Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: l6bztdPc6rAgC+1hPLqb6judibfJ2vTJ2QkpM+Oq+HE=
Subject key identifier: 4B:93:10:86:1F:A1:C9:1D:6D:00:BE:11:59:0E:D5:7E:F1:E3:34:CC
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 019D2928E8F086FB54AEB4A23D9D6F883D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 177C
Signing time: Thu 26 Mar 2026 08:00:39 +0000
Manifest this update: Thu 26 Mar 2026 08:00:39 +0000
Manifest next update: Fri 27 Mar 2026 08:00:39 +0000
Files and hashes: 1: DW2EOj44CMMwCR0usWS86GpNRuo.roa (hash: sQgXXLUthUP2gqj6lU+oLctXL4scForYuITBv0USf24=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: 6NMGv/YIDXBkFWzJFsQFIurqFk0Mg4c5qPFDmHxDVoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:e8:f0:86:fb:54:ae:b4:a2:3d:9d:6f:88:3d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Mar 26 08:00:39 2026 GMT
Not After : Mar 27 08:00:39 2026 GMT
Subject: CN=4b9310861fa1c91d6d00be11590ed57ef1e334cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:d3:d2:f5:78:7c:50:42:b5:6c:74:61:02:
de:64:17:b1:f4:f7:d8:d1:16:65:cf:72:b7:d8:b3:
e6:ce:6e:8a:0a:42:41:fd:95:c4:e1:8b:11:90:e9:
b2:20:21:47:e4:63:02:4e:23:0e:f3:00:6f:7d:8c:
b6:b6:31:07:97:7b:da:0e:d8:5b:db:bb:b6:3f:1b:
2f:bb:1a:2e:90:fb:1b:92:b9:9c:f3:81:58:22:09:
71:2a:5e:b5:03:61:80:d3:df:27:0a:20:a1:62:2d:
86:a5:a9:c1:c6:ee:6a:76:b4:d8:8d:84:0e:8e:93:
c3:e4:fb:ab:cf:3c:8d:2d:47:e3:75:c0:30:8f:00:
a0:8a:2f:bb:70:40:08:99:eb:81:8a:6f:8c:30:cd:
21:81:0c:ff:53:f6:0e:61:df:68:47:32:71:92:0b:
d8:f6:87:59:a1:72:5f:2b:ea:a5:b6:48:26:26:a1:
48:8a:5b:8b:58:33:fe:e7:58:fb:b6:a3:2b:78:05:
5f:64:6e:35:ab:85:74:3f:85:46:c2:95:f4:90:6e:
49:a3:7d:25:1a:65:8d:e6:09:dc:16:2a:6a:03:6e:
7e:fb:e2:3a:ec:6d:ba:52:86:3f:47:bc:7a:05:c2:
ef:a7:07:f1:b0:cb:73:32:8a:c9:05:f7:0d:90:06:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:10:86:1F:A1:C9:1D:6D:00:BE:11:59:0E:D5:7E:F1:E3:34:CC
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f9:f1:c1:ee:e1:d1:7e:d4:6f:b3:9b:24:bf:b2:d3:b6:a2:
95:e2:38:5d:df:30:ae:3e:18:bc:10:d3:0e:2a:3a:bc:07:59:
91:66:6c:54:89:53:c8:4e:d7:b2:f5:19:9c:59:3b:ed:4b:6b:
b9:7e:2a:0d:dc:2d:4a:e2:4d:02:3b:f4:77:d0:59:d6:8d:46:
46:df:fb:93:5a:e5:64:89:09:11:9d:aa:98:b8:2d:88:3f:fb:
26:cb:56:7d:fd:1b:a7:63:43:b7:de:bd:6c:3d:29:95:6b:7d:
b6:f7:5c:d5:31:9d:bf:4e:95:b1:2f:20:a3:93:05:d0:d6:f0:
0e:64:ad:c2:6e:f7:e8:96:8c:f3:a1:d6:99:62:af:bd:2c:ce:
c5:7c:7f:b6:17:c7:ae:68:7b:9d:f1:b8:1d:1c:d4:94:5d:77:
c2:32:8c:43:9b:b8:35:84:94:dc:39:6e:9a:cd:97:5d:3c:59:
20:8c:e2:5b:9d:53:f8:f4:d0:6c:5b:29:21:1c:4c:a1:14:e9:
1c:46:1f:a8:29:6f:c9:34:b6:b1:ee:43:06:45:63:8a:f2:ea:
31:18:47:fc:dd:f3:50:b3:79:2d:75:f9:29:97:e4:9b:8c:c1:
63:90:8c:33:fe:cc:25:fc:61:87:79:20:c0:98:03:00:09:f9:
9b:3f:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:04 2026 by rpki-client