Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: 3C4yMmBRmtZ+v30UH+djwgaWXwMbYLJAkMhTFi5vRoQ=
Subject key identifier: 90:EC:14:68:10:4F:F9:62:AB:D7:D1:1E:D0:03:74:EE:E3:65:43:E1
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019D28BB65A75E915281AFBE1AF498418D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1657
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: jtX4/1UB5xjY9mIMCY9lQYSOyZMtkgpsTYrgs/sps+E=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:65:a7:5e:91:52:81:af:be:1a:f4:98:41:8d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=90ec1468104ff962abd7d11ed00374eee36543e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:1d:cc:2c:d2:00:d2:e6:29:4e:9d:d9:4f:
73:a7:85:ff:a4:1d:da:7e:02:9b:81:3b:61:f4:21:
3c:f7:a7:e9:cb:93:41:3e:4d:fe:b5:64:24:9f:21:
17:39:44:87:b9:6c:cf:e1:ed:61:47:32:d1:95:83:
a8:d5:9d:31:bc:58:ce:4f:f1:06:94:d6:a1:8b:8a:
05:b1:2c:3a:5d:53:11:9f:61:bb:4b:48:18:ec:91:
41:b5:af:f0:0d:ac:0b:04:5d:18:f4:46:37:90:fb:
0a:46:f8:0c:f7:74:91:22:ba:b6:af:62:22:ac:46:
cb:d5:61:0f:19:ae:82:bf:e5:05:ed:5a:cb:74:ab:
f4:ed:f4:6a:00:f7:2b:87:61:77:87:d2:07:77:b3:
56:dc:9c:01:22:aa:e4:02:12:9d:7c:25:c1:dc:6f:
a0:57:af:71:ac:9f:f8:a8:57:66:94:b2:26:36:06:
3f:91:e2:d7:74:81:71:c9:29:6e:e1:fe:b9:0b:9b:
b0:92:7e:96:9a:96:dc:b6:e4:5a:d6:26:00:f8:19:
33:44:bc:63:f3:f2:b0:75:7f:86:cb:a6:a2:d5:cb:
6d:a9:1d:0c:7b:33:f8:59:46:70:f3:8f:0f:76:cc:
2f:1f:36:2a:30:a0:12:29:2d:b2:58:c0:5a:9c:53:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:14:68:10:4F:F9:62:AB:D7:D1:1E:D0:03:74:EE:E3:65:43:E1
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fb:c0:f3:a6:0d:03:9b:57:36:cc:a4:fe:b6:96:0e:e5:af:
e7:35:e2:6a:78:54:7f:96:fc:b7:e3:c1:cc:3c:7c:d0:3a:be:
1c:6a:81:72:57:de:d3:33:2e:58:7b:4c:4b:df:a2:dc:4c:a4:
4b:03:10:c1:40:54:7d:cb:59:01:2c:35:a7:e4:9e:c5:09:40:
cc:99:eb:69:7d:e3:40:7b:4f:a5:74:7c:a6:56:82:5d:d9:27:
95:1c:3c:9a:9c:a1:5d:11:39:b2:ed:03:6e:16:fe:b4:f7:62:
a5:4a:1c:7a:8f:23:73:15:3f:c1:6a:dc:9f:ea:fa:12:33:af:
fb:7d:11:c0:f5:4d:bc:8d:50:5f:06:5b:66:f9:7b:22:60:be:
01:56:f5:34:40:52:51:18:41:ca:c1:e5:fa:5a:09:57:e0:07:
7f:49:fe:24:73:1c:1b:72:a7:05:41:95:58:c4:67:69:73:0e:
10:47:f0:33:29:f8:12:78:f0:cf:bc:2f:b0:2b:30:c3:61:06:
fb:6d:43:b3:4f:7a:12:9e:b7:9d:9c:3e:36:76:64:5f:a3:58:
1a:d7:8d:eb:9f:10:9c:f6:d2:a2:6d:fe:31:80:15:ec:78:d5:
f3:54:71:dd:b5:56:8d:06:d0:44:33:f9:43:11:6e:cc:16:49:
cd:4c:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:15 2026 by rpki-client