Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: PfxVcnDez0/1kbf/HU+26NEFZJtj5nMBB2kh2RAsa3Q=
Subject key identifier: A2:27:42:69:88:48:23:61:D5:95:82:AA:76:71:33:46:14:44:9C:10
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 019D26CD91FB383605CD6DB21F02E4589811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 038A
Signing time: Wed 25 Mar 2026 21:01:39 +0000
Manifest this update: Wed 25 Mar 2026 21:01:39 +0000
Manifest next update: Thu 26 Mar 2026 21:01:39 +0000
Files and hashes: 1: 1-w8Q-F1I4Vy41impjChS3fMIIAk.roa (hash: PVWxllXwJBpTCgl4ua9BNgJtEDKI8J3jMk9ds1kt2/o=)
2: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: RGID9iqlHfJRi/CNSVfYbau/PBueAzq+6eheh4Z01AA=)
3: yb-12kSjdtmFiYKJ7b0iZYnL188.roa (hash: d+vCdRtSTB6tb47VKY7kwlb2RuHWojh//M171AF/m/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:91:fb:38:36:05:cd:6d:b2:1f:02:e4:58:98:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Mar 25 21:01:39 2026 GMT
Not After : Mar 26 21:01:39 2026 GMT
Subject: CN=a227426988482361d59582aa7671334614449c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:58:a5:ef:bc:ad:12:82:56:0b:1a:49:37:
83:24:b8:b1:ac:9a:ef:8a:16:1c:42:a8:3f:5a:75:
ff:f6:8b:d3:29:52:eb:12:ee:eb:95:0f:6e:c5:d2:
7b:8c:b3:08:7a:a3:76:4d:65:e6:bc:2b:88:4f:bc:
5a:99:06:6c:ad:0b:b7:c3:ef:25:68:f5:2c:68:8c:
62:7a:c6:0f:f3:eb:6f:83:29:b3:42:0e:3c:8f:14:
b1:54:f8:6c:7a:92:31:51:fa:24:fe:00:fc:b9:e6:
18:8f:cf:78:9a:3b:2d:3e:94:1c:01:8d:9e:5e:38:
bf:24:4b:94:85:0f:6f:a6:d8:26:62:12:64:d3:ee:
dc:37:9f:a6:51:4b:d0:cc:b5:99:21:a2:85:6c:09:
4c:1d:14:a4:23:35:7c:38:70:e4:b0:7c:0c:c0:09:
f0:49:ce:b5:a5:07:65:15:a6:7b:b6:58:14:6c:d2:
93:2b:a4:bd:12:60:aa:03:ce:97:c8:42:95:ef:63:
50:ca:4b:90:88:5d:19:b5:93:f8:4d:b2:c3:c5:bb:
1d:dc:29:f1:e8:06:fe:16:13:05:42:65:eb:b6:ae:
a6:08:09:2c:b7:49:09:13:cd:bb:50:cb:b1:f1:92:
3e:fd:fa:6f:56:ee:d6:e7:96:9a:55:0f:65:11:65:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:42:69:88:48:23:61:D5:95:82:AA:76:71:33:46:14:44:9C:10
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d8:7b:fc:e5:6b:ab:16:d3:5e:52:ff:23:a8:7d:59:2f:a5:
9f:2c:ca:e9:da:3a:bc:f9:e6:e0:c4:9c:9d:7f:7a:57:2d:00:
b0:82:70:7c:9c:13:64:41:39:6e:a1:ae:15:98:c7:61:f1:86:
c8:09:56:2e:97:f3:1c:a9:2f:c3:f6:f5:bc:10:2e:8a:54:eb:
e3:a8:89:4a:f1:7f:47:a1:66:d3:b5:65:83:de:14:8e:4d:69:
fc:07:e7:ed:73:07:d4:14:05:ab:d6:e8:e7:7d:fb:9d:4d:5f:
36:74:59:bc:4d:46:8f:cd:48:38:1c:4b:f7:33:13:0c:16:eb:
93:89:32:aa:91:52:4b:de:62:ae:1b:df:0a:dc:93:13:8a:b8:
d8:6a:0d:7e:16:c2:81:4e:35:c6:9d:8c:f8:c1:63:ae:cf:4c:
c3:7a:0e:0f:bf:fa:ea:c2:43:b2:85:1a:d3:86:b7:5a:b9:64:
e1:b1:8e:55:17:e5:a2:10:f7:16:d8:fa:38:09:88:b2:5d:44:
a8:f8:4f:64:b4:b4:e3:26:98:82:64:91:a0:a9:5b:83:19:68:
bc:8e:53:bd:fe:24:af:ff:2f:35:c8:a5:f1:73:3d:fc:0b:ae:
40:f4:6b:87:63:38:e0:46:83:94:4d:95:36:a4:cc:72:d2:65:
7f:4b:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:39 2026 by rpki-client