Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: xa+rXpKPjgoZvmAODeF+5Xl6ohw8CRe3aa0mNjb6gXI=
Subject key identifier: BB:BF:1F:F7:1D:80:57:86:DA:9E:E6:6A:A1:94:A2:A4:39:08:DB:1E
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 019D2884D5DE6DEC46FB67FB79C7F71807B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 0750
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: iGt8++B7TAlpQoJyTs12Ylly5PbQkiS8yqMVnpgfpQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d5:de:6d:ec:46:fb:67:fb:79:c7:f7:18:07:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=bbbf1ff71d805786da9ee66aa194a2a43908db1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:56:d3:2d:78:14:6d:fe:59:9f:2b:96:2a:
de:70:37:b7:ed:24:b6:75:da:2a:d2:3b:8e:0b:6a:
fb:bd:9d:34:47:29:d6:4c:a6:71:f4:7c:b7:36:ac:
17:80:9c:29:a9:a7:cf:48:29:f8:82:b8:5e:ad:9d:
1a:f5:84:6b:3b:33:e7:85:88:b8:81:0e:c6:c1:80:
06:83:83:fa:fe:0d:f8:5e:09:94:d2:e6:6f:ba:5d:
67:65:fe:8a:84:bd:47:3d:1a:77:b8:16:bf:e1:c5:
b2:07:28:dd:6d:0b:c8:04:7e:7e:e8:b3:4b:dc:e7:
06:a0:de:14:36:fe:f7:af:1b:b3:1b:b9:60:56:08:
b2:76:af:41:9f:6c:1f:eb:95:09:1d:d0:fa:d3:dc:
8c:71:89:80:6d:52:08:86:c7:c2:c9:9f:fa:06:a6:
d8:98:aa:f7:8b:9b:ff:45:fe:4e:34:d0:db:e8:e2:
17:9b:4b:31:77:7f:f9:85:c3:47:31:d6:ad:4b:ee:
38:41:ba:45:75:95:e8:ae:73:60:ff:50:43:7b:ef:
09:da:0d:72:43:95:b9:c9:e9:94:11:f8:fb:8a:c7:
e1:75:41:70:d5:21:94:0b:d8:dc:c2:5f:91:a3:c3:
55:90:79:f6:22:8b:11:ef:1d:e4:bf:56:f1:d5:9d:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:1F:F7:1D:80:57:86:DA:9E:E6:6A:A1:94:A2:A4:39:08:DB:1E
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:21:7f:33:89:ab:bd:51:2f:52:72:ef:c0:55:89:28:e6:57:
3e:63:46:9c:6e:0a:c2:43:1b:71:01:09:4a:13:ad:e8:47:87:
89:4d:7a:d4:b7:6a:ef:ee:6d:30:94:a0:1e:b6:df:c2:ff:cb:
62:e8:48:40:ac:ac:4c:4e:3d:62:99:9c:53:da:8b:0d:4b:e0:
b3:de:0c:64:19:7a:84:21:fd:35:f7:54:f8:9f:5d:af:6a:a2:
82:19:9c:f2:6d:8e:8d:ec:e1:2e:3a:48:87:90:a3:0c:61:05:
73:66:0b:47:dc:07:dc:69:64:da:58:68:9a:bb:9e:06:90:3e:
e8:17:4b:55:4a:1b:f5:65:69:6b:a0:7d:0d:2b:c0:80:e5:1b:
f8:44:68:18:1d:d3:54:52:c1:cd:23:d8:35:fb:76:5b:71:02:
a9:ed:2e:17:49:09:37:5e:bd:93:ba:d0:ac:6c:e7:8f:91:8f:
be:17:d4:94:cc:b1:b7:10:82:67:eb:56:f3:3d:2b:72:1f:27:
e0:77:f0:7f:4f:47:57:8f:af:6f:f1:98:1c:51:54:8a:f9:2b:
01:fa:09:4d:de:c0:08:7f:d6:7a:94:a4:db:61:be:ee:c9:e7:
7d:0e:b2:59:38:c0:3b:72:46:cf:90:87:28:f1:42:18:bc:3d:
7d:fc:f7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:20 2026 by rpki-client