Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
File: qXjDZVxaYJcS51UQDZiJKuHI5es.mft (raw, json)
Hash identifier: ZA+vP2n6BGzt6a0g7uZDy5ls4jvNGk6gXp6ECCPNwuA=
Subject key identifier: D8:18:C1:10:97:9E:91:59:AC:0C:68:CA:1E:AF:50:65:AE:54:05:56
Authority key identifier: A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
Certificate issuer: /CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Certificate serial: 019D269655DE44D0BB13F5FC051340371B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: fWxv8lO3ivyCQAwR1ysW1woUeRc.roa (hash: tMsUYGCQVUbCpKIFU+OCagwMzBqxAVsA3If+ro/cz/k=)
2: qXjDZVxaYJcS51UQDZiJKuHI5es.crl (hash: 0oHFvyGsQ+D1rSrhN6Z+e+fRNvp/6pUmZwXwZW4VO9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:55:de:44:d0:bb:13:f5:fc:05:13:40:37:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=d818c110979e9159ac0c68ca1eaf5065ae540556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:47:c1:90:bf:86:25:e9:f8:d0:29:8c:b7:
b3:0a:ec:1c:2a:ee:12:08:f7:8d:bb:9b:bd:4a:26:
6d:77:97:8b:2a:48:fa:e9:dc:35:c5:32:50:e5:e0:
ca:ad:ad:3a:c5:cf:d2:11:8c:a4:35:66:9a:93:0d:
cf:fb:da:72:3b:a5:fc:a7:1b:ca:d2:9e:94:3d:9f:
ef:9b:71:ae:d8:b8:46:36:60:b2:60:e5:12:20:5b:
b8:21:bd:42:c1:04:50:46:4f:48:87:f2:0c:d6:04:
a4:30:07:98:5f:33:d8:02:c8:e9:6c:60:78:5b:a3:
8a:6e:9d:de:a7:6b:08:4d:14:ea:2b:a2:f4:7f:72:
25:a2:89:91:93:7a:71:f6:ab:01:c8:db:f6:c8:8d:
b1:cb:d7:3a:93:7a:96:85:24:44:58:1d:c2:48:a6:
f7:fb:13:fc:d5:9d:7e:a9:67:ff:4c:48:04:f9:d5:
8d:55:9e:80:ae:17:18:1b:cd:5d:cf:05:da:bb:60:
f6:d5:da:51:e0:3d:31:b9:6d:fc:32:08:6f:18:45:
cb:04:57:b7:17:79:b3:9b:54:88:fd:2b:e0:0e:25:
90:3b:76:eb:0d:be:22:66:ee:32:05:07:15:18:e8:
e7:e3:9d:13:40:89:85:5b:a7:b2:5f:2c:24:1c:ff:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:18:C1:10:97:9E:91:59:AC:0C:68:CA:1E:AF:50:65:AE:54:05:56
X509v3 Authority Key Identifier:
keyid:A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:c2:65:1f:85:99:87:c8:66:f2:74:e1:b6:2f:a4:77:a1:
be:e9:24:f8:84:3f:0b:cd:91:81:52:f2:b2:ff:44:86:ea:75:
4e:ab:1d:1e:c5:56:38:32:b3:b6:18:4f:af:d1:13:fb:4a:d1:
d6:ef:ae:0e:a2:67:13:3f:86:63:05:83:01:97:be:8a:a7:b0:
4d:14:88:7b:3b:ea:d1:14:5e:0a:bd:2b:63:16:1e:6a:e9:ce:
23:fb:55:9c:d6:b0:04:fb:b5:e1:15:3e:0a:17:50:eb:b1:f5:
00:bc:05:d6:bf:e8:3a:ed:0d:f8:bb:84:3b:ee:36:c7:63:13:
a7:00:f9:dc:d8:a7:6b:f1:46:73:ca:65:cf:e0:9c:6f:7b:62:
cb:31:bf:d4:80:95:da:f3:27:42:c9:74:84:16:1d:aa:46:eb:
d1:42:83:93:22:a2:5e:15:24:5d:30:1a:15:6b:4f:71:97:25:
ea:87:3d:95:74:8d:6c:b5:1c:4a:5d:dc:22:2c:7b:6a:d1:9b:
56:f0:0d:fe:d7:6a:86:98:1c:7c:10:4e:49:5a:ee:6a:0f:82:
28:da:de:6d:59:e9:56:04:0c:1b:eb:19:ed:2c:8c:92:e7:6a:
3f:b7:16:2c:97:55:aa:83:53:04:4a:bd:74:49:81:41:b3:8b:
d7:58:83:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:02 2026 by rpki-client