Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: E4uC2vQ9of1eD5sAdKE+19pvtMvdoG5WtJ0ccPzpNUI=
Subject key identifier: D2:32:79:17:E7:A6:2A:CC:8C:3C:3A:7A:CB:59:D0:1A:94:11:18:F4
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 019D2A04665D5D53538608E43CA1CF312672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 05F3
Signing time: Thu 26 Mar 2026 12:00:24 +0000
Manifest this update: Thu 26 Mar 2026 12:00:24 +0000
Manifest next update: Fri 27 Mar 2026 12:00:24 +0000
Files and hashes: 1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: QKGf0S3vwe4hEZKz6T8lX5yaF1itE5Gu6F35+/tFRsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:66:5d:5d:53:53:86:08:e4:3c:a1:cf:31:26:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Mar 26 12:00:24 2026 GMT
Not After : Mar 27 12:00:24 2026 GMT
Subject: CN=d2327917e7a62acc8c3c3a7acb59d01a941118f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fb:45:b2:3d:6f:3e:c5:ed:bc:69:8b:93:6e:
d2:39:0d:eb:29:32:23:44:40:37:b1:b1:cc:e0:e1:
a1:94:46:bd:07:7a:8b:66:44:a9:a3:33:73:8a:39:
58:94:85:26:be:ae:1f:c7:d7:17:38:26:f0:64:ef:
e0:bc:a3:23:b3:8c:2e:4c:33:04:49:99:6a:b9:bd:
36:a7:01:ba:d1:c5:9b:81:af:55:2e:fe:be:e4:a3:
e4:ba:27:8d:73:43:d1:23:1e:fc:56:f1:bd:bb:85:
ea:a4:59:6f:3f:8a:2f:19:25:10:6a:5b:84:59:3d:
03:e3:2d:e2:97:42:22:17:45:4c:84:94:ae:34:92:
2a:0b:73:11:4c:ab:e7:4d:52:1d:79:34:68:ce:1d:
6e:f4:fc:73:03:0c:5b:b2:7b:a7:c6:8d:d0:f8:9d:
f4:ff:05:42:58:cd:2e:fb:da:45:2d:42:c5:48:99:
15:35:f6:bb:c9:8f:02:34:63:a9:5c:4d:bc:26:1a:
23:4e:04:a0:fb:b7:e6:29:65:32:70:c5:0b:bd:35:
b3:d9:66:d5:ee:f8:67:cb:c0:af:7e:6d:16:4c:31:
6a:6c:90:4b:36:59:25:53:36:88:c2:88:ed:78:7e:
ed:fc:ae:61:66:e2:9a:c3:34:bb:ac:6f:35:09:cc:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:79:17:E7:A6:2A:CC:8C:3C:3A:7A:CB:59:D0:1A:94:11:18:F4
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:82:0e:ca:97:91:72:f4:7c:2d:8d:7a:97:db:05:9a:67:5b:
3a:cd:aa:6e:c1:78:34:6a:1c:57:08:b4:d0:f6:da:fb:33:d8:
a5:2e:44:36:64:9a:c3:ee:5e:0b:51:bc:ff:98:08:66:04:7e:
fe:83:fa:d8:c1:08:36:b7:bd:db:18:8f:a9:cb:06:b8:86:de:
81:a7:46:2c:c3:79:7a:e6:23:38:ed:18:25:61:63:f8:e0:47:
f1:e5:ab:1b:f5:c4:3f:73:45:c0:d0:b4:e5:ec:f8:51:cc:a3:
c3:71:4b:2e:1a:5b:77:fc:1b:c3:fb:7a:ef:5d:a4:db:ee:27:
29:87:69:96:0c:a0:9f:be:5d:55:8f:8b:64:87:f6:2f:f7:9e:
ee:95:7b:d3:13:46:f3:85:a0:ab:9e:e7:7e:4a:8f:5a:55:be:
93:e9:45:c2:90:e8:b6:c2:36:bf:d3:26:df:a7:60:83:35:3a:
48:d1:b5:92:8f:81:e5:8a:50:60:16:b7:c5:88:c8:9d:0a:7b:
6a:8d:72:b2:40:aa:c0:1e:c1:62:70:58:8d:1a:e6:ca:a0:20:
4e:52:6b:7f:5b:e5:cd:7a:a7:8b:df:56:bb:99:38:95:b6:d6:
84:5f:1b:25:0f:10:72:aa:f5:19:db:e5:c3:8d:f5:9c:35:bb:
ad:cf:ff:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:39 2026 by rpki-client