Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: yHAz1H7hbK4LqPUJ8ZsTjbvaMmfklNJVunnU3FlcwV8=
Subject key identifier: 72:BD:01:10:2E:21:E6:11:4E:54:D0:DF:6C:3D:A0:92:AC:D2:5D:F5
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 019D25833B8EDE3098D34254C6C2E6DBAC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 0253
Signing time: Wed 25 Mar 2026 15:00:50 +0000
Manifest this update: Wed 25 Mar 2026 15:00:50 +0000
Manifest next update: Thu 26 Mar 2026 15:00:50 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: i9r/P+/1RSb5S3Misw7C4E1Esn6nEjINX2GkatX2yCI=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:3b:8e:de:30:98:d3:42:54:c6:c2:e6:db:ac:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Mar 25 15:00:50 2026 GMT
Not After : Mar 26 15:00:50 2026 GMT
Subject: CN=72bd01102e21e6114e54d0df6c3da092acd25df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:01:9c:cc:c8:81:03:a6:70:80:33:c2:ad:
a9:9d:58:78:8e:2b:27:2a:7e:70:e1:3a:c4:33:b0:
b5:d3:a5:e1:4f:ca:f3:bd:7f:80:64:1a:58:7c:98:
a4:07:cf:8c:a4:24:54:67:9b:88:f4:1f:fe:51:8c:
d1:bb:de:95:80:09:23:2e:1a:bc:3e:7f:92:9e:43:
ab:ac:94:ce:dd:f9:c3:8e:84:56:d0:21:63:96:06:
d5:37:9b:5b:e7:cc:13:87:cf:d9:71:e6:36:57:77:
e6:6a:16:94:a0:91:f8:a7:d2:16:4a:ad:51:d2:70:
8c:5f:73:5d:1a:b9:7e:d4:0b:d9:c8:28:69:43:cb:
c2:19:c0:08:4a:95:e4:ec:1c:46:b9:c4:62:5b:1f:
5b:73:5c:ec:c1:fe:81:3d:cd:8b:b4:6f:96:99:fc:
92:aa:70:fc:16:2d:ed:8a:bc:5a:73:70:48:47:d9:
3e:bd:8f:f8:9e:78:32:af:4d:29:97:6f:af:dc:b4:
d7:c2:ed:58:53:68:c9:03:ee:5e:4c:3e:cc:69:48:
a6:fa:dc:29:e9:48:28:13:fc:49:a1:4e:68:8b:6d:
1e:36:8f:9e:28:f0:19:13:60:1b:8c:a7:11:19:6c:
6c:1e:e8:0f:72:3e:7a:78:9b:9b:ee:8b:5f:3d:5c:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BD:01:10:2E:21:E6:11:4E:54:D0:DF:6C:3D:A0:92:AC:D2:5D:F5
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:12:4f:ed:8c:87:bc:a3:16:ce:b5:94:12:0d:b6:2c:0d:bc:
c6:3e:05:d9:eb:a8:c1:77:51:32:68:d0:08:69:6a:fe:21:af:
52:96:d5:28:6c:71:2a:3d:cf:07:0d:78:93:a3:06:71:4e:a5:
a8:91:62:77:1d:b2:6d:6f:44:31:f3:93:be:01:44:6c:b6:be:
44:80:1c:b2:55:49:a9:cd:59:40:6a:c5:b8:a0:32:17:55:31:
55:1d:56:c1:53:9e:e5:a9:22:f5:cf:09:d1:67:20:de:76:f2:
01:56:6c:6c:81:76:7b:de:be:9c:ec:63:0b:da:85:08:6f:b0:
1f:b1:a3:30:a7:d2:0d:a5:d3:bb:22:9b:72:91:06:06:7d:4b:
8f:da:60:c9:86:f6:82:37:54:4a:53:a9:ee:65:69:29:06:35:
6b:a3:ae:1c:8e:81:85:a6:c5:3c:3c:13:73:a8:73:39:97:61:
2a:20:03:54:35:cf:8c:64:ea:4e:63:37:30:ea:45:0d:d9:74:
36:e0:3a:f8:5d:2c:87:06:7a:9f:f5:01:4c:4d:dd:0b:51:7f:
eb:dc:9e:46:c9:e7:54:a7:b7:d0:bc:6c:2e:f4:23:bc:c5:e8:
e3:7f:4a:fe:a4:0f:4d:5d:f2:04:e1:a7:69:1b:45:48:a1:65:
2e:9b:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:15:51 2026 by rpki-client