Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: konmZhbZze9Qji2MMdB4UOjjGYi4nrOOoOPcNrWlR6c=
Subject key identifier: 46:55:D3:D4:B2:A4:22:A3:54:B5:4B:DC:FE:62:4E:3E:7B:BA:07:7C
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 019D2AA93357E166AF4AA917D2BA929A7112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 0475
Signing time: Thu 26 Mar 2026 15:00:24 +0000
Manifest this update: Thu 26 Mar 2026 15:00:24 +0000
Manifest next update: Fri 27 Mar 2026 15:00:24 +0000
Files and hashes: 1: BXXFULcigDb5p-TWyxWoIQ6jZxg.roa (hash: +TJHe9rjVEZ47iPSt4ggCrDY9EnLTa/nFFdzzuzo8HA=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: jnRrfHBhDILPFpaPFy5xFomCHuFLml5+ibbLYUf4ifo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:33:57:e1:66:af:4a:a9:17:d2:ba:92:9a:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Mar 26 15:00:24 2026 GMT
Not After : Mar 27 15:00:24 2026 GMT
Subject: CN=4655d3d4b2a422a354b54bdcfe624e3e7bba077c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:42:92:fa:a7:72:03:2d:ad:9f:68:5b:3d:
25:2a:a2:a1:44:43:7b:c0:0e:cb:5d:0d:25:c7:77:
15:e6:8c:d7:6d:81:d6:4d:8d:9c:29:b9:90:f1:89:
7b:22:0c:89:2f:ff:3c:62:fe:8f:6d:c6:28:cf:cc:
30:7a:97:d8:29:f6:9b:44:9c:7a:b7:61:5d:99:aa:
36:e1:fe:d8:14:fc:2e:06:05:dc:38:00:af:b3:24:
ef:fe:7f:96:de:68:d9:3c:8f:54:e0:96:13:2e:70:
1c:4b:a2:09:94:34:7f:64:72:42:26:73:fb:20:e6:
70:7e:b4:93:4e:f8:d2:1f:65:61:41:4d:2d:70:cd:
c2:89:87:74:9d:66:0d:c4:ab:c3:e9:9a:4f:56:1c:
ec:b6:74:12:ac:d4:82:93:a0:2c:75:b7:d5:c0:e2:
44:79:5f:7a:5a:bb:ac:0f:ca:4e:2d:d9:fc:14:6f:
4a:9b:d8:52:6d:b1:34:6c:76:3c:cb:26:28:33:de:
93:e9:e7:26:43:b2:67:d5:9b:27:86:48:72:e1:f5:
53:10:3f:fa:ff:b4:0a:4b:87:84:17:a9:6b:9b:ab:
60:ef:0b:7f:38:44:99:64:8a:40:d0:0e:f4:41:b2:
e6:21:72:db:0e:9d:6a:c0:7b:bc:93:9b:45:e0:37:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:D3:D4:B2:A4:22:A3:54:B5:4B:DC:FE:62:4E:3E:7B:BA:07:7C
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7c:01:c1:f7:56:66:ef:cf:c5:08:16:2c:0b:20:1d:b8:2b:
31:b6:5e:90:53:a3:af:29:fe:f1:17:39:5c:75:b7:e6:51:bf:
b1:61:99:89:81:bc:0d:07:7f:7d:bc:cf:07:cd:d8:14:ae:29:
de:20:1b:f3:89:af:8b:b4:39:0b:be:23:11:11:5d:59:aa:b8:
9c:8c:4e:9d:be:f9:a4:1c:28:52:8e:49:e1:85:d7:ad:13:05:
0b:48:fe:f2:71:e7:45:7d:b2:a7:49:48:9b:a0:53:0a:27:70:
b5:70:46:51:3f:18:65:46:87:ad:ca:5d:29:7e:53:e0:0d:6c:
77:f6:c4:10:06:46:15:ab:ee:30:d7:33:2b:63:2c:88:60:48:
d6:7e:5a:85:55:31:60:6e:b6:fa:30:44:b1:09:c7:2d:68:bd:
cc:97:cd:f4:7e:f5:6e:22:4a:65:cf:86:8c:9b:96:3c:87:3b:
0e:59:0f:a5:2b:11:2c:68:9e:51:e8:26:cb:33:22:65:69:99:
4e:81:4f:8a:96:af:8d:cb:9d:1d:2b:58:18:83:4e:90:2f:49:
cd:07:e3:a1:76:a4:f3:90:49:09:a7:20:59:91:8e:f1:71:d0:
70:bf:8a:3a:5f:a5:42:c3:34:60:7d:c3:27:28:c2:96:b3:e2:
bf:27:f2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:50 2026 by rpki-client