Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: hnDVtCMzmC42YE481ES2JiQrJvtcuT/P8GYWT8VufVM=
Subject key identifier: 7A:12:5F:78:D0:31:C6:D6:D4:FA:0E:D9:3D:93:81:2B:B9:F4:FC:D1
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 019D273B07170C6F43FFB7FC656E6C21F846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 1596
Signing time: Wed 25 Mar 2026 23:01:13 +0000
Manifest this update: Wed 25 Mar 2026 23:01:13 +0000
Manifest next update: Thu 26 Mar 2026 23:01:13 +0000
Files and hashes: 1: fEi6HkF-C6surJLz6ozVnN3DCKA.roa (hash: Sz33Ft2tcLfICDqBq5ZnLaKyfti3irB30drgbFVQKSw=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: PZG0sg7EZFIJdYX3U+1jYIPmKrw5NmlM9HuGyx1ktcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:07:17:0c:6f:43:ff:b7:fc:65:6e:6c:21:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Mar 25 23:01:13 2026 GMT
Not After : Mar 26 23:01:13 2026 GMT
Subject: CN=7a125f78d031c6d6d4fa0ed93d93812bb9f4fcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:7b:69:2a:56:f9:a7:19:bb:47:27:54:c7:
64:cc:2b:ac:97:68:8d:7d:63:da:a7:89:9e:93:2c:
2c:01:18:c6:92:c4:ad:69:ff:e1:a3:16:9a:7f:17:
9d:3d:1a:5a:38:df:1a:f7:6c:2f:be:d9:57:85:2d:
0b:68:d8:65:1d:f0:2b:c4:0a:d5:12:07:d8:42:50:
96:31:10:d9:3a:cc:b7:51:37:cf:d9:01:e8:ee:1b:
b6:8a:3e:fa:e5:5b:fd:34:1c:31:a2:3b:4a:c2:a1:
5b:45:6f:e4:db:cd:60:5f:27:5c:85:51:95:9f:72:
1b:ca:1f:89:ee:18:e0:ca:4d:f7:78:c9:69:18:76:
8e:21:64:4f:81:b0:a1:3c:86:10:7c:b7:41:5c:70:
18:56:ea:8f:fb:67:77:da:15:e6:54:a2:cb:11:d1:
56:30:7b:26:92:26:68:25:2f:bd:f1:e0:01:7e:14:
79:a7:aa:44:d1:50:40:80:4e:12:8a:a7:70:a2:e1:
78:0c:b3:5c:e8:83:10:6c:c4:71:36:bc:17:49:d3:
c4:ed:84:59:5e:d7:60:5f:06:29:0f:81:70:16:19:
3f:13:9c:df:0b:bd:a9:6d:a6:4c:00:17:05:4e:86:
69:97:c8:2b:c2:66:38:84:52:cc:6a:65:0c:52:c8:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:5F:78:D0:31:C6:D6:D4:FA:0E:D9:3D:93:81:2B:B9:F4:FC:D1
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c2:1a:8c:9e:5b:c0:95:b9:5a:56:27:4c:dc:cd:6b:e9:6e:
39:63:ef:ef:ae:0d:94:59:84:bc:90:5a:1b:ef:e2:93:90:53:
d4:1c:90:b9:ba:2f:e4:b2:b4:50:76:cd:e0:f6:f3:9a:dd:fe:
e5:28:a3:2d:86:5b:1b:0c:ff:11:0f:3f:2e:b1:1f:cc:d5:b2:
86:60:33:1c:7d:34:56:2c:18:64:c3:80:49:87:9a:b4:91:bc:
f6:86:26:ba:94:b8:b5:da:34:f1:2e:52:c4:2e:3f:ab:fc:f6:
6c:a0:ee:26:ae:fd:e3:34:7d:30:70:3b:48:1f:b0:3a:61:43:
86:7c:7c:01:6d:4f:a6:cb:99:71:12:6e:74:f5:c3:48:f5:3f:
4e:48:a7:2c:23:67:bc:bb:58:be:c6:26:65:10:76:72:fe:8d:
be:9c:ce:1b:f9:79:7e:e8:b4:6c:df:22:3e:9b:62:f3:27:b0:
c0:11:e6:cd:0a:7c:87:25:c4:6c:43:61:f0:30:15:ef:2c:f1:
9b:d9:73:ce:95:30:45:08:e9:9d:ee:84:00:69:76:9d:cf:56:
1b:58:63:05:1e:a8:25:f2:84:d1:6d:f6:7a:c1:76:4e:4f:0d:
01:6d:68:80:d3:f1:33:34:34:65:42:4a:d4:77:00:c5:80:c6:
e2:95:b8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:18 2026 by rpki-client