Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
File: qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft (raw, json)
Hash identifier: ZBQ9G4zROlW36ilJkQGlkjpC4gPh0x2KXM61YwiUWx4=
Subject key identifier: 55:C6:41:07:FA:D1:76:FF:93:83:66:AA:6D:2A:38:53:4B:BE:9C:D9
Authority key identifier: A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB
Certificate issuer: /CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
Certificate serial: 019D284E3165C3280CCF266637FCC99A3FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
Manifest number: 01D8
Signing time: Thu 26 Mar 2026 04:01:46 +0000
Manifest this update: Thu 26 Mar 2026 04:01:46 +0000
Manifest next update: Fri 27 Mar 2026 04:01:46 +0000
Files and hashes: 1: SV-k7vOmp78ptABWGmNdtZgKTUE.roa (hash: Y6g0l9jHxH9c7iY6DMqcSeYaKKVNRITzYxEL75xHrLg=)
2: qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl (hash: J9ZZaH+3kOM4WXlezR0jNh0uBIow8NiQ84P8Tl/ycDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:31:65:c3:28:0c:cf:26:66:37:fc:c9:9a:3f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
Validity
Not Before: Mar 26 04:01:46 2026 GMT
Not After : Mar 27 04:01:46 2026 GMT
Subject: CN=55c64107fad176ff938366aa6d2a38534bbe9cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:c9:d6:9f:d9:63:92:fe:43:7d:e0:15:19:
74:b4:76:aa:69:e1:c2:93:d2:66:e2:24:38:2b:de:
72:12:98:d6:9f:04:a9:03:2a:e0:8f:fa:3e:d8:fc:
3a:f3:48:5c:59:a1:32:16:54:98:f6:07:e8:49:7d:
7d:d1:60:0a:ac:be:52:b3:16:50:84:17:a5:60:ab:
d4:00:e5:c8:71:be:71:0e:5c:8b:7c:7d:d7:9f:9f:
69:ef:b6:22:9b:02:3e:86:0e:00:ef:dd:9a:5e:00:
12:14:f0:ff:8e:b7:d6:e0:fc:15:ea:b8:8d:9a:58:
96:bd:47:22:79:3c:fa:18:b5:61:d4:1c:1d:e4:8b:
0b:32:79:01:0a:87:34:41:ce:02:b4:3a:c9:71:dd:
2c:b5:93:05:86:ee:6f:79:88:f9:15:01:f1:58:f4:
62:3b:89:a4:ae:13:e3:d3:54:4e:ec:1b:80:80:87:
07:15:76:58:14:26:2a:b8:d8:c7:74:43:59:56:df:
cb:5c:3c:e5:52:45:3c:f6:c8:cd:d0:04:2e:3b:48:
6e:0c:fd:e4:33:9d:b8:ad:15:af:87:8e:2f:49:e3:
b9:9b:e9:55:47:b5:9e:f1:b6:d1:e1:cd:fa:6e:30:
38:1f:0d:68:d6:8d:a8:69:3a:96:33:0d:cf:ab:5f:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C6:41:07:FA:D1:76:FF:93:83:66:AA:6D:2A:38:53:4B:BE:9C:D9
X509v3 Authority Key Identifier:
keyid:A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:da:f8:50:e3:b4:bf:3d:7a:b4:29:4d:49:9a:25:eb:e4:57:
b0:9c:79:29:20:dc:31:08:38:06:e6:d0:88:74:26:88:0d:1b:
e9:4a:e5:cf:f7:fd:1b:04:1e:d1:67:d7:15:5b:74:6a:ee:97:
5d:b8:4f:a6:1e:02:a8:be:d0:b4:6e:71:2b:1a:cd:a8:e6:4b:
57:d0:7e:ef:78:4d:ab:1f:c7:77:77:d6:b8:62:37:5d:c3:80:
e2:d1:8c:c0:29:b3:d6:8e:ce:7f:cf:74:c2:35:a7:db:ad:07:
c8:8d:82:a7:bc:ed:9e:d7:6d:fa:8b:f8:6e:74:03:01:45:2e:
db:c1:f6:f8:88:67:ed:9d:5f:a9:03:eb:f2:ae:56:ed:35:48:
2e:f8:4a:64:40:e9:de:c9:49:68:1d:92:e6:5a:80:5f:d4:6f:
a5:71:c7:3c:e0:db:40:5a:b2:a2:20:a3:43:8a:8d:0c:74:8b:
25:af:38:41:5c:d1:54:e1:ad:43:7f:aa:f4:be:73:68:04:b3:
16:62:c9:17:9a:09:b3:64:b7:d8:80:c0:30:65:3f:ad:84:7a:
87:e1:18:f2:a3:00:f2:bf:a0:16:5a:3a:ae:cd:16:40:33:12:
93:14:bb:ce:97:46:d1:54:c7:37:65:3b:d8:41:bc:3f:e9:98:
8b:df:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:06 2026 by rpki-client