Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: xVZT9TUhy8w40E4y2znE2pgLyF6bZbq/p44RCEjwv7E=
Subject key identifier: 18:42:55:AA:97:9A:29:54:0A:A3:47:B4:C8:2A:0A:9D:5D:67:37:E4
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019D27DF97FEB469CF97FA46AAEB7E6E5D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 157C
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: elFUuBLfooOEmknCHaB68sXKrw6hgzWyvzMd5BbfDAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:97:fe:b4:69:cf:97:fa:46:aa:eb:7e:6e:5d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=184255aa979a29540aa347b4c82a0a9d5d6737e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:a2:ef:a1:e4:86:6e:0f:b6:a1:56:01:7e:
0a:a7:fd:5a:69:00:33:ad:ca:78:3e:34:c8:af:2f:
02:f4:0d:0c:0f:70:d7:0f:d0:70:b1:22:0c:95:7a:
16:64:fc:66:22:69:9c:15:98:30:0d:b3:0f:b8:e1:
c3:cd:c4:f0:2a:dd:cb:44:df:9d:14:9c:77:35:0d:
57:8c:13:7a:b9:f9:e4:a2:55:3d:c8:8c:35:af:a9:
5c:c1:e8:e2:f9:c6:fd:61:4b:79:da:f8:7f:d8:89:
d0:39:81:e8:c5:20:c9:81:cf:3e:b4:fc:e1:80:22:
ec:db:00:e0:1c:3c:e5:45:a3:95:de:7e:43:98:6b:
f1:37:2f:4e:da:2c:29:ab:62:c8:57:31:8e:38:8b:
fd:0f:53:9d:a6:76:b6:a6:de:a5:fc:96:26:5e:12:
97:56:71:fc:dc:77:1c:52:cb:4e:5d:41:75:85:d9:
28:74:2e:ed:2a:c3:84:3d:f5:c4:02:0d:8d:41:99:
9f:45:60:9c:b7:71:d1:a9:57:6f:79:3f:9c:fd:bb:
a0:98:be:44:29:b1:f1:3c:d8:32:9e:78:4d:43:38:
c4:b9:97:37:0b:9b:74:ab:cf:74:6f:38:7c:2e:85:
e5:80:01:97:4a:5f:7d:e9:29:b3:9d:7b:66:ff:c4:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:42:55:AA:97:9A:29:54:0A:A3:47:B4:C8:2A:0A:9D:5D:67:37:E4
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:14:a1:53:3c:65:13:df:8a:11:90:6a:94:cf:1b:62:67:bd:
f0:8f:75:4b:d2:8e:b4:15:44:fe:b5:8a:f5:cb:dc:e1:f2:f1:
f9:3c:96:19:4a:27:c0:55:15:17:a0:39:7b:e1:33:12:74:90:
03:26:83:14:e7:90:18:3b:6e:4b:88:91:7d:6d:e5:87:c0:15:
00:32:c5:cc:fd:28:50:60:b2:5d:1b:3d:20:8d:cd:9d:c6:b7:
8d:5f:5c:91:10:0f:bd:d6:26:47:f6:5a:02:df:9e:2c:31:20:
88:db:47:be:c2:e1:a1:f2:32:31:85:e3:c7:00:5a:9c:f0:ad:
9f:a3:b7:7c:09:60:49:11:5e:63:8c:1f:16:f0:80:f6:c1:32:
16:e6:15:63:d7:b5:c4:39:02:00:b4:a1:eb:93:93:2a:58:eb:
f1:f0:bd:66:f2:51:90:d0:08:0e:c0:9a:69:ec:68:af:5b:15:
d4:33:c0:93:bf:a1:1d:f4:71:7c:0d:d5:5c:64:d7:60:8f:2f:
19:00:ac:63:37:49:86:11:f4:48:48:73:4b:f2:13:6b:fc:d5:
f4:e6:22:3b:a2:52:70:b9:6a:a5:83:df:45:21:d6:2f:70:f0:
38:a8:95:f0:d4:8f:84:8e:0c:4b:09:ea:19:0e:f9:56:fe:87:
00:b5:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:58 2026 by rpki-client