Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: BOWwpyr6Nty9Z7Pl8hQ4E+h1Hh/uYmlv9PCCjKeWQi0=
Subject key identifier: 93:83:E9:88:F5:FB:04:96:C6:A1:F5:7B:80:F8:96:CA:F5:7F:00:3F
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019D281643D078CD50D483B97A1F93172E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 03:00:40 +0000
Manifest this update: Thu 26 Mar 2026 03:00:40 +0000
Manifest next update: Fri 27 Mar 2026 03:00:40 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: z/ya4lDoPiFfrs0ZjQprlZ6kZry2nMZhTGZXHgkV+lk=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:43:d0:78:cd:50:d4:83:b9:7a:1f:93:17:2e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Mar 26 03:00:40 2026 GMT
Not After : Mar 27 03:00:40 2026 GMT
Subject: CN=9383e988f5fb0496c6a1f57b80f896caf57f003f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:98:c1:67:fc:af:9d:35:49:81:d0:e7:b9:
23:3a:4a:16:01:be:b4:f0:5a:5a:c3:e9:21:74:83:
c6:fb:bb:5e:5d:46:6c:f6:46:6e:15:c0:75:31:6b:
a3:bc:0a:14:0d:24:14:ea:87:0e:08:e8:9e:5c:9e:
e9:be:ce:02:46:47:74:9e:d0:00:00:87:10:89:de:
31:e6:fd:08:53:c1:9f:84:94:8f:1b:a8:48:a6:64:
37:67:71:03:e2:1d:5e:2c:12:6e:26:08:c9:fe:05:
4d:fe:d5:38:fd:88:ce:c6:61:95:db:36:e8:ca:66:
b7:a1:3f:b0:a3:d1:1b:0f:4f:68:c0:1f:bc:25:d6:
27:6b:00:1b:34:bf:69:d9:69:1d:ed:de:47:2b:46:
a8:35:77:10:89:83:9d:1e:0c:c6:53:b3:94:07:6d:
71:02:7d:11:d5:67:25:ed:01:b7:50:5f:ee:13:6d:
15:b7:6c:51:e1:b9:7b:0e:2e:16:c0:c9:31:23:25:
82:eb:2d:2b:f0:b2:ad:fd:c7:0e:32:6a:7e:a0:dd:
d7:5b:b7:aa:c5:4e:a5:54:ab:39:0c:c2:34:2c:06:
62:3e:c7:4f:77:70:d8:db:6c:48:fa:bf:8b:76:c2:
00:11:49:4e:62:f7:7a:bc:76:fa:ed:a1:bc:4b:bc:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:83:E9:88:F5:FB:04:96:C6:A1:F5:7B:80:F8:96:CA:F5:7F:00:3F
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a3:e5:f1:bc:70:eb:08:09:bc:6c:0d:12:a0:1e:45:b1:d1:
c0:1c:6a:b6:2b:e4:fb:51:0a:39:b5:d7:c4:6a:29:72:01:3f:
20:f2:35:eb:9a:08:92:3a:d4:8b:f9:4f:69:d0:72:5d:29:29:
88:86:c6:63:d9:ae:3f:02:6f:67:f8:32:8f:36:9e:9c:54:0d:
26:2e:76:b1:4f:b9:40:62:f3:d8:0e:09:d5:47:41:3f:5e:77:
1c:8c:62:f5:a7:41:a7:52:6d:9a:52:0d:6b:a0:04:83:42:db:
98:64:c9:82:96:19:78:16:c9:fc:7e:f7:bb:89:79:0d:43:d1:
0a:5d:2d:ea:29:57:93:e5:5c:00:ff:55:db:b2:13:60:75:56:
63:17:c8:bb:26:af:55:c4:a6:ed:1a:37:43:69:ee:11:d9:69:
64:19:7c:d4:01:b2:3a:5b:fd:2a:d1:13:71:7d:66:7a:a8:bc:
8a:d5:3e:e5:eb:01:ac:44:05:10:16:76:62:88:4e:31:c3:28:
62:c2:48:fa:94:fe:ea:a5:8f:91:34:11:71:50:ab:d1:ce:fb:
ae:2f:a9:af:ad:1d:cc:6e:88:06:01:13:f8:8b:e3:d8:18:3f:
27:68:2c:07:fe:2f:2d:76:41:80:b0:cf:1e:a5:9c:2d:af:69:
62:b0:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:01 2026 by rpki-client