Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
File: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft (raw, json)
Hash identifier: ju2jvR25J3NgHoL/SwzOnBVOvNSXUYwHOu+auEGKl6o=
Subject key identifier: 5B:8D:A0:40:32:E9:00:5F:B0:33:E2:61:C4:3A:CF:92:43:67:19:C4
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 019D25F1DA57E9947E7F090F3BAB50A037A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
Manifest number: 0955
Signing time: Wed 25 Mar 2026 17:01:39 +0000
Manifest this update: Wed 25 Mar 2026 17:01:39 +0000
Manifest next update: Thu 26 Mar 2026 17:01:39 +0000
Files and hashes: 1: aVvwIvFhIA2YyxZBLI9kzTJE_PI.roa (hash: Mj+NFBQcENFWKW7e7z2aigtw4XOb5IdgmVCiSgTc5lY=)
2: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl (hash: xzrAfMRiU1k/aLJl/I0oeENDxPQHNNVEB0gEw88gBcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:da:57:e9:94:7e:7f:09:0f:3b:ab:50:a0:37:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Mar 25 17:01:39 2026 GMT
Not After : Mar 26 17:01:39 2026 GMT
Subject: CN=5b8da04032e9005fb033e261c43acf92436719c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:10:b4:7c:48:ca:fb:41:52:d0:29:2c:10:
0b:d5:15:b1:c0:c5:af:dd:0b:07:d4:1b:02:1f:05:
6e:9e:f1:bd:49:3d:19:14:66:27:3b:04:40:b2:7f:
bf:d6:83:e0:4e:6f:ed:d2:6f:26:5c:8b:84:5b:31:
d8:88:dd:bd:2e:d3:e3:24:54:97:86:58:ca:3c:1f:
34:0a:5e:24:c7:fa:be:9a:e8:21:28:3a:1f:19:da:
33:1f:24:05:ee:29:76:e6:46:d0:d4:c4:a0:e3:a8:
89:c4:32:ae:54:57:f3:40:d5:94:b2:06:85:a8:f3:
06:98:86:ec:45:55:63:b0:03:da:0b:e0:db:6c:d2:
4a:bf:38:11:a5:b6:0d:31:91:ff:65:40:ac:5b:77:
ec:2e:1b:e1:0d:5c:da:16:cd:b7:6c:83:07:9c:84:
6e:ff:55:0c:ed:77:d4:76:f8:f9:f9:d2:56:2c:62:
44:71:9a:af:1a:b4:9e:14:9a:cd:54:43:16:ff:e9:
6f:d9:99:ea:ec:2f:6e:88:c6:47:8b:27:e4:50:4a:
f7:14:1a:32:18:36:64:09:3b:6e:07:d4:c4:7f:3c:
92:95:a6:a3:d7:83:08:e1:56:b6:7e:c9:c1:3d:c4:
57:49:d6:08:35:4b:29:ed:1a:6d:ba:32:a5:c4:ae:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:A0:40:32:E9:00:5F:B0:33:E2:61:C4:3A:CF:92:43:67:19:C4
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:44:a6:db:0b:be:f8:eb:21:b8:16:ca:cd:48:89:b3:ed:1c:
38:90:62:c6:e2:b3:75:6b:74:44:49:d9:ec:78:49:88:bc:cb:
c0:0f:66:91:18:e9:5a:2d:78:4d:24:5a:df:3d:c3:e4:30:2f:
ea:75:77:27:96:86:5f:c4:c7:89:bb:86:4e:c4:ea:8c:cd:a8:
53:43:1c:75:c7:b0:c2:dd:9d:ed:5e:8d:de:39:01:aa:8a:f4:
3d:ac:e9:de:6a:8f:96:16:f7:27:ee:40:3f:9d:cf:af:cf:a9:
d0:9f:41:4c:7b:12:0b:0b:31:e0:79:29:d3:d9:86:49:2c:d8:
ad:b3:14:71:78:96:12:30:fa:f3:cb:bb:27:ec:69:42:e4:1d:
36:a5:9f:70:49:12:07:26:5b:c8:a7:f5:64:9a:80:fa:73:0d:
52:6d:03:77:f8:38:e7:4d:dd:58:a2:d4:fe:14:26:46:22:eb:
10:28:af:b1:a0:90:7d:45:92:e3:71:af:51:f7:55:36:8f:2a:
39:3d:3a:85:57:89:be:b9:66:51:24:3e:06:7a:5a:0f:82:86:
e9:be:11:d7:f9:bf:47:62:26:40:cd:58:a2:6f:98:36:7a:c1:
c1:11:ae:35:d0:55:ee:15:d2:84:89:00:28:f9:a2:b3:3b:8c:
45:45:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:48 2026 by rpki-client