Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: h+2vS2Ky4Zct+P+e4Qsod3uHSvOkfxq3UCHcxUQKQxQ=
Subject key identifier: DB:CD:26:82:88:EC:A0:1D:83:87:43:4A:73:4C:EE:78:89:9B:73:F1
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 019D2B4EEB2FB83C52937BCAADE63482414E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 18:01:25 +0000
Manifest this update: Thu 26 Mar 2026 18:01:25 +0000
Manifest next update: Fri 27 Mar 2026 18:01:25 +0000
Files and hashes: 1: CNslXorIhHcxu1ZmEwT8mrYvs6k.roa (hash: s1ROfgQwLlFxkAsbeS9eF9uhXnn1miGuc5wD3r3iLCo=)
2: ie_Pu7uiMx8GOXLlSXzf2113uw4.roa (hash: 0qiWVLbjFxTIJ5VjDihdh12+Gr4lOgtQTqIJcLMq4Wc=)
3: o4zZlyS221abBwGOsgbFYOgvgMI.roa (hash: TiMn5uiz7jjx9HbjbyRUh6Tq/Z12nqOsqsCynyTQnIw=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: wJQTwYBxH5AAkcjuAuNVFlTvax4QGJsUI4cbB3R7Yy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:eb:2f:b8:3c:52:93:7b:ca:ad:e6:34:82:41:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Mar 26 18:01:25 2026 GMT
Not After : Mar 27 18:01:25 2026 GMT
Subject: CN=dbcd268288eca01d8387434a734cee78899b73f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:d1:24:5c:95:3f:d0:c8:04:ed:68:f8:f3:
62:26:f4:11:8f:dc:dd:d5:ef:6b:d0:3b:10:1a:d8:
5c:fd:99:59:aa:90:a4:39:fe:a2:2d:53:f8:ef:b4:
05:21:a6:09:7b:9a:75:ac:6b:02:26:c3:38:c0:ce:
58:92:8f:6e:c4:5f:f2:7c:24:ab:e7:55:d1:6c:ed:
e4:ba:5a:bb:3a:c4:0d:b5:f9:ee:74:a5:ee:ac:cc:
5d:bb:a3:2c:84:1a:31:2d:a6:24:0e:99:de:2e:e7:
09:a2:6f:01:a4:3c:1a:6f:8d:6a:e3:53:6d:d9:2c:
17:bc:f2:09:96:62:39:33:3d:2d:60:23:d5:05:d0:
8f:51:37:87:c0:26:72:01:28:89:c9:6e:54:ad:87:
85:b1:ff:7f:24:f9:ce:11:5e:4c:67:c1:86:36:4d:
ae:cb:c1:bf:c2:9a:89:30:ce:a8:3a:0d:95:80:fe:
dc:b6:96:52:2b:ba:43:8f:5b:17:26:ae:8a:73:81:
79:23:53:d8:9c:c7:b4:33:21:a7:cf:72:35:3d:25:
3d:ad:7b:03:b8:88:33:99:e2:3e:09:d8:56:b1:a9:
29:19:bc:1c:ba:82:f3:38:5a:15:77:74:e0:3a:d7:
67:ee:ba:5b:9a:85:b3:7d:a4:f7:96:d3:5b:da:94:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CD:26:82:88:EC:A0:1D:83:87:43:4A:73:4C:EE:78:89:9B:73:F1
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:48:f2:c7:2c:04:7b:1f:be:f4:1d:e4:01:4f:d8:b5:7e:1c:
6f:bb:6c:da:af:4f:fc:60:50:e0:c3:8a:25:d2:9b:d4:74:c8:
72:8f:ea:a0:0b:06:d4:44:3f:96:3a:01:1a:1e:4f:7e:0f:62:
59:4a:27:35:be:88:0f:a1:ae:1e:6f:a8:93:af:50:f3:ee:ac:
17:e3:5c:4e:2d:b1:29:71:cf:94:e6:77:e9:56:33:51:9a:71:
87:b1:dc:08:75:4b:bb:e2:c2:60:ac:e6:51:0c:94:6a:55:1e:
e4:19:42:df:b5:7d:f7:69:79:55:84:c0:9f:40:e3:78:72:8d:
29:38:1e:df:d3:21:c9:bd:49:d1:72:77:fe:9a:d8:03:b6:2b:
42:03:e0:de:d8:6a:c8:3a:ea:01:45:5a:12:72:4a:1a:72:8d:
13:5d:0a:ac:36:37:b8:73:9f:8b:39:f6:22:7f:c9:dd:bc:f9:
b9:ec:0f:f4:e9:26:90:a5:16:2c:8e:cf:9b:23:b4:46:b8:6c:
98:86:3a:74:84:ef:58:34:2e:96:68:a5:87:82:5d:f1:07:a8:
cc:e2:f7:f0:24:8c:dd:39:44:2e:b8:d0:a9:82:9c:f1:49:38:
6e:0b:ed:c9:4f:91:dd:e9:40:67:35:bf:3c:b8:17:53:33:33:
47:fd:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:25:18 2026 by rpki-client