Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: 83fz6kCrFehb7QzGd+RIE6/EUrFuC78B0cNm6ElwxQk=
Subject key identifier: 0E:9B:FE:BB:0C:E4:83:32:47:C9:62:98:5A:ED:C8:05:3A:E4:AB:61
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 019D265EF2C52794A0F96E8F08C7A555E703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:00:49 +0000
Manifest this update: Wed 25 Mar 2026 19:00:49 +0000
Manifest next update: Thu 26 Mar 2026 19:00:49 +0000
Files and hashes: 1: 1b_krTT_K4qK4dHHlDSdwvTB_Ck.roa (hash: WyAqk00HCYlIWNZ7WJdQWAHo5r3VFoh2daJ+Uc2V4bY=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: bSxEOUJ4UszT5NgPFT60XWxvBPHoD8ySCU26nfjvoOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f2:c5:27:94:a0:f9:6e:8f:08:c7:a5:55:e7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Mar 25 19:00:49 2026 GMT
Not After : Mar 26 19:00:49 2026 GMT
Subject: CN=0e9bfebb0ce4833247c962985aedc8053ae4ab61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:6e:2e:24:0a:d9:25:ff:bc:63:6c:c9:95:
c5:fe:05:be:67:fd:1f:a8:42:ad:87:53:a9:09:b4:
0a:7a:97:3d:a6:b8:3e:2c:d5:2f:d7:eb:17:3c:3c:
d6:5f:8b:fb:b8:fd:23:6a:d3:68:ec:9b:f5:59:8f:
c2:c5:8a:25:1e:95:aa:0a:d5:a1:e2:9d:e0:b4:fc:
ad:e2:94:19:b9:e6:47:1d:bd:6c:80:57:a9:e0:b8:
73:89:18:43:d8:a5:e0:8f:ac:6e:18:ae:d2:e4:11:
c2:44:37:83:be:ef:d9:a5:ee:5d:75:c5:48:ed:67:
55:62:d9:f8:eb:74:34:63:37:05:36:17:ea:45:98:
0e:0f:45:a4:4c:39:54:d1:0c:5c:82:04:79:d2:2d:
3a:48:f7:ea:e3:4b:33:91:77:80:40:a1:bf:f8:5d:
54:bf:0b:65:0f:c8:fb:6d:8f:4d:6d:71:16:cb:df:
bc:95:e0:29:09:b9:b5:01:dd:84:1e:eb:67:8d:1e:
65:e8:9e:b2:2a:59:07:3b:8f:1a:a1:76:8b:03:43:
85:86:76:55:b9:e0:8b:e8:59:00:a5:3f:d5:95:33:
eb:70:76:b5:16:dd:c4:5c:6b:67:41:de:cb:49:ef:
2b:e4:bc:6a:77:92:38:ee:84:af:4b:ba:c6:06:50:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9B:FE:BB:0C:E4:83:32:47:C9:62:98:5A:ED:C8:05:3A:E4:AB:61
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:46:f2:5e:8f:c8:67:77:ab:0f:76:7c:69:67:06:ce:8e:b9:
c5:50:c8:0a:eb:2c:ed:43:8f:6b:31:06:d2:1b:82:fe:8a:70:
61:40:f1:d7:0d:a1:3f:e3:61:7e:fe:a9:dc:55:ab:2d:95:09:
96:26:82:86:1f:db:dc:90:15:24:ed:a9:fa:4a:6d:da:8b:62:
a7:41:e2:84:87:d3:28:21:5a:70:d0:88:2e:f2:55:72:37:ae:
34:ed:12:fc:5b:e5:8c:ef:76:3e:47:d8:2b:50:86:ed:35:f7:
52:5f:1f:fd:0d:59:4d:28:c5:c5:96:4f:ea:da:03:33:a5:ef:
6f:0b:10:7d:de:b7:ff:eb:d7:35:24:89:5d:27:13:74:62:61:
03:02:17:93:7b:69:b6:16:74:6f:f7:ee:68:2d:81:ea:7e:e7:
bd:9b:da:3e:d0:bb:20:a5:a9:57:18:f5:44:a9:4b:09:4c:7e:
15:ee:47:34:cf:a1:b5:0c:f7:51:8c:aa:2e:0d:98:b3:8a:3c:
1f:01:36:b7:ac:93:a3:ff:8e:fe:53:33:ac:70:5f:78:85:83:
55:fc:71:5c:13:9a:4d:ab:6a:1c:71:d7:90:ed:45:77:c8:4e:
25:03:0e:1d:bf:6e:4d:6d:1d:bb:78:33:b7:2f:ec:26:b2:b0:
6e:a7:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:54 2026 by rpki-client