Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: jfPvK/yZZfWUoM6sHRE4rPMcPzdmA7/MCtfmTKnzcJ8=
Subject key identifier: 76:DD:B8:9E:54:4F:D5:D1:94:94:58:14:3A:FB:A2:F6:9D:D4:CB:B9
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 019D2695E98A527A0F4F138853E49E06D516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 1233
Signing time: Wed 25 Mar 2026 20:00:51 +0000
Manifest this update: Wed 25 Mar 2026 20:00:51 +0000
Manifest next update: Thu 26 Mar 2026 20:00:51 +0000
Files and hashes: 1: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: Xv3yJRFtvuP5TYiEdFdXTMBfKJRWflzgoTCyplz9MBA=)
2: y4ozBsAhD0SXzDXTnSLIwi05yzY.roa (hash: UpquKmMoHnebuH46QTJH9ZI2B7xELceGE768LObgLRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e9:8a:52:7a:0f:4f:13:88:53:e4:9e:06:d5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Mar 25 20:00:51 2026 GMT
Not After : Mar 26 20:00:51 2026 GMT
Subject: CN=76ddb89e544fd5d1949458143afba2f69dd4cbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:a5:bb:6c:f8:80:2a:3f:54:69:f2:96:2f:
28:93:eb:c3:e3:69:15:a0:1a:60:d1:5e:99:87:81:
be:dc:e2:bc:9f:96:11:77:a3:42:08:3e:ce:8d:52:
2e:f0:5b:6b:e5:e9:b0:fe:f0:99:b1:53:90:98:b3:
fa:e7:6b:f9:05:b1:4c:ff:79:c9:7a:8c:7e:6b:b8:
b7:14:f1:50:6d:b9:c7:1d:a8:10:e0:40:e2:80:ca:
30:53:a1:f4:c6:b9:a2:7e:07:53:68:34:30:48:e2:
ea:fb:bd:b5:bc:10:5b:35:f8:9f:34:00:a2:dc:47:
98:37:ca:ef:9e:6d:ba:eb:7f:7f:f0:0d:c0:48:bd:
be:64:8f:db:8e:43:84:94:09:5f:59:e1:f2:7e:27:
a8:10:10:5b:be:a6:fa:89:a5:7d:91:0c:a1:8f:bf:
80:77:df:c8:2e:67:ec:d3:01:f0:ec:09:7f:26:18:
59:07:0b:33:b0:0c:5e:d9:32:59:b2:34:dc:ca:a3:
79:bd:16:f4:79:38:fb:71:15:db:b1:93:95:75:a8:
63:9a:17:b0:22:13:91:85:ae:ed:a3:93:2f:56:39:
85:bd:43:ff:46:b0:44:e8:86:19:9b:a6:7e:a3:ca:
e6:97:d6:81:d8:ca:47:86:16:88:ca:af:eb:4a:63:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DD:B8:9E:54:4F:D5:D1:94:94:58:14:3A:FB:A2:F6:9D:D4:CB:B9
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:66:66:3d:37:aa:aa:f6:de:2d:6a:1a:78:7a:48:92:cb:e1:
34:87:6b:5e:05:8f:e3:e8:02:fb:c6:86:ce:2a:a8:e0:5f:3f:
94:c7:68:ac:14:6f:ff:39:8c:18:94:3b:d3:45:88:67:78:e5:
14:d4:f4:ba:c9:01:89:11:d4:6f:86:4f:ed:4f:17:62:8e:6b:
75:f6:54:36:53:7d:96:f0:3a:d9:da:55:cd:6a:27:6c:04:87:
bf:50:37:e3:0e:5f:6d:5d:e7:b4:f5:6d:d3:53:ff:7c:af:f8:
70:9d:1b:9a:24:5b:9b:28:58:8c:8f:10:67:4b:17:50:09:b2:
e7:7e:1a:43:0d:7b:83:51:d8:e7:4d:b1:fc:5b:6f:44:5e:6c:
6c:a4:66:29:65:e8:e2:88:fa:6e:51:4a:f8:0b:93:b9:c9:bc:
5a:bf:58:78:77:48:b6:b1:65:c5:0c:91:3a:bc:9d:9b:a7:0a:
df:9c:d1:6e:e3:e2:de:33:58:05:2c:31:fb:6d:4d:37:5e:10:
1c:d9:de:48:44:01:e6:2d:23:27:06:74:f9:fa:68:c3:93:f1:
7c:82:4d:54:12:e5:9f:a2:7b:81:3e:ce:dd:c9:7d:e7:47:34:
e4:50:c2:17:ac:5e:7c:19:11:e8:c9:fa:b4:1f:2e:aa:c0:b3:
5a:14:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:26 2026 by rpki-client