Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier: CMXrLRYJPPBprq7QY341o4pzvYwm+Olfr0ckt8qAIWU=
Subject key identifier: F7:85:9E:31:86:E7:3A:41:EE:34:5B:48:E5:87:D1:95:32:BE:CB:F6
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 019D26CD438C43892C74CD4411DD60EA0679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:19 +0000
Manifest this update: Wed 25 Mar 2026 21:01:19 +0000
Manifest next update: Thu 26 Mar 2026 21:01:19 +0000
Files and hashes: 1: agl7At-sGTLsDTh6fIsNcYqjRVI.roa (hash: kdWoOhR4/BvlVOKr5PU254MlzFegaJ4FGVoYgfo0kq0=)
2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: N15FgCWMiZLxAvnt5FCCWLajxzSKhwD3k62cuL1rZiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:43:8c:43:89:2c:74:cd:44:11:dd:60:ea:06:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: Mar 25 21:01:19 2026 GMT
Not After : Mar 26 21:01:19 2026 GMT
Subject: CN=f7859e3186e73a41ee345b48e587d19532becbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:a7:b1:dc:9b:72:5d:1a:1f:d2:f8:a6:48:
ae:9e:49:e2:49:80:eb:5c:f6:c3:0f:30:53:99:01:
90:58:1a:f5:83:d6:26:73:9b:48:6a:93:2c:58:b4:
16:48:97:bc:0e:8a:fa:ca:92:7c:e1:e6:d4:70:7d:
c5:4f:2b:c1:4f:94:fd:61:6a:8d:6b:fb:8c:5f:7a:
05:85:91:86:99:f8:0e:0f:56:a7:dc:b9:38:cd:7e:
80:33:ff:8a:80:85:20:c9:6a:b7:cf:95:24:cb:2f:
11:47:06:3e:7c:fb:c9:60:40:63:d0:fa:ac:9f:4e:
2a:3e:bc:05:6d:dd:7e:1d:ce:6b:21:14:c4:64:df:
28:54:04:ee:68:86:a6:21:58:44:e1:62:df:79:52:
b5:9c:ab:52:43:8e:48:a2:5a:79:e0:1e:8e:6f:5a:
8e:89:1f:c5:ec:d6:91:67:22:5b:be:d6:22:55:d1:
16:7f:af:13:c6:af:29:14:68:fd:f1:c7:10:49:17:
6e:bc:1a:11:b9:9d:b5:18:c0:50:32:6f:db:55:23:
38:35:67:ef:32:25:5c:3f:a1:3b:6d:f5:96:3f:00:
07:08:f8:6d:2d:f3:b9:f8:fb:be:8e:7e:94:d5:2e:
d9:f8:a4:4d:97:05:e1:7d:ba:00:20:a6:7e:32:4e:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:85:9E:31:86:E7:3A:41:EE:34:5B:48:E5:87:D1:95:32:BE:CB:F6
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:73:6c:20:6c:ff:e1:f2:4f:9c:a4:2f:ee:a2:f6:cd:dc:80:
01:bf:f1:db:58:06:27:f4:c9:84:d3:04:32:50:fa:96:1c:33:
c9:c7:ac:cd:5f:19:8a:ba:98:ac:6f:55:db:84:2a:1b:f5:8d:
61:47:e8:2f:90:03:6a:40:99:91:65:89:20:93:70:71:d4:6c:
22:6a:71:02:96:01:50:78:02:57:7b:fc:06:44:4a:6c:d9:f5:
59:7e:a6:b0:f7:22:74:16:c3:75:fe:88:ff:90:c4:59:32:2b:
ed:ab:8c:77:fb:63:cc:46:13:f2:46:54:1a:33:ad:f7:1d:43:
d1:61:66:59:28:e3:d6:af:6f:c3:5b:3f:ea:8b:2f:1f:70:43:
94:a3:b6:de:ac:38:2e:c2:84:3e:07:cb:1c:b6:45:a4:26:f0:
5c:3f:78:3a:4c:c8:9b:08:92:7a:70:80:9a:10:60:84:f1:2d:
30:bd:1b:e7:40:65:0a:10:91:11:03:ba:02:cf:76:f9:72:9c:
b7:0f:6a:01:9d:96:3e:9d:07:67:61:b2:69:74:ea:94:41:49:
c0:89:39:50:bb:39:72:58:a0:f8:d3:1a:87:ed:ed:c2:44:c7:
5e:48:85:69:40:e8:68:a5:47:98:71:86:23:35:6a:ac:cd:67:
70:79:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:19 2026 by rpki-client