Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: 46+juhUME1t2Y3yAa3dhNvaa/prIaS+pRHLgMyj9CVw=
Subject key identifier: 8E:B2:BA:BA:BC:02:82:80:5A:34:7E:18:83:BF:88:08:9D:1D:A9:38
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 019D28F21261E1BE977778114E9EF3E9D48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 136A
Signing time: Thu 26 Mar 2026 07:00:46 +0000
Manifest this update: Thu 26 Mar 2026 07:00:46 +0000
Manifest next update: Fri 27 Mar 2026 07:00:46 +0000
Files and hashes: 1: 4fAc0qvvbfrjXposwEaaDmGttew.roa (hash: dDNXjXONJp+B+9Oc1+EzvCaLe6IuW2IEvD1Mpunz+gA=)
2: b4o7k3ZfFNoPsl0uhtdCY4YGDJ0.roa (hash: FcUiatrGqQsxVpgGRcTbSSEMrQzJpNf+p+3PlDk628I=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: uvjJ3tbv1Xf1kiMGI9VHmjqRWPxaPEYvBOL65NdyAB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:12:61:e1:be:97:77:78:11:4e:9e:f3:e9:d4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Mar 26 07:00:46 2026 GMT
Not After : Mar 27 07:00:46 2026 GMT
Subject: CN=8eb2bababc0282805a347e1883bf88089d1da938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:7c:a1:ef:37:e8:f6:8d:58:9d:eb:90:15:
56:33:7d:72:d0:ae:bc:11:7c:58:cd:fb:5c:27:3e:
cb:31:1f:5b:93:4f:52:c4:ce:fc:53:b0:16:b8:e6:
b2:df:1c:1d:05:cd:5b:40:e4:93:f0:54:15:07:08:
56:46:a9:e6:5f:60:13:66:60:79:fa:36:59:f3:8b:
8d:31:8a:b7:35:ed:38:59:1c:18:0a:ac:d2:98:73:
71:0a:51:30:d9:67:7f:71:30:6f:84:9e:81:c9:b4:
40:e6:5b:4a:36:7f:c3:21:af:de:3f:08:5c:83:89:
f3:fa:d3:20:f5:d0:fd:61:de:33:fc:0c:57:77:be:
38:93:d6:97:40:71:2d:ff:36:47:95:44:e7:2e:9c:
d5:a1:4f:1f:99:26:ba:03:92:03:f3:1e:ab:b8:d2:
5a:e2:58:1c:9c:db:2c:66:58:68:27:e2:ee:4d:e6:
12:a5:05:39:2a:14:6d:42:49:ff:eb:34:c1:4c:56:
0a:af:98:1f:0a:16:1c:ba:37:79:a6:05:a8:c6:93:
74:02:d2:f8:2b:31:d9:6e:38:e3:f1:62:e5:89:27:
1c:54:27:25:56:c6:5e:aa:11:02:1d:c4:13:3e:65:
2b:71:e0:44:38:4e:bf:86:77:0b:5a:88:94:27:1d:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B2:BA:BA:BC:02:82:80:5A:34:7E:18:83:BF:88:08:9D:1D:A9:38
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:e4:fa:0a:24:a9:e4:ec:93:a7:16:75:18:93:ea:72:c7:
c2:ab:2d:55:43:87:41:cb:07:27:07:21:d6:33:bb:05:96:af:
56:61:78:e9:42:bf:f1:98:77:3a:86:88:83:3a:c8:aa:c1:27:
f3:71:0a:f3:84:ed:29:7d:43:4d:f2:79:13:11:06:4d:7f:15:
2d:6c:40:1a:de:46:bc:a7:cc:1c:d3:72:6d:4a:41:c2:90:d5:
69:01:d2:36:fb:94:8c:69:60:e4:e1:f3:4a:9a:ab:62:51:ae:
d2:31:a9:db:42:36:50:07:96:7e:85:26:8e:77:db:a4:21:1f:
e5:1b:fd:b2:6d:da:da:1c:fa:43:75:46:28:7e:b4:dc:e5:52:
16:c6:a0:4c:aa:fe:93:0f:02:e1:50:73:08:18:85:f3:8c:e8:
ca:b4:df:47:18:3d:cd:59:e8:d8:26:e8:b4:6c:ba:78:cc:c6:
48:d9:60:12:a7:d9:4b:69:3e:b2:6e:81:81:75:7f:50:8c:59:
c9:4f:32:8f:fb:f6:f4:13:2a:39:bf:26:a6:54:c4:3a:3e:c7:
71:fd:23:36:b0:0f:15:2a:f0:ab:c0:47:d2:e1:a1:bb:e5:7b:
82:4c:4e:7b:59:22:3c:c7:21:6b:9a:d2:e4:5f:ae:6d:75:99:
06:c3:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:48 2026 by rpki-client