Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: dw/RP7DweO+XpIjenJ4Ruwb2r+LD+QiRZtaDlCitjVA=
Subject key identifier: B5:81:CE:37:F7:6D:8E:00:4F:6B:73:D2:A7:E5:D9:E7:9D:63:0B:54
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 019D25F0F3135FFFE433FE7797C8BF44639F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: BvmjN1Ei-RdZ5XU4wyESLuA_jUA.roa (hash: ELi50YRUe877yWFfXU+gVz/inLW8fniMz5ZEj37kHhM=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: tiZNXAMv4+v/Ac3K+EgPhjlT1ozvTxXJ0Hv5Asd+WMI=)
3: yxoyiq6u244VKW72oii9uUiHB5w.roa (hash: jfOnDIC+Hn7PQuMw02CvW0H07qmgRK5GNbtZKtIIp2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f3:13:5f:ff:e4:33:fe:77:97:c8:bf:44:63:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=b581ce37f76d8e004f6b73d2a7e5d9e79d630b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:e3:00:f8:38:67:fc:d4:65:9f:15:79:03:
84:9b:fe:86:b7:f0:09:05:32:c0:f9:1f:62:db:65:
70:19:b9:f1:89:3b:70:0c:82:49:45:2b:94:9c:85:
b0:9e:0a:8c:25:b2:58:63:eb:3d:2f:05:fd:04:4d:
c5:08:f4:70:43:df:4b:9a:50:d5:a9:41:ec:ec:48:
88:c8:33:2d:f1:72:a0:dd:ae:e2:b7:57:90:21:81:
ca:4d:19:cd:b3:d7:b9:80:85:94:c2:d9:11:7a:b7:
7f:22:8d:ad:25:5c:01:ae:0a:5c:39:4c:bb:52:82:
52:f3:41:74:48:88:94:9b:78:4a:82:7a:5a:26:29:
74:6f:82:69:34:21:0a:31:74:87:59:8d:c0:b1:24:
c0:5b:6b:4f:37:3e:35:0b:6b:2e:42:c9:7c:73:ee:
89:7c:56:e0:81:53:4e:5b:58:55:97:c1:86:8f:cd:
37:2c:ea:da:db:e2:cd:89:f1:86:b6:dd:c7:38:36:
70:01:91:64:4b:e5:cc:b7:2a:0b:de:61:5c:17:1f:
a9:49:01:a3:57:db:2d:0e:25:98:6a:70:ae:64:53:
b7:26:2a:21:63:d0:4c:d8:a4:f0:c9:7b:0a:b3:e2:
6c:03:1e:03:9e:ba:45:c8:92:1f:10:89:bb:60:f0:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:CE:37:F7:6D:8E:00:4F:6B:73:D2:A7:E5:D9:E7:9D:63:0B:54
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:22:20:ec:18:84:a6:ca:98:99:1b:8c:d2:5f:36:95:2b:80:
75:f1:79:5f:5a:c5:b3:33:c1:c0:d8:d8:a3:a1:14:1d:95:e7:
ee:28:b8:1b:85:d2:14:f6:ff:f7:c3:c6:81:11:57:04:68:ff:
f2:cc:9d:70:33:7d:d4:48:66:6d:8d:ca:77:47:a6:42:57:03:
89:45:38:a4:77:22:af:2e:f3:c6:e6:6b:ba:11:4e:8f:ae:24:
08:58:cd:f0:7e:9f:ed:ac:fa:3c:d0:aa:79:97:04:5f:91:50:
30:fb:1d:9a:22:83:23:27:6a:e1:79:5c:31:4d:bc:8d:f0:37:
a4:ae:fe:0f:d5:73:69:70:47:bb:5a:de:6f:d4:79:15:92:fe:
0c:f1:00:e4:d0:c5:ca:ef:71:01:9f:17:59:c9:9e:a5:dd:e7:
e6:a0:05:a9:71:b5:bf:c2:df:77:6d:cf:ef:e0:11:bd:6a:7c:
8c:55:39:66:7b:13:53:c5:e5:d6:51:54:2a:b8:7d:76:04:8a:
56:49:f8:88:fe:d3:59:f8:b1:80:f4:79:8e:5f:5f:c2:9f:8d:
f2:4c:83:4f:74:af:56:3b:2e:a3:7f:d3:7c:bb:ce:a9:25:31:
69:b6:f6:27:d8:a9:08:03:26:cd:c1:3b:45:b8:8e:5e:de:d1:
bf:7b:ff:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:33 2026 by rpki-client