Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: 07eE2sEplXoipXePK3QWXKPlBN0vgZ3yLq48LsxUNj4=
Subject key identifier: DB:E2:97:11:6E:14:0E:F9:1C:9F:6A:08:86:79:29:D3:69:E4:36:2A
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 019D27E008DD17CD08BD955ECA156C5A84C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa (hash: e4XrjTZT9DVKsoP6xpDG68p8DkyaP4kbQPdVBr18Zts=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: oqA4dHQuH9EXspMwjYQbA2t+DFklywnynyXtyuCr1T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:08:dd:17:cd:08:bd:95:5e:ca:15:6c:5a:84:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=dbe297116e140ef91c9f6a08867929d369e4362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:30:cc:92:ed:02:d3:c8:bb:31:2a:78:14:5d:
07:85:4e:62:d8:ab:ad:fc:78:30:97:f4:44:77:a5:
50:b8:a0:6a:a9:44:e4:5e:a5:61:e2:08:f6:cf:27:
33:3f:1f:9c:76:ce:b5:c0:d5:16:9b:31:94:35:09:
00:f2:09:1c:aa:12:0f:a9:ac:73:2f:b0:48:9f:28:
4c:fc:50:80:58:5b:88:b1:fe:9a:f7:55:d2:f0:87:
1c:f0:b8:30:b8:4f:21:0c:8c:6d:23:f4:7a:a1:c1:
cb:6e:41:6f:44:6e:4f:d1:a5:51:2f:1b:0d:e6:27:
43:99:e8:c3:9f:84:27:26:fd:50:48:46:82:d0:5f:
ff:c2:2d:5b:8f:55:98:b2:3e:6d:1e:7b:61:aa:b0:
33:f5:be:22:f8:e0:b7:f4:0a:54:4e:5d:08:af:33:
d4:60:3f:63:ce:2b:58:98:f7:43:51:b0:18:9e:0b:
37:76:5b:b7:8e:7f:0e:86:2b:23:27:93:87:3c:a6:
dc:52:11:68:ad:30:51:68:38:46:3d:03:53:49:d9:
ce:fc:45:0b:18:29:5f:fb:07:79:9f:d1:1c:5d:9f:
ca:2a:57:74:5c:eb:fd:b1:ae:17:3b:b3:8b:14:8b:
8f:ea:7e:f5:4f:f1:07:c1:31:1f:ce:a6:fb:86:cf:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E2:97:11:6E:14:0E:F9:1C:9F:6A:08:86:79:29:D3:69:E4:36:2A
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:97:2a:95:b5:27:46:b5:81:98:af:b6:54:8c:8f:10:2e:8d:
13:a8:35:70:69:2f:aa:76:89:f8:ea:b6:0e:ed:19:97:73:dc:
58:ca:ef:82:5b:8a:43:a9:c6:e9:64:66:d3:ec:c6:25:32:88:
7a:6c:e6:bb:96:31:68:08:8d:60:b2:85:d6:84:aa:a7:c5:6b:
c0:13:78:e3:56:dc:3b:8d:22:80:45:f3:04:cd:30:86:96:69:
1d:5a:0e:38:e2:e6:4b:17:2f:cc:38:bd:8c:1d:61:5a:da:b9:
2f:bb:b0:c6:f2:c6:e5:da:ea:89:d5:8a:47:7d:ad:36:71:62:
78:b2:d1:3e:66:7c:13:69:ae:c5:71:f6:d9:ef:04:38:05:7c:
f8:b2:90:ef:05:dc:b9:01:b6:aa:26:2a:24:a3:e0:cf:64:e2:
a0:30:9f:4d:73:38:28:6c:27:bf:6b:ef:ab:dc:31:18:8b:19:
8d:c8:68:51:46:48:b8:20:4a:d7:e1:1f:6e:89:9d:95:09:3b:
bf:38:ef:d3:af:3d:b4:6c:8b:9f:39:4d:dc:98:b9:71:8f:74:
17:8d:6b:87:61:36:12:2d:f7:6f:c3:39:52:88:a1:3a:a1:08:
30:0d:75:27:b8:6e:a1:ee:02:2c:5c:ef:8a:d2:3f:b3:d8:92:
3f:68:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:09 2026 by rpki-client