Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: R4vQEGSX4z8VYN41yZy7G7IfrgNvPnXv1tye3cybN38=
Subject key identifier: FC:58:92:98:7E:ED:5A:29:93:F8:5A:7E:57:72:4F:A8:AB:C1:08:70
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019D2772A64E04863F64A1DE51A07CFFF0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 091F
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: OFWxYLuuS0cOUEmzjHFlyr06SHUJ+MKb76BIxU8JdRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a6:4e:04:86:3f:64:a1:de:51:a0:7c:ff:f0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=fc5892987eed5a2993f85a7e57724fa8abc10870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:99:a8:e8:32:1b:49:5a:b1:05:ff:7a:21:c8:
3d:f2:f1:a1:f1:f9:40:a6:79:4e:ab:ca:da:27:6e:
5e:6c:16:c5:b5:5f:f7:e3:64:5f:57:cc:75:2c:3c:
92:94:26:6b:f7:d9:bd:2d:e1:ed:42:98:60:17:03:
29:27:fb:ac:11:ea:dd:99:ee:54:83:eb:d3:ab:ec:
0d:bd:87:88:c1:ca:a4:bc:e7:91:6f:9c:62:55:78:
1d:95:ef:25:2e:a5:27:a2:c3:e2:9f:bf:8a:73:8b:
72:5c:3f:a4:1e:7f:ce:c9:b6:30:1c:41:e0:97:b3:
4f:a2:05:fe:b4:3c:fc:57:83:98:3e:c5:55:74:60:
32:7f:c5:38:88:99:1c:79:b8:65:ee:a6:a5:d3:72:
54:9e:5c:76:64:3f:d7:06:68:b6:3d:f2:d3:6d:11:
90:40:1b:8e:53:8f:62:13:34:12:34:14:0f:96:87:
0b:9a:6c:ca:3a:61:92:13:f6:92:39:85:b8:3e:91:
d9:a2:73:7f:63:f1:0b:3a:e6:3f:e4:5f:f6:73:8f:
67:20:7f:ea:3d:70:df:59:0c:b5:fc:4b:ca:e6:4c:
8c:a1:cd:b7:e9:f6:b9:9c:71:6d:65:c0:5f:5b:9b:
7b:9d:2a:32:98:08:bc:47:a4:25:f3:fa:76:0d:f5:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:92:98:7E:ED:5A:29:93:F8:5A:7E:57:72:4F:A8:AB:C1:08:70
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b3:c6:51:33:94:9f:c9:44:75:b5:ee:d4:4e:d6:9f:ef:dc:
74:96:46:fe:fa:1f:9e:f6:7c:a2:0f:0f:46:80:5b:29:29:b1:
68:d0:cc:0f:c1:d7:8a:d2:39:56:9b:ee:41:01:91:05:62:1b:
84:21:bd:46:66:06:be:00:1d:c4:67:1a:24:4f:89:d9:f0:08:
0d:dc:4b:58:2c:32:ee:71:8c:ed:38:79:6f:ea:11:35:ed:74:
7b:ac:db:88:19:38:33:4a:73:6e:3b:6d:1e:ac:3d:5a:a5:63:
c8:30:7e:b1:96:bc:0a:51:91:f5:a0:e7:88:03:03:89:97:f4:
78:f6:21:31:b7:8b:80:86:9b:5e:65:a1:ef:aa:6f:1a:35:84:
3f:96:0c:0f:c5:0a:93:8d:4c:18:24:c5:1b:44:4e:17:0a:01:
45:65:13:0a:f8:4e:26:7c:64:12:46:01:cc:69:df:0f:77:6f:
40:5c:b1:fd:ec:b6:1e:81:28:d6:d8:11:3d:c3:d5:ca:98:73:
26:16:7a:64:dc:89:14:f1:db:bd:ab:9a:8b:83:ff:8f:94:32:
cb:50:5e:02:7d:37:21:26:3e:1c:44:00:d3:b0:59:f8:62:1b:
39:ed:1f:87:93:b7:fc:a2:f0:bf:07:ff:74:71:cb:cf:7b:52:
ed:bf:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:51 2026 by rpki-client