Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: PeCvTDC6PLe9hkkGZ1Ek1kYX/uueWUGOXYtXbcrwtXY=
Subject key identifier: 86:FC:9E:04:C7:76:B0:24:E8:B7:0A:9A:E8:5E:E6:99:4C:D8:A0:4C
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 019D25F1D154CA594A942EE119E1C67F7CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:37 +0000
Manifest this update: Wed 25 Mar 2026 17:01:37 +0000
Manifest next update: Thu 26 Mar 2026 17:01:37 +0000
Files and hashes: 1: 3qtjPVhy36B112_T9YD_k1D7PrQ.roa (hash: TnLbrW8cdvU0sgFs8JL8GKZ+s8BUvq1O8YCehip/3/4=)
2: b-_QLOAaiTLnrdshp-MjmUbpJAQ.asa (hash: zE9zRSorao8ZT6ov8SMASzQ+KxaurOF00HS44oG3cE8=)
3: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: nVIiWh0Ie+5L575fl0B3l26pTjJiLDWLoQ5PiQf0ElE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d1:54:ca:59:4a:94:2e:e1:19:e1:c6:7f:7c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Mar 25 17:01:37 2026 GMT
Not After : Mar 26 17:01:37 2026 GMT
Subject: CN=86fc9e04c776b024e8b70a9ae85ee6994cd8a04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:e6:84:e3:10:31:11:17:8c:86:6c:4b:23:
81:1d:c3:9d:94:b4:65:6e:6a:22:27:a5:bb:0c:d8:
05:fd:fc:f7:a4:72:cc:fb:6b:d3:93:d3:63:1b:02:
87:ef:5e:95:cd:4b:0c:1f:e1:cd:21:e5:11:82:30:
13:6b:8a:8f:b8:0c:0b:40:5c:e3:25:0a:c7:56:e7:
73:4c:3a:15:ba:88:53:46:cd:ec:8a:3f:e0:a4:a2:
fb:0d:18:5c:53:34:50:6d:df:82:0d:3a:dc:a2:dc:
f7:03:c9:f9:ea:73:c3:a6:d7:0b:fb:7c:9c:3c:0c:
b2:f2:4d:58:29:db:e4:94:4c:46:a4:38:42:73:6d:
7e:d6:8c:1a:90:71:a5:8e:98:3a:9d:c6:6e:02:56:
b7:28:7a:5e:cf:fc:27:95:66:93:c6:a9:3f:ec:fa:
fa:0d:f3:4f:05:ce:5e:99:1f:9f:c5:fc:39:77:e3:
a3:00:18:0c:a5:3e:e4:c9:0f:3e:72:11:51:8e:a6:
ec:a4:13:e6:53:c4:43:17:59:96:3c:11:75:20:1e:
c1:9d:b0:3d:f5:a2:ff:c1:c0:aa:20:c7:40:03:60:
e2:bc:91:53:87:6b:6a:6f:e3:02:94:42:4c:c4:c3:
b9:e4:82:07:2c:d2:85:1b:47:ab:39:07:78:07:16:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FC:9E:04:C7:76:B0:24:E8:B7:0A:9A:E8:5E:E6:99:4C:D8:A0:4C
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cc:06:bd:5f:ef:47:9f:b5:2e:27:70:ba:89:75:59:50:1d:
dc:0f:c8:df:c9:f6:41:9f:2e:80:fb:f9:d3:e7:3b:35:0a:b6:
8f:b5:75:7a:65:ac:cc:d4:d9:94:fa:c8:42:c2:f7:d2:74:63:
05:3b:b4:e7:6e:67:09:ae:69:fb:ab:45:ab:a2:a4:b8:4b:93:
c9:1f:1b:5d:f4:b1:fc:b1:33:82:60:e3:33:d8:50:9e:24:28:
8a:33:82:8e:c4:fa:11:a2:dd:1c:07:bc:d5:f4:a3:0f:b0:90:
9d:c0:94:05:ed:c3:71:3f:8e:59:3f:ef:c6:c3:79:73:28:e5:
57:fe:d4:e9:db:9c:e9:fa:fe:83:92:22:2a:12:8f:f4:9a:69:
8e:85:93:e6:21:7d:3d:82:74:10:6a:b0:90:b3:9e:9b:3c:61:
84:41:72:d0:e9:2a:03:ac:92:c9:b1:13:80:f6:a8:04:d7:5b:
92:b0:69:8c:2f:9e:68:dc:c9:34:15:46:47:92:fd:51:89:24:
25:69:62:1b:6d:d9:21:01:38:1a:4d:27:eb:f2:b8:a9:51:33:
b9:49:ca:45:fe:8b:52:2e:03:21:af:08:76:ac:43:02:9a:f3:
bf:2a:bc:55:68:d5:99:1d:d2:25:2f:62:81:39:7c:b4:a9:fb:
77:7d:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:18 2026 by rpki-client