Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft (raw, json)
Hash identifier: mIxAJG5iEVqMg8mzo5Jnp5ZbS7dKHKD3Kt8aaxbv78Q=
Subject key identifier: 9D:29:C9:55:34:DE:78:37:50:06:4E:80:31:C4:14:2A:7E:AB:82:60
Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Certificate issuer: /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Certificate serial: 019D29297C7AF3B6F6E5F3EB278619BFEAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: O1uFtg6wuLhrdqUneGoI-viUEDA.roa (hash: 4WLi2bkwD7hhzZv3R/usE+9JZdJI8FhP2vDUzbQmMeM=)
2: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl (hash: PDYoBrycPEJ+CUozozs4YPKdo21XCUfTVFiNuJEytvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7c:7a:f3:b6:f6:e5:f3:eb:27:86:19:bf:ea:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=9d29c95534de783750064e8031c4142a7eab8260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:54:3f:53:65:00:fc:8a:c7:52:37:64:cb:
ca:61:c7:cd:b1:d4:2c:19:28:72:4b:74:2c:fc:78:
5a:ca:3a:9a:06:21:44:93:f0:dd:29:74:3d:82:15:
22:10:43:be:80:cb:c1:a2:70:f5:f3:58:ac:d8:9c:
85:4f:e6:5f:a9:43:23:60:f5:ad:60:a3:a8:4b:e4:
94:37:d5:07:33:ac:39:4e:f0:1e:f5:4e:cb:f1:65:
5f:b4:d1:01:33:a1:ed:c4:05:77:97:12:f4:99:c7:
70:18:b0:97:2b:1a:3f:e3:10:91:ba:e9:fd:97:46:
e4:a9:1f:ab:77:f7:8f:09:cf:e9:26:0b:2e:ea:53:
59:df:19:f2:5e:de:02:05:80:6a:2e:81:66:8e:09:
dd:e4:ab:05:9d:fb:07:7f:b7:9a:07:d1:dd:00:9e:
a8:96:2f:c6:41:e3:e4:41:ce:ed:21:11:7d:91:b5:
b8:47:63:39:94:fc:c4:6a:c8:33:9b:4d:8d:f7:68:
07:57:16:8b:54:b8:9b:2e:8a:14:c3:c3:03:5f:61:
cd:c4:e0:2f:94:2f:62:d5:ad:ec:4c:e1:12:62:83:
95:65:44:ff:85:77:e5:20:f1:6c:5d:5c:b5:c4:9a:
97:23:e9:a8:60:8b:dc:15:a4:c8:df:98:d1:12:0e:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:29:C9:55:34:DE:78:37:50:06:4E:80:31:C4:14:2A:7E:AB:82:60
X509v3 Authority Key Identifier:
keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5c:08:c2:7b:8a:50:e8:bb:7b:99:ab:15:d8:24:4b:7f:4b:
1f:3b:7b:ab:68:74:aa:ac:7a:a3:bb:a3:4c:9a:54:b5:77:b2:
64:cf:42:3a:4c:92:28:0d:cd:01:6f:0d:47:e1:ea:b1:91:c2:
b4:26:d0:a3:d0:06:a2:a8:54:90:54:24:d1:e3:0c:28:16:7f:
e3:fa:01:ef:54:e8:a6:8c:9b:d4:97:3f:db:f8:04:9e:13:bc:
be:a8:0e:06:31:46:6c:4b:7f:61:74:bc:5e:14:0e:da:4a:03:
d7:0b:ae:0e:dd:db:ee:7d:43:93:39:4f:72:1a:7e:63:fb:b4:
19:ad:05:30:b7:a0:21:bc:9b:9d:4d:53:84:53:cf:29:95:3b:
49:a7:29:19:b2:f8:a9:52:34:ff:59:8c:9d:73:3d:c3:62:b0:
0a:14:10:85:fa:91:ee:d8:87:c6:5c:d7:28:3d:73:e2:c2:13:
e7:5a:f2:ea:3b:e7:a9:57:b4:10:49:6e:9a:f1:0e:af:33:f0:
af:65:1b:1d:62:9a:a3:ad:e1:f0:d1:f0:1b:89:3a:f4:45:6d:
f3:80:f1:ac:94:bb:30:aa:2d:3e:b3:3f:ea:48:e0:2a:4f:46:
00:a5:78:f7:f3:a4:ce:dc:8f:6a:a5:e0:7b:19:fb:e7:d0:8c:
29:e6:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:25 2026 by rpki-client