Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: 5iE4AUYZTR25jrLNiOLtkp8O98A1oiIY+TFDAi7NB/M=
Subject key identifier: DE:1E:6D:CF:C0:2B:26:68:79:79:94:0C:B7:60:8A:AF:9B:EE:86:38
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 019D2704CEB5BF227F85B5381021E5B96FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: 0ECEewsHbpx9zU1JX2DIun14wc4.roa (hash: 3xUQ5J+uKoXf2K0tx/gaMVdbcJCYxizBzW4f58o5Lj4=)
2: nwtdhhsA3tvO15UW5ngy7VolYDA.roa (hash: jJBsatbPceBiOY7mvKtU7D/vsxD74iAJJTBCJFC0Hqs=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: iTNLQdtTulwMHVIbik4CMd+jmIw7unUL9o9JcJPUu3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ce:b5:bf:22:7f:85:b5:38:10:21:e5:b9:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=de1e6dcfc02b26687979940cb7608aaf9bee8638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:f2:b2:5d:ef:89:ff:c7:a6:92:e9:cb:08:
70:3c:f7:a0:fe:42:bb:c8:ab:2c:b1:18:6a:bd:b0:
22:61:70:de:d1:4a:9e:e1:52:c8:59:a2:85:15:30:
2f:33:2d:b3:18:c5:22:d9:38:ad:02:23:d4:6f:00:
bd:83:a0:73:a6:d5:14:3e:63:5a:8c:66:e1:05:07:
be:66:7d:99:fc:f4:d5:68:31:9d:b6:9d:38:cf:f6:
a2:34:a6:87:32:3c:de:0d:39:d9:d0:d0:ea:5b:b5:
07:c5:c1:77:f1:58:72:dd:84:e4:e0:52:24:70:97:
75:57:bb:fd:9c:d8:73:66:92:b1:d9:04:99:4e:4c:
c9:f9:7d:93:20:54:6f:1e:42:a8:13:a4:18:a8:52:
f6:c5:69:3f:a7:53:46:f8:35:f3:bc:c1:06:01:8c:
c1:6a:8c:cc:ec:41:4a:78:13:35:1f:7e:b7:1f:d2:
84:39:df:25:af:00:f9:03:d8:b0:fc:0c:ab:52:4d:
c1:23:75:d1:b7:d0:94:b7:62:51:5a:d8:90:ca:e6:
91:a3:e3:12:e3:05:85:38:49:de:c0:c2:bd:63:2f:
e1:4a:b7:02:d5:77:9a:36:8f:b7:49:08:90:64:f3:
be:31:51:ea:b9:14:55:8c:8b:62:47:55:2d:7b:ff:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:6D:CF:C0:2B:26:68:79:79:94:0C:B7:60:8A:AF:9B:EE:86:38
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:18:bb:98:64:29:83:48:9d:ea:67:61:f7:80:a2:6f:ef:4d:
38:85:bc:d8:bd:64:4d:e3:ae:c1:d9:c5:4f:45:c5:5e:7e:8b:
07:0f:f7:0b:37:02:c7:4b:cc:b8:dc:9d:a8:10:89:3c:1a:72:
f2:7c:db:81:78:d3:d0:c9:8f:c8:dc:22:43:f9:dc:22:6b:a0:
99:18:b5:fb:da:53:88:66:b9:a6:97:e8:bf:19:f9:c3:de:79:
9c:20:ec:28:88:55:78:7c:5d:44:7c:91:bc:f9:5e:30:7e:5e:
3e:bc:b0:9b:cd:18:13:88:5c:88:97:36:5b:91:21:24:1c:64:
4a:67:96:4f:f7:06:a0:f6:ea:22:51:a3:4a:f2:7b:06:bc:a0:
cc:f7:ad:66:9a:56:64:8b:b3:e7:35:f7:76:23:22:36:35:bf:
c5:22:c4:a2:ce:da:41:59:26:01:f0:39:4b:ab:5f:07:82:32:
4e:a9:d9:e5:44:25:02:c0:a9:de:d1:60:9f:e9:e6:cd:19:24:
04:03:d7:dc:36:88:cb:4a:ea:0a:e0:20:c5:b1:98:3e:5d:a3:
6c:a9:df:82:e8:06:30:4b:08:47:0d:54:cd:f6:78:55:6f:17:
ac:8a:62:f8:2b:15:67:c6:ee:3d:4e:ec:85:e3:41:9f:47:18:
f2:b5:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:34 2026 by rpki-client