:
09:65:18:b1:a7:86:b8:a1:53:44:4a:23:33:af:96:
aa:fe:ee:34:40:82:00:a6:f7:fa:0a:36:83:cf:4d:
23:c9:2a:7e:eb:61:32:02:d7:f0:9f:d7:dd:90:f5:
53:d9:6b:75:09:28:6c:d8:f5:ab:72:f6:22:ce:54:
b4:f7:97:bd:fa:b6:7c:e3:84:2f:7d:ee:ed:fc:3b:
92:68:d1:0e:f9:ab:15:aa:1e:15:23:f4:ab:11:c8:
7d:ed:97:f9:f0:69:c7:5a:0b:61:1a:19:43:f1:95:
3f:a4:be:d6:23:c7:03:f1:00:48:b4:d2:51:65:b3:
64:5e:13:00:a6:92:a4:9e:46:dd:d1:14:5b:2f:28:
1e:e3:6b:e8:0d:66:c2:28:d0:5f:d1:41:0f:5a:b5:
08:6d:e6:ad:e3:f4:ab:0f:89:60:28:a0:0b:c6:d7:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6B:2D:51:C6:0B:4E:92:C2:43:45:9C:33:1E:E5:A3:EA:2B:79:2C
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:12:40:c0:84:74:5d:db:8e:93:73:62:f3:b4:a1:1c:12:9d:
96:e5:e2:ad:3f:e5:c3:e8:d4:1b:36:2c:3e:e3:f3:b4:da:87:
93:5e:03:94:79:1a:20:fe:aa:1d:93:83:a3:f6:ae:a5:95:dd:
72:3c:52:8c:d7:d6:43:33:b7:c5:3a:90:a7:75:0e:56:ec:3b:
3a:2b:a5:96:6c:f8:8f:c5:a6:0c:89:37:6f:7c:5f:cb:5b:bc:
c7:67:a4:8b:f5:69:00:12:c0:27:f5:4e:5d:90:25:5a:3b:e2:
06:b0:b5:00:03:dc:0f:66:f0:38:6a:19:19:21:08:b1:99:6f:
73:e2:1c:ad:39:bb:e7:be:89:cb:ea:d5:61:83:f4:ea:c4:ff:
56:3b:a9:81:80:5c:35:21:3e:19:7b:d6:a4:7d:06:4c:2a:f2:
77:f9:fc:7e:30:91:cd:1d:db:13:db:d5:b5:30:86:03:53:30:
ab:33:53:d4:d1:8f:65:3c:48:43:bb:b4:81:f2:62:dd:4d:30:
cc:8e:24:06:14:06:e5:e2:9a:96:99:32:ca:97:3d:df:4a:81:
71:21:93:4c:ad:a9:f0:1a:46:50:aa:f4:92:a1:59:ee:7b:6a:
79:b2:1b:66:2c:14:15:26:f1:f6:24:e6:b3:3a:91:92:67:38:
4c:e9:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:00:01 2026 by rpki-client