Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: VjnUVdT4u1iEru8zuMf6M1XUDp6lj60pfrp7VCkRNlY=
Subject key identifier: D6:78:1D:8D:B9:2B:DB:78:DD:5C:D0:38:87:EF:BC:BD:54:0A:0C:77
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 019D265F08C5433B2D4F72E2E535E456DBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 1827
Signing time: Wed 25 Mar 2026 19:00:55 +0000
Manifest this update: Wed 25 Mar 2026 19:00:55 +0000
Manifest next update: Thu 26 Mar 2026 19:00:55 +0000
Files and hashes: 1: HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa (hash: nQkhhNw6S8PZEQHevPsGMLpoMsMwEk7juRVeNkbr0JM=)
2: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: yyjiuQvuFfUQ++rS5BKnu5DYKLTfG/can56aPVQhEtY=)
3: wA3yzq_z75jJrcxF21_yaXTLA1E.roa (hash: iBqEBSf11enOfh3VlmmIO8pdDcGFw1PdUgNRwZ2N9r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:08:c5:43:3b:2d:4f:72:e2:e5:35:e4:56:db:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Mar 25 19:00:55 2026 GMT
Not After : Mar 26 19:00:55 2026 GMT
Subject: CN=d6781d8db92bdb78dd5cd03887efbcbd540a0c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:d9:80:9c:ec:ea:33:cc:ca:38:05:2b:21:
e7:43:6c:7e:5d:9e:19:d7:2d:56:f6:e9:e3:cf:3f:
d2:66:93:c5:75:46:c0:bd:48:03:f4:db:bd:ef:de:
df:53:80:c8:91:87:20:c7:59:f5:d5:1c:58:5e:0c:
1c:7c:90:33:c4:4d:00:1c:e4:62:8a:88:d2:b3:99:
57:c7:5e:cc:8b:9a:84:b2:39:e6:f8:4f:83:81:b1:
73:b8:1a:3a:6f:d7:8f:62:9a:33:55:1f:b2:a8:a2:
a4:74:8c:52:c9:94:d2:7a:45:51:fb:19:00:44:a2:
a6:df:88:20:da:32:24:94:a6:ad:be:d9:0f:41:44:
6a:9d:ff:fb:ef:a4:70:f6:4f:08:12:aa:d8:04:cd:
5e:54:a8:9a:d7:cc:26:d3:2d:b0:b6:95:95:33:e5:
18:dc:75:eb:92:34:ca:b0:6d:0c:56:90:57:8a:e2:
74:23:a8:8b:30:0a:84:66:19:3d:5f:9d:e0:21:51:
76:ab:7c:22:74:2c:1f:ba:25:26:f2:d9:f6:59:05:
3b:0b:9a:51:02:29:02:4d:b7:3e:91:f7:0a:03:6c:
bc:58:97:b1:85:36:65:2c:b4:fb:d7:ea:f4:f6:a2:
0d:03:ce:5d:b8:a8:ec:c4:0e:ca:3e:b8:13:fc:70:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:78:1D:8D:B9:2B:DB:78:DD:5C:D0:38:87:EF:BC:BD:54:0A:0C:77
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:20:9e:a6:a8:bc:f1:0e:31:f1:43:84:61:58:af:bd:41:c2:
7a:fe:72:65:ce:11:39:08:dd:d5:a8:4b:72:cd:6a:b1:5e:74:
4f:6b:a8:8e:67:f5:d8:55:1c:4e:76:79:17:21:5d:83:12:32:
5c:56:15:c2:a1:9e:45:ae:f5:cc:e7:ae:3e:a6:ba:37:39:ff:
7b:a6:a3:13:d3:5f:26:e8:5c:fc:73:ca:5b:48:9c:67:26:8e:
0a:9d:55:72:08:db:48:1d:15:c7:ac:a2:8a:79:3a:90:54:1e:
a4:37:fd:27:df:55:ed:67:07:1b:76:3f:e4:95:0c:14:5a:2f:
d6:f5:07:a9:52:bd:17:0d:7a:4e:79:b2:46:05:ab:4b:b0:20:
e0:93:25:32:98:df:62:de:35:52:f4:57:5b:21:83:82:a4:e0:
6e:8d:d0:40:d1:0e:ec:d5:22:ef:60:87:31:63:e4:a7:0f:23:
d5:1c:2a:64:59:fe:d6:39:cb:fd:4b:6f:9a:2f:03:d9:b0:3f:
af:74:3c:a2:47:eb:13:43:6e:6d:70:8b:d0:e6:b7:a7:15:43:
6f:62:f2:a9:b1:12:66:c6:08:1f:1e:10:33:2e:e1:a0:8e:8d:
c7:c7:d9:24:a0:09:38:b1:41:03:df:c8:77:be:fe:8c:d9:c4:
60:5f:6c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:56:09 2026 by rpki-client