Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: BJzg31b9cmmg342pKw8B73CssRLy3/oT8Y72pqsOjKU=
Subject key identifier: 77:55:96:82:A6:90:92:1A:91:81:03:3D:CA:5D:6A:72:3F:1B:A5:4C
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 019D265FAC314F51E79B515659CEBFC75579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: 0288
Signing time: Wed 25 Mar 2026 19:01:37 +0000
Manifest this update: Wed 25 Mar 2026 19:01:37 +0000
Manifest next update: Thu 26 Mar 2026 19:01:37 +0000
Files and hashes: 1: TvCeC-CTMvUOvfqvZDepdi4lqnQ.roa (hash: ESVtJ3kouBpjTr4WqJWzhzotaZoW4Cj/KB3SLHg/1MA=)
2: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: S7/4DV2fu+p7MeaYgYAAOvR72lpIwAwqwEFEf2c+zJk=)
3: yQ4lwVZKtZ37ncDrw-J5ETPGiug.roa (hash: YOCERM8UiZIP0yKzgGY8Yras8dDVp4zqydgV9vmHZ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ac:31:4f:51:e7:9b:51:56:59:ce:bf:c7:55:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Mar 25 19:01:37 2026 GMT
Not After : Mar 26 19:01:37 2026 GMT
Subject: CN=77559682a690921a9181033dca5d6a723f1ba54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:0e:df:ae:c0:57:02:1b:65:09:4f:c3:6b:
75:2b:8f:ae:0f:43:7e:6e:ec:be:a8:d5:88:ce:dc:
4c:62:67:e5:0f:8f:20:16:81:75:eb:85:7b:a4:90:
1c:75:e2:b6:bc:7a:ac:7d:3a:4c:a7:41:2f:a1:38:
e5:6f:7a:21:de:95:37:d5:d5:ea:f4:9b:2a:de:b3:
27:66:2b:50:a5:62:12:bf:1a:eb:a7:8b:8b:52:12:
44:a3:cb:aa:96:04:d1:9d:ea:8d:50:9c:67:5e:df:
54:33:26:11:2c:a9:a1:93:f6:7a:83:7a:d6:eb:d9:
1c:13:a6:d8:ef:81:d7:49:c8:5f:7d:26:6f:58:1d:
36:2a:49:7a:af:13:8b:86:0a:da:ce:17:d0:8f:1c:
d4:b7:f2:7a:bd:31:55:b2:41:94:ab:50:eb:26:87:
c9:b9:c2:59:82:b3:cd:42:52:1f:24:cc:52:f7:06:
b3:1c:05:e5:e4:3b:4b:4b:a3:41:9a:9c:20:80:59:
59:3e:3c:80:80:9d:14:60:9c:d9:c0:e0:48:b5:a9:
4c:ac:a5:e8:2f:db:72:55:1c:db:58:63:f2:0e:7e:
f6:61:8c:dc:c2:8f:ea:d6:81:70:dc:33:76:d2:13:
03:0f:84:45:89:ed:89:2f:99:dd:6e:56:90:de:4d:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:55:96:82:A6:90:92:1A:91:81:03:3D:CA:5D:6A:72:3F:1B:A5:4C
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f7:10:f5:da:c0:42:57:89:72:6e:a3:62:37:61:62:00:75:
9d:d4:7c:78:d5:ba:3c:83:e5:5f:5a:bd:a6:b0:df:a2:32:36:
4a:2a:ed:5d:c8:a9:21:12:1f:d3:8d:de:42:63:f9:35:ee:97:
50:b9:1e:15:ab:5d:e2:e7:58:7e:e0:cf:8f:da:cb:f4:f3:1e:
f8:55:d7:79:16:07:07:89:cd:92:d2:92:f0:e2:a1:79:e5:67:
35:96:de:d7:0d:bb:61:11:a0:a1:3a:29:51:6e:0c:f7:a7:72:
f7:c2:5c:9c:0d:5c:0a:a1:32:41:cf:1e:18:ff:e7:27:89:8f:
38:4d:5c:56:df:7c:66:f2:da:25:78:11:25:d6:1d:7f:58:b4:
40:ee:85:6c:49:45:5d:e6:13:da:4d:07:89:67:e8:66:66:3e:
21:12:65:ab:40:21:eb:60:48:81:de:89:05:cc:2d:a0:b4:57:
5d:e7:3e:8d:2a:9f:e4:39:18:1a:f1:33:06:00:db:84:58:cf:
c3:eb:52:ca:4a:80:a4:39:3e:ff:18:4d:6e:ad:b4:e3:f3:43:
17:a3:fb:2a:fa:53:26:c5:40:a5:f0:32:e5:27:5f:b8:43:2c:
55:46:01:7c:53:5d:02:fc:7e:a6:b5:6b:d1:0b:35:6e:b5:75:
1c:76:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:02 2026 by rpki-client