Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: I5E/pNCuPFixAxJvSfH6oFGmPh+wMoossbwDxmF2v4g=
Subject key identifier: 2B:A1:55:66:64:E4:48:F0:BD:A6:EC:FF:16:41:1B:C6:4B:A7:B5:2B
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 019D265FBB852D2D536A55C57401DC1A5F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:41 +0000
Manifest this update: Wed 25 Mar 2026 19:01:41 +0000
Manifest next update: Thu 26 Mar 2026 19:01:41 +0000
Files and hashes: 1: DccQAZUV3qZdgqhQbHnkJWn4glU.roa (hash: gCexvZF+3EFm1YK+f7oWwdQALyv1CumdqY+4Q5Ew2yI=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: ZbDP9mZC6HpnDTW2wEbXEjsVtOuj8+NhMqx6Sm2XYrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:bb:85:2d:2d:53:6a:55:c5:74:01:dc:1a:5f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Mar 25 19:01:41 2026 GMT
Not After : Mar 26 19:01:41 2026 GMT
Subject: CN=2ba1556664e448f0bda6ecff16411bc64ba7b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:d0:4f:da:81:50:f6:6c:47:9c:63:b5:9d:
d3:af:56:16:1b:74:a1:3c:40:12:f0:d1:79:6d:ba:
1d:eb:16:88:69:39:fa:85:d1:bf:c5:e4:15:f5:c1:
0f:4c:49:99:59:75:02:d4:8a:b4:ea:0e:22:47:71:
fa:cb:09:ca:25:91:1a:94:05:c8:ec:52:1a:bd:66:
cf:41:9b:a9:ab:d0:26:b5:6f:1b:5a:2a:83:10:6a:
1d:d1:2f:8a:db:fb:2f:ad:45:3b:d7:ef:48:cd:99:
2d:9f:40:f3:c5:0f:a2:a8:9c:ed:a8:50:aa:09:5f:
47:fb:f6:f6:0e:8c:69:b5:3c:44:7a:2a:ae:20:57:
b2:94:a1:2d:39:8a:7f:73:9a:08:f2:84:ec:44:0e:
d2:43:c4:9f:0a:91:46:ac:56:86:b6:6e:a2:d8:75:
b3:a2:7c:4a:25:8b:d9:0d:d1:dd:5b:7e:77:a5:27:
e0:d1:e2:ba:1a:b1:f1:35:50:c8:4a:bd:61:fb:76:
cf:f9:06:4b:a1:0e:4d:90:c5:40:c7:0b:c6:0e:67:
52:c4:31:46:82:53:e0:09:48:d0:b0:50:a6:36:d8:
fc:c9:60:6b:39:93:c7:ef:b2:bf:25:93:9b:16:ff:
f3:0e:bb:dc:a2:bb:c1:96:47:74:99:71:9a:72:36:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:55:66:64:E4:48:F0:BD:A6:EC:FF:16:41:1B:C6:4B:A7:B5:2B
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:93:28:ba:af:ed:f9:d6:bd:9e:ca:03:ed:c2:d1:9a:eb:33:
ee:e7:6a:c8:1d:c0:c5:c0:6f:6e:a4:ad:33:c8:20:90:e1:83:
53:28:a7:d3:6c:e5:f1:ac:a6:98:de:fc:07:0b:3b:32:b4:ae:
7f:57:eb:f9:7d:53:8e:13:82:88:7a:e0:70:c9:05:8c:c9:25:
8d:0a:2e:b7:4c:0e:ce:d4:3d:6b:ce:e7:fe:64:aa:b3:eb:bd:
d9:4f:61:fd:92:5e:62:fa:82:50:57:d5:60:7e:75:c9:a8:94:
c2:a7:32:fa:76:b2:c5:2e:99:a1:f5:21:1c:11:5e:c4:e8:7a:
bb:07:9f:3f:91:95:67:00:93:fd:49:16:e9:f6:8d:ff:e6:92:
56:1c:6e:f7:2b:cd:bb:dd:83:d1:94:8c:cf:32:7f:86:ac:92:
99:9c:6e:78:31:fd:7b:46:11:03:ed:e2:4e:00:18:69:f9:50:
d5:ac:88:f8:25:68:cb:32:fd:12:98:62:05:4f:b4:0a:f6:e1:
20:db:8e:7e:3b:14:61:2a:0a:65:44:d3:4f:ec:f1:ef:96:bc:
9b:cb:ca:e5:03:f3:37:b4:a5:39:c4:63:cf:6c:d3:2e:e9:a4:
24:90:53:de:ca:62:cb:8d:91:fa:ea:6b:2e:69:1d:ec:d2:aa:
b8:8a:78:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:08 2026 by rpki-client