Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: mJG4+zQBamLfmxMIDKyP7fNa46vyjqvNan0KVmszGZc=
Subject key identifier: 63:8C:A1:92:59:45:D2:FA:96:2C:EB:E4:81:20:5B:78:BE:FE:FA:6D
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 019D29CE9424C902B5850352400CE312CDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:37 +0000
Manifest this update: Thu 26 Mar 2026 11:01:37 +0000
Manifest next update: Fri 27 Mar 2026 11:01:37 +0000
Files and hashes: 1: E3Abz8c2x25X2p1IuNZFKekLDzE.roa (hash: DciKvL6unAo5I4YBQh4SUA/jwjzYuA3QTOA40FWqmwU=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: BkbRgTdh7sclhAWzNwavwtTj0vW3akJj+/4SevBWVO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:94:24:c9:02:b5:85:03:52:40:0c:e3:12:cd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Mar 26 11:01:37 2026 GMT
Not After : Mar 27 11:01:37 2026 GMT
Subject: CN=638ca1925945d2fa962cebe481205b78befefa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:8f:db:8d:09:0c:b8:d5:d4:f1:81:27:b7:
59:ff:0a:54:38:fd:c7:1a:ca:7c:86:2c:6a:ad:81:
94:66:8c:a8:73:4b:c8:82:76:a6:da:6f:14:57:c5:
af:b0:55:23:20:ca:b6:60:86:a9:d3:ac:6b:2b:b8:
38:6b:32:9c:ae:ba:a4:e8:12:0f:93:1a:6f:85:3e:
ec:7a:2d:e2:c6:29:57:8a:d8:fe:dc:0e:a0:a3:40:
45:c8:9e:42:58:5c:33:b3:15:24:c5:d6:2b:76:42:
3e:55:0a:e9:83:2d:82:3a:5d:b4:93:92:46:97:cc:
5b:24:ac:31:22:8f:ca:03:57:35:83:fa:ff:bf:39:
6a:c8:44:4d:21:f7:24:41:fe:0a:62:11:02:8f:0a:
7a:80:5e:3b:dc:50:b1:ed:2c:73:c1:41:3b:09:2a:
23:74:09:60:f3:34:ba:c3:7b:99:69:cf:30:62:d5:
1e:43:4c:b4:c5:7e:c0:e6:2f:e6:d7:be:7d:1c:8d:
d8:b0:01:56:57:24:39:bb:7e:20:80:d5:6c:35:a3:
e8:cf:88:62:17:11:1e:4d:5f:d1:39:6d:84:29:e5:
8a:7b:a0:49:d4:cb:17:ca:28:32:0e:c2:19:ff:7b:
ba:11:ca:20:1a:a5:d0:fd:fd:5b:fc:3d:22:bc:90:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8C:A1:92:59:45:D2:FA:96:2C:EB:E4:81:20:5B:78:BE:FE:FA:6D
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1e:ac:0a:73:54:60:56:34:93:10:36:1e:1a:48:ea:f4:49:
9b:5f:81:af:89:74:13:21:88:29:67:0a:a5:a8:be:37:36:17:
9c:34:dd:bf:76:5b:1b:dc:38:f3:ba:93:b3:68:07:59:57:cf:
78:e5:0f:12:2f:68:21:06:3a:f1:0c:91:f3:05:16:37:6a:93:
f0:fd:1a:8d:67:0d:31:ea:75:71:61:43:05:a5:b9:27:4d:fc:
40:aa:e7:d0:7a:2e:bd:2f:07:94:5c:f6:26:0d:2d:0b:0c:1e:
6c:35:23:84:b8:02:81:d8:2c:3c:a5:41:cb:99:ca:5f:4d:82:
00:8f:22:76:a2:65:60:f4:5e:73:de:84:c8:f1:59:bf:69:1b:
c6:49:66:a3:15:f3:4b:3a:35:1b:d9:91:24:40:3a:db:07:5b:
1f:99:64:9d:d7:b4:bf:02:1c:8e:97:06:04:a8:b2:1b:6c:77:
f8:9c:9b:80:1c:d6:bd:96:fb:11:e6:0d:a8:99:49:bb:5d:84:
b7:19:77:d9:fc:14:3a:10:e7:c6:9f:ee:bb:d4:3d:f3:a1:90:
38:57:ae:2a:04:d6:f3:bb:a5:a8:0f:3c:6d:cb:4c:17:a1:5d:
4a:c8:f2:ca:b3:52:d7:e5:60:77:af:2e:a1:e8:1b:d9:3a:81:
45:61:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:48 2026 by rpki-client