Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: GrGoX1boT/tN0cE8nfWQMis9BUuRYJ+bOde+x4NVh1Y=
Subject key identifier: 81:85:9E:39:A1:E4:AB:2D:75:F8:1D:C5:92:6A:61:6F:64:89:B7:E2
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 019D273A9279825103C31DF2DF9A369511C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0DEF
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
3: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
4: b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa (hash: AyGNKQTPsYrYHZ1HAXTaHMHz0cT3+QNKk6bga2VEm6U=)
5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: mM4r4yF0SqV1p7qXgJ+NMeDI+mzKfsJy8NHfE1ASYEA=)
7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:92:79:82:51:03:c3:1d:f2:df:9a:36:95:11:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=81859e39a1e4ab2d75f81dc5926a616f6489b7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:37:46:65:08:7e:f5:0f:39:1e:14:7a:1e:
5b:3e:0d:e6:91:dd:00:74:d6:93:11:ef:2b:56:27:
12:cf:eb:71:36:05:21:2b:65:61:f4:e1:17:89:53:
2b:24:b5:e2:6f:3b:43:1f:08:08:a0:0d:a2:a3:06:
dd:01:ec:b3:8a:f1:2c:7f:04:1c:cb:ed:3c:70:fe:
52:ba:ae:fc:87:59:f6:c5:ef:17:a5:3f:73:82:87:
8b:47:41:f3:02:3e:88:fd:76:0c:77:e3:f8:38:a7:
93:9b:a2:e5:9b:30:89:e6:48:95:53:b2:93:3b:39:
c3:e7:96:55:a9:bd:2b:43:c5:a2:46:83:4f:94:a3:
05:ec:1e:fc:9a:2e:cc:fe:e6:6b:92:75:89:af:11:
92:13:08:1d:f9:5f:87:16:e9:fe:60:20:ed:e2:f7:
2c:23:b4:f0:ba:72:4b:bf:c2:a5:9e:fd:2a:a6:a3:
7c:be:66:8e:8d:ba:6d:96:5c:c8:17:52:29:8b:5f:
9c:2f:8e:24:d0:79:8e:c0:1f:a8:a3:23:be:f0:81:
d9:77:0e:94:39:83:00:5c:75:14:67:36:fb:02:e4:
4d:72:c6:35:a6:dc:94:45:fe:82:ce:0a:13:06:51:
93:a8:40:f0:e1:0a:9f:58:ec:10:4f:87:26:28:b7:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:9E:39:A1:E4:AB:2D:75:F8:1D:C5:92:6A:61:6F:64:89:B7:E2
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9e:fa:34:16:e5:d2:b1:2e:f4:76:e6:8b:1c:e3:44:ea:bf:
1a:b0:15:55:3e:d8:bd:2b:93:66:2f:13:1d:ad:cd:dd:1a:9a:
41:b9:ab:9c:8e:7f:b8:41:0e:74:05:54:76:31:ba:d5:9f:33:
80:4d:36:e2:ae:19:a1:b5:d3:ad:85:b0:01:51:53:93:76:d3:
14:0f:3f:63:1f:fb:08:c9:d9:5f:3b:f4:0b:95:b1:89:19:2e:
18:ff:02:32:61:a1:48:eb:f6:e5:89:5f:bc:43:24:03:e5:89:
ff:87:36:13:49:83:86:e4:e9:d8:ea:ea:b3:20:2b:21:bc:01:
a9:1d:42:48:4b:ea:a9:a9:f5:62:47:51:7e:29:11:81:90:2d:
04:f4:cb:1a:2f:23:83:43:bb:10:90:67:34:93:25:de:1b:b1:
ad:64:c8:26:ce:96:73:d0:cf:c0:7e:3e:34:64:77:b7:60:4d:
99:75:8f:00:bb:74:5a:6f:b4:7a:cb:a3:21:a8:72:65:e8:30:
d3:83:7d:81:c0:a9:35:63:8b:a9:81:b5:ff:b3:ce:f3:94:4e:
07:11:1b:d3:70:a1:ff:59:89:1b:54:2b:83:a1:78:86:07:88:
b9:b8:20:ca:47:89:20:85:5c:78:41:75:82:ac:21:8b:44:63:
48:0a:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:28 2026 by rpki-client