Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: aWCuzp2EENTP2qlaDmi68U3mofw6E7GLHnMZXp7kg7U=
Subject key identifier: 96:CB:3A:12:E1:35:D3:C0:9C:EF:A0:3B:2D:1D:BB:81:9E:0E:3E:67
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 019D265FFE4E8B9E99C88A80F64D2D03E762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 19:01:58 +0000
Manifest this update: Wed 25 Mar 2026 19:01:58 +0000
Manifest next update: Thu 26 Mar 2026 19:01:58 +0000
Files and hashes: 1: HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa (hash: VJAIFmjRG0CrMBQmMTvTyvzSn9UbCMce42aoZ7KBzXY=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: ijivIhdu1hAkv1GdliGqplpTw3RJwo2vsPg1eotx4T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:fe:4e:8b:9e:99:c8:8a:80:f6:4d:2d:03:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Mar 25 19:01:58 2026 GMT
Not After : Mar 26 19:01:58 2026 GMT
Subject: CN=96cb3a12e135d3c09cefa03b2d1dbb819e0e3e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:83:a5:69:52:05:a9:2c:e3:33:02:09:23:f7:
c8:55:66:58:9a:96:a7:b6:3d:e1:16:cf:ea:52:15:
32:98:39:55:a4:14:41:40:76:43:75:0b:71:35:e5:
7b:36:b6:a9:38:d7:cd:b5:c1:01:8d:a6:e7:72:2a:
85:e1:eb:96:23:ca:c8:d2:62:1c:36:e6:ef:e3:b0:
65:e9:35:9b:ad:c5:ae:1b:2d:29:98:04:6c:1f:83:
55:83:a2:fc:9a:fd:33:23:fd:19:3e:95:78:a6:e2:
b8:d5:44:23:d5:6b:7e:12:f2:dc:34:e3:ae:4f:36:
d4:fe:9c:81:40:4d:5d:fa:d7:c5:bc:6e:7f:98:03:
4f:ea:8a:1a:c3:87:2b:af:47:1e:58:60:07:5e:2f:
ec:25:04:05:91:e4:e4:24:9a:a0:6f:d5:9d:6c:6e:
15:35:d5:29:8a:10:3a:e0:8c:10:f4:d4:55:ff:3a:
60:18:f0:5b:fd:9c:28:b9:09:81:fa:c3:54:b2:58:
f6:31:7c:07:c9:a6:01:7a:d3:3c:c2:71:7a:5d:0a:
b4:16:21:a6:e3:7c:75:8d:ff:34:47:a4:53:35:66:
a1:67:3e:e7:a8:fd:48:f8:6e:6f:9b:97:18:29:59:
2c:fc:6f:32:3c:8a:23:c3:fa:c3:99:ed:bd:ca:bd:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CB:3A:12:E1:35:D3:C0:9C:EF:A0:3B:2D:1D:BB:81:9E:0E:3E:67
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c3:96:bc:5d:04:d9:4b:e2:48:7b:cf:c8:3c:16:b7:88:6d:
2c:0e:db:c6:3b:74:de:80:54:41:72:16:1d:d8:24:de:07:2b:
8a:bb:cb:1c:94:3e:52:54:d1:89:5c:ce:22:d9:d3:d8:da:56:
88:e6:bb:50:4f:f4:0f:5c:d4:b5:c6:99:91:14:12:26:a8:39:
0b:ca:ef:85:82:9e:f9:b2:57:d2:21:20:96:bb:4f:48:09:f5:
c6:e2:b5:d5:1e:1c:ff:1f:5e:72:3c:aa:de:32:45:3a:70:cf:
5e:b5:41:75:ef:4f:af:9c:03:c3:eb:3f:f2:f9:21:77:bc:d8:
52:0b:d5:1b:e8:28:7d:8f:09:29:df:45:01:f8:9e:11:f9:44:
bf:5c:cb:51:77:3f:90:1d:e4:b6:e1:54:c5:72:db:05:9f:f2:
08:a6:51:9e:2a:6d:96:c4:e4:a0:81:11:60:89:eb:cf:5a:25:
6b:e7:90:39:4e:2c:5e:cc:95:f3:13:ad:d0:7d:0a:5c:51:de:
72:73:18:27:d9:df:2b:9d:ee:4a:96:17:45:17:00:4f:8f:93:
50:68:da:1c:d0:75:07:3b:a7:99:e9:17:9a:53:a8:05:46:29:
f8:06:d6:79:d7:eb:c0:81:4c:2b:29:e6:04:ff:ec:8e:fb:b7:
d9:35:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:27 2026 by rpki-client