Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier: X1X2kQI38WA/RuFlaby+Rh1b+6Ll9qBH+q6pXKMVUhM=
Subject key identifier: 91:B6:E9:0A:8E:50:9D:6B:24:E7:82:F4:60:03:18:C8:27:C4:F1:26
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 019D28BBAAE14D52FC9F49ACE79882271C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number: 0A34
Signing time: Thu 26 Mar 2026 06:01:20 +0000
Manifest this update: Thu 26 Mar 2026 06:01:20 +0000
Manifest next update: Fri 27 Mar 2026 06:01:20 +0000
Files and hashes: 1: QRd4aPFV9jlBuWiqVWId4f78nwU.roa (hash: z76kR0ZXpWXElfaEyx2j2tbap+nSUCRwRkiT2NmSfmM=)
2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: +cBu0Uy2FqrZhZSbm+a7EXyQ1hxXKMUehYMj4vzoCLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:aa:e1:4d:52:fc:9f:49:ac:e7:98:82:27:1c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Mar 26 06:01:20 2026 GMT
Not After : Mar 27 06:01:20 2026 GMT
Subject: CN=91b6e90a8e509d6b24e782f4600318c827c4f126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:77:9d:7d:be:65:f2:89:20:c1:ca:ce:0e:
2d:30:98:27:16:d4:3b:50:55:fd:b7:80:3c:f5:ba:
d5:d0:13:40:02:6c:1b:d0:c4:7d:98:b7:8d:e8:c4:
2c:8c:c8:4e:18:67:b6:21:73:e5:76:40:17:82:cf:
fe:a3:7b:33:55:a7:98:b1:30:23:7d:cf:32:6f:62:
46:c4:6a:fe:e5:ea:22:89:c1:5e:06:88:26:55:d2:
9d:c9:a8:32:5f:fa:6a:db:c8:45:81:26:48:eb:b6:
2d:9a:06:38:c6:87:1d:f4:95:e9:24:11:bd:ca:ea:
4c:23:ab:fa:b0:01:fc:2f:28:c0:01:7a:47:7f:c1:
4a:f2:28:36:12:08:2c:69:40:7b:ae:fa:5a:a8:10:
0c:5e:8a:90:63:44:53:34:01:f8:a6:73:c3:3d:c6:
51:28:bd:93:47:16:d2:03:3d:71:ec:44:a1:c5:df:
6a:32:f4:55:91:3d:38:cc:46:38:ff:2b:ff:df:6e:
3c:d2:68:a1:5c:04:e9:b8:5b:18:55:1f:50:01:eb:
cf:c8:cf:25:d7:d7:44:c3:fa:f2:8a:49:a4:ab:9d:
86:05:ee:bd:f4:f4:21:ce:0c:4d:03:ea:83:31:83:
d8:e7:0e:21:83:40:61:b3:a3:9a:f9:7e:e1:ae:c5:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B6:E9:0A:8E:50:9D:6B:24:E7:82:F4:60:03:18:C8:27:C4:F1:26
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:85:a0:58:9e:4d:1a:71:fb:26:62:75:8b:36:f0:1e:d6:17:
32:37:ad:c6:04:e6:f4:c4:dd:e0:54:22:70:2c:4c:18:b8:21:
1d:96:ef:6d:f4:98:73:e1:8c:f9:92:8b:e3:44:84:cc:39:4b:
41:d5:69:ce:3a:9c:05:c8:ef:af:51:09:22:db:d0:d5:aa:ee:
91:59:6f:af:ca:5f:1c:5a:a4:08:13:95:72:45:26:ae:24:6e:
26:d9:83:fd:be:83:ea:80:5d:92:ee:47:d7:bb:75:fb:1e:98:
95:90:d8:b8:df:52:dd:50:1c:fe:42:eb:68:fb:85:25:c1:c8:
2b:5f:ec:a4:c6:c9:5e:de:c1:74:49:80:f8:90:43:60:b4:71:
fd:22:e7:ba:64:a5:91:d5:19:c4:73:70:33:24:55:e4:d3:92:
07:d9:92:67:ac:20:94:43:ca:e3:1b:04:23:c6:be:99:e4:76:
04:f9:a0:0d:91:17:bf:ee:a9:2f:21:0d:c1:1c:31:6e:60:1e:
c9:74:b2:01:3c:63:8a:36:48:8f:a7:6f:59:67:f0:4a:af:ef:
77:4f:c0:f4:57:a7:ce:05:96:07:e3:26:9c:0c:d9:e0:a3:d2:
1f:d6:ff:9f:33:01:24:8d:e3:78:88:ba:61:4e:31:70:12:ef:
75:e0:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:50 2026 by rpki-client