Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: bOADSAUqB3CN0V/gbhMjRYhOy9h3eZurpdk38qIhsW4=
Subject key identifier: 48:DD:3F:F0:A6:51:06:AB:EE:D9:F7:2B:87:EE:07:79:66:74:55:8A
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 019D29295FC3E5103EEB5EF1DA4FDF7B1B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 07BA
Signing time: Thu 26 Mar 2026 08:01:10 +0000
Manifest this update: Thu 26 Mar 2026 08:01:10 +0000
Manifest next update: Fri 27 Mar 2026 08:01:10 +0000
Files and hashes: 1: HN5LLWQedFx7VripiIN9gx68DXU.roa (hash: XkzGe7mduf4g7HZMXTbfyJqyM88+gNyK4rppH6L0o4k=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: 7Jr65glCeVNA4gEttr2lQcoZW2kzhnAj7l5r6lWrQrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5f:c3:e5:10:3e:eb:5e:f1:da:4f:df:7b:1b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Mar 26 08:01:10 2026 GMT
Not After : Mar 27 08:01:10 2026 GMT
Subject: CN=48dd3ff0a65106abeed9f72b87ee07796674558a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:a2:96:90:d5:64:de:66:00:d4:9f:61:0a:
0b:55:b4:f8:40:27:2a:5b:86:75:32:6e:c3:c4:1c:
6d:13:48:01:4b:18:23:b2:19:71:0f:4c:b7:fd:23:
18:3a:41:d1:4f:48:42:a2:30:17:4b:d2:9e:13:fa:
41:df:f8:c0:a9:6a:ae:9a:30:33:04:3d:d5:e4:a7:
73:cc:40:74:04:c5:d9:31:dd:22:e9:9e:46:22:30:
a5:aa:b5:75:42:75:f5:1d:4c:8b:00:8f:09:ac:84:
40:e3:d3:c7:db:e2:e8:49:52:f5:af:00:c5:b6:7f:
d0:d9:54:8d:b7:e8:00:e4:bf:81:48:cb:00:72:ac:
7b:60:10:f3:7c:2a:f6:31:51:91:ba:58:d2:54:cb:
42:c0:5d:5e:ec:17:c4:9c:1d:17:67:41:5f:9d:a9:
c6:45:ab:73:24:fa:ce:e1:c0:ad:3c:99:11:73:19:
7a:cb:41:b8:9c:4c:4f:f2:8a:02:29:90:fb:90:69:
fc:2c:f0:1e:b4:dd:1a:d5:d1:4e:2b:8e:53:9a:9e:
ae:1c:2d:68:b5:60:c2:87:6c:73:fa:73:f6:51:76:
2e:31:85:fb:96:b5:e3:2c:fb:90:af:91:69:36:70:
63:7c:f9:3b:cd:3b:34:99:b7:e9:74:ef:1d:f1:42:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DD:3F:F0:A6:51:06:AB:EE:D9:F7:2B:87:EE:07:79:66:74:55:8A
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3b:75:57:e9:4c:94:a1:47:ae:09:fa:22:be:5f:9a:ec:9e:
0e:41:1a:de:2c:11:36:cf:4f:fb:1c:78:e1:d5:4d:20:77:a4:
fb:53:4a:79:6b:de:53:59:70:c2:3b:09:2e:02:e8:2b:44:19:
80:fb:79:fe:6c:80:34:3a:1b:65:bd:5b:c7:0b:54:a3:c6:05:
ab:77:48:62:53:e4:70:a4:2c:bc:13:88:1a:30:2e:85:71:ae:
30:86:02:01:5c:c7:27:02:29:50:53:49:b3:ce:8a:7f:71:f0:
4e:26:75:b7:6d:0b:ed:91:78:7c:b8:fa:18:bd:34:1b:bf:95:
ed:ba:77:28:00:cd:a8:70:40:36:fe:cb:e8:c9:94:66:98:bb:
c4:99:29:d0:71:20:4b:d1:e5:47:13:6b:eb:cb:17:55:af:6e:
95:ac:6d:eb:1a:88:1c:3d:cf:5a:60:fe:43:a6:b2:2c:31:a4:
aa:da:89:e0:78:3f:0f:a4:0e:ba:2b:90:e6:ed:51:16:ff:7d:
48:9c:f5:b4:df:b3:85:05:43:06:64:58:76:9a:e7:03:5b:f7:
a1:c2:d8:36:53:15:13:e1:64:2f:29:ef:ea:b3:30:75:d3:10:
f8:e1:0b:f6:21:e0:83:d5:8f:8b:46:a7:38:d5:f7:a9:c4:37:
1b:21:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:44 2026 by rpki-client