Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json)
Hash identifier: kW67PAQfWe5vJ13N2xerxA8xY551cj30HqI7fl67As8=
Subject key identifier: C6:3C:52:A4:81:F8:7C:2C:19:21:DB:3C:94:F7:59:97:D6:B4:EE:AA
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial: 019D29CE4B03B3F130CB5E296C72E2E6A612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
Manifest number: 06CD
Signing time: Thu 26 Mar 2026 11:01:18 +0000
Manifest this update: Thu 26 Mar 2026 11:01:18 +0000
Manifest next update: Fri 27 Mar 2026 11:01:18 +0000
Files and hashes: 1: arEWxGjVNSq334y6Ktt8aDjalyE.roa (hash: TaWGOyG5nBxY0egiO8Xs2dGnWrPRgWPcphWefnhZTWM=)
2: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: mgB+zdGu6i1dTNL2yxUPHAQZbA1fy4giYMEV3YLhsnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:4b:03:b3:f1:30:cb:5e:29:6c:72:e2:e6:a6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
Validity
Not Before: Mar 26 11:01:18 2026 GMT
Not After : Mar 27 11:01:18 2026 GMT
Subject: CN=c63c52a481f87c2c1921db3c94f75997d6b4eeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:07:cd:4a:31:d6:22:8b:a7:36:76:23:77:
7f:f1:d0:c3:d6:1a:1f:d3:24:7b:cd:40:04:75:63:
a3:bc:8b:72:59:a3:a5:3d:e7:b7:45:40:37:4d:30:
fc:1e:54:09:ed:ed:33:2f:9f:b1:7b:9b:38:63:ee:
e5:15:17:a3:46:a1:fc:70:75:37:16:89:98:2a:85:
1f:60:ef:ea:9f:85:25:57:79:47:7a:bc:c5:1f:15:
ca:e4:0c:68:7a:3c:6c:a3:a8:29:ae:59:72:ad:95:
df:fd:20:5d:38:c9:dd:56:79:c9:5b:fe:89:97:8a:
66:6d:eb:08:12:02:6e:8c:98:12:22:00:7b:e0:7e:
fb:a3:95:42:49:dc:62:f9:2e:83:59:5e:5d:25:6b:
13:41:09:0b:45:3b:2b:7e:9d:57:82:9d:ee:58:a2:
b4:bc:cd:09:c8:8a:79:23:32:eb:49:1b:85:97:86:
d8:0b:bc:87:d5:03:0c:19:ef:a8:00:e2:05:70:5f:
97:35:f1:0f:28:6f:27:71:55:5b:7d:22:56:36:c6:
8c:b4:5d:74:9b:71:09:aa:7c:53:0f:18:47:dc:35:
aa:f7:e3:c6:f1:7e:2f:e9:ab:aa:87:fe:a0:8c:1b:
83:b1:44:3d:7c:35:2f:2e:57:97:f3:d8:00:37:e0:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3C:52:A4:81:F8:7C:2C:19:21:DB:3C:94:F7:59:97:D6:B4:EE:AA
X509v3 Authority Key Identifier:
keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a1:30:a3:88:55:e6:74:fa:16:b4:a2:9a:6e:4a:28:e5:ab:
a2:ad:d2:75:d1:9e:15:86:07:01:8d:3d:69:7e:b1:6a:78:55:
05:dc:0b:d6:2f:63:ef:31:09:1f:de:25:c6:e0:2d:e2:11:e7:
0c:a6:b6:56:33:c1:ed:95:82:1b:82:c3:77:25:94:ed:24:47:
c2:d5:94:d0:b4:36:88:10:2e:a7:8a:87:44:b8:ad:16:ce:9b:
52:d6:9c:11:22:5d:c6:1c:f1:24:c1:93:1a:40:1f:82:1a:25:
a2:fc:ce:ea:c7:4c:26:92:d3:30:66:a4:2b:3e:9d:8e:df:a4:
93:01:2e:17:55:fb:ae:04:4f:f9:80:3a:72:49:7a:7a:26:8c:
f6:36:17:65:38:8e:ae:5c:9a:27:9b:88:06:5d:69:33:2e:06:
9a:aa:b6:39:15:9d:b5:e2:32:2b:e2:f0:1e:36:22:08:8f:d7:
3a:a9:54:ca:d3:4c:b9:05:68:3b:49:3b:21:f4:ca:0c:3a:66:
35:53:40:5d:3d:3b:12:0b:ac:52:0e:27:0f:02:08:af:08:0e:
b8:08:5e:fe:e9:04:8d:46:e8:e3:04:a2:c9:7c:75:ed:14:58:
63:8a:04:ae:d0:28:3c:24:c3:ce:83:12:bd:61:c6:a2:6a:ee:
77:03:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:09 2026 by rpki-client