Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier: 6dIXt6NolG+iBgmE9gW/VortsxuEG5JV23uycZc+x/Q=
Subject key identifier: 3D:A1:DB:D2:E3:80:08:39:7D:97:0A:1A:4A:98:B0:3E:3E:E2:F0:E8
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 019D26CD21D45C4B716B0C96B80D02943E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number: 1896
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: REX0hu_C2MCFA8A9sNibvfYrMsQ.roa (hash: gw7ymm92afywzQaqVosCHJIBxHzAVNds/TfPB78701A=)
2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: KX+fmtA0XnNkEsuxM88k2LnvmxGHrdFaYiQj4XUuJSU=)
3: xUXT0-vW_Dj00odbgeqel7FL6zQ.roa (hash: FfT1QP922EJ3fLG64AQol2ksXpgcMzdXxvb9aBfpqLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:21:d4:5c:4b:71:6b:0c:96:b8:0d:02:94:3e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=3da1dbd2e38008397d970a1a4a98b03e3ee2f0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:a8:66:9c:5d:76:6c:d8:a1:75:93:ba:a3:
b8:fd:dd:ed:88:16:3f:30:d8:2a:61:8f:fc:d5:86:
70:e1:bc:dc:14:74:18:0b:11:dc:eb:be:bf:d3:f3:
10:87:bc:0c:07:a7:ee:ab:2b:4a:c0:6e:05:94:59:
cd:62:f7:f4:1b:98:ac:62:fe:55:96:54:d0:3c:41:
43:22:31:ae:9b:63:76:b9:6c:da:a4:a2:22:b3:41:
0c:c7:fc:2c:34:c0:0c:7b:1e:92:70:95:84:36:91:
1c:91:85:3a:c2:a4:4f:27:f1:0e:02:45:5f:d9:19:
11:97:82:76:cf:e1:7a:4b:c1:a0:02:47:a2:5c:aa:
e9:b4:69:c7:cd:a4:ac:8e:8f:55:4c:3b:60:d1:75:
97:1f:68:36:e0:ce:24:f9:39:70:be:a7:40:2f:4d:
14:e7:c9:f7:58:75:1c:ea:63:25:e1:91:af:86:b0:
9e:12:2d:b6:76:50:c0:14:e0:d3:1c:f5:15:b9:d9:
db:0d:88:ad:1c:c9:81:ce:83:27:6a:01:44:33:62:
9e:33:26:0a:12:df:3a:8c:5f:28:c1:11:20:0c:cb:
44:a7:20:85:0b:01:0e:41:c4:b1:c7:ea:18:fe:30:
28:d2:28:6d:22:19:8c:c8:0e:ec:56:28:7d:16:bc:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A1:DB:D2:E3:80:08:39:7D:97:0A:1A:4A:98:B0:3E:3E:E2:F0:E8
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:01:56:3b:5e:a1:b3:9f:6f:f4:46:e0:32:bf:64:45:b4:dd:
48:89:8d:c2:e3:fd:9b:b8:ea:91:0a:02:6d:85:35:92:7a:9b:
a6:a2:3f:ab:1b:12:18:21:60:80:06:e7:64:af:99:67:24:32:
a7:db:45:30:e3:0f:45:a0:09:b8:a3:e5:71:92:1f:c6:f8:7d:
09:4a:d6:e8:45:0a:2e:d7:0d:e1:f6:c9:80:73:99:49:bc:d8:
99:28:4f:b8:a5:ed:60:d8:ab:b4:e9:1e:f7:f4:06:26:fb:61:
60:e7:3f:60:21:d0:8f:b9:f7:a4:7c:3c:7d:30:64:63:43:e6:
c7:74:95:82:e2:d7:bc:13:4c:8c:ea:74:72:d3:73:fe:29:95:
b0:0b:63:29:e1:b1:79:57:38:92:4d:31:df:ab:2c:4c:4f:30:
dd:e0:3d:0b:96:ce:7e:f2:42:c5:fb:20:d4:5b:67:06:75:c3:
d0:58:6c:af:36:3d:3b:36:85:39:92:ce:fc:84:4e:a4:d8:05:
5d:54:44:7f:18:c9:70:0b:3c:f8:1f:71:cf:a2:93:f4:ec:7c:
f1:72:ba:b5:9c:e4:29:82:82:83:83:db:72:17:91:24:20:d6:
65:ab:f2:30:07:2b:51:49:6c:ec:78:89:f6:c7:cc:4d:d9:25:
23:0f:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:39 2026 by rpki-client