Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: uzv+p5QU5JKuzr0xrCkmoLSxftzAqpSGP1ZoLVFBSE0=
Subject key identifier: 33:E9:54:53:3D:3E:65:4B:8B:5B:46:77:71:F2:E4:92:60:C3:D0:9D
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 019D2A72EB696BB333AD3397676D1BE89154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: 041D
Signing time: Thu 26 Mar 2026 14:01:07 +0000
Manifest this update: Thu 26 Mar 2026 14:01:07 +0000
Manifest next update: Fri 27 Mar 2026 14:01:07 +0000
Files and hashes: 1: BcVQyrwrHYullQZhoBE1L5P8lQE.roa (hash: 29V5LoBGnauLvwgtP04iC++YohVScFoggyXh/yIZelc=)
2: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: 7Qh0q3xTruTfRrPBwrLFYZ899amq2S/+4XNbfIDe4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:eb:69:6b:b3:33:ad:33:97:67:6d:1b:e8:91:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Mar 26 14:01:07 2026 GMT
Not After : Mar 27 14:01:07 2026 GMT
Subject: CN=33e954533d3e654b8b5b467771f2e49260c3d09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:76:f1:2c:ce:63:4b:a0:a1:ab:48:de:8f:
a1:4d:42:9a:f9:68:77:7f:ff:27:5a:96:69:7d:d2:
39:80:ac:d0:ff:ce:ac:e5:2f:3d:71:f9:12:83:dc:
61:5a:e1:24:6f:aa:e0:38:6d:79:d1:0a:ff:0e:b0:
8c:d0:31:8c:6e:eb:40:a2:6f:00:12:c1:28:49:35:
87:20:af:92:04:a0:e3:8f:e0:83:4b:d0:7c:0f:b0:
30:57:e6:7f:a8:0f:55:6f:09:3d:f2:69:ca:f6:27:
66:c3:06:46:b1:70:38:7a:30:0b:59:7a:26:da:d0:
cc:08:88:2c:5c:43:9b:34:79:5a:51:a2:f5:c6:2d:
07:38:fc:79:ab:14:43:ec:f8:db:e6:11:47:0a:fd:
b1:1f:cf:aa:41:fb:49:01:f9:24:0a:b7:6e:40:2d:
91:a9:ab:99:05:19:a5:32:37:7a:df:d1:eb:ea:2b:
8b:79:1d:71:ee:8a:a2:be:a5:ae:a8:0e:08:6e:f5:
88:6f:6c:1c:d3:79:d1:1c:09:41:c9:a7:12:ac:9d:
5c:45:cb:f0:b9:56:be:30:79:3b:0b:07:aa:3e:5a:
11:e0:d9:88:f8:35:ea:ce:7d:4a:62:b5:b2:f4:79:
69:3c:b3:7c:de:9d:c9:36:e7:ac:52:41:a8:4c:e4:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:54:53:3D:3E:65:4B:8B:5B:46:77:71:F2:E4:92:60:C3:D0:9D
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4f:0b:d2:d7:32:cf:d5:e3:8a:ab:1a:39:b4:ca:2d:33:f8:
13:70:33:81:41:ac:1a:8d:d8:db:0c:b9:42:01:e3:54:96:c0:
19:82:65:10:25:9d:f6:b3:5d:92:52:17:29:ef:fa:c9:54:26:
9a:0f:fb:a8:68:03:a1:d1:01:59:e0:99:69:b8:a7:ba:fc:c5:
bb:c8:f6:7b:02:e9:c3:12:11:9f:64:8c:45:ee:9d:bd:bc:c0:
14:2e:3d:6d:fd:fd:c5:b0:c2:f0:a2:b2:d9:43:9c:05:ac:29:
1d:17:4a:5d:c7:39:53:13:66:28:4f:2c:2c:d0:2d:6d:0e:ec:
8b:77:91:8f:ed:8d:6d:e4:22:0a:c8:7f:20:c1:8f:96:13:1e:
a7:f7:bf:f7:28:dc:47:4e:9c:56:99:e8:06:08:3a:22:ef:e4:
7d:c4:a2:71:d3:59:ed:ab:24:c8:fa:37:51:89:69:e4:71:52:
0a:99:30:1c:5e:8a:b5:77:91:c5:db:d9:35:13:d0:14:53:a0:
9c:d5:f1:18:7e:9b:bd:79:d8:12:44:e8:a1:97:1f:7c:59:77:
06:50:b3:fb:f3:2e:39:64:22:39:d1:c2:a4:7c:4a:35:d8:9d:
0f:91:20:74:8c:a4:d7:f1:57:27:88:41:76:4c:1a:de:74:68:
7d:c1:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:40 2026 by rpki-client