Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier: 6VzyZVhcb34M1MUSt0NfYgjFjHXk5ebNi+1Uu5sd1XQ=
Subject key identifier: C4:0B:02:27:B4:4E:98:9C:C3:3A:75:B9:5B:99:04:B9:30:38:D7:23
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 019D273AA72192E7E94CC4EBC94B4B24FCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: aMb6lxNGb2-liUxIi8yk_IeHIOY.roa (hash: 5gSa2BaLYUZyyJ6bTUAS7v+V9L4QlBvXXfhwMvfbFhA=)
2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: 8uIqXC1fXMxewAIFDboQkUczZt5ExSt8t+TL3ZD2jOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a7:21:92:e7:e9:4c:c4:eb:c9:4b:4b:24:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=c40b0227b44e989cc33a75b95b9904b93038d723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:72:07:9a:8c:c2:53:40:7a:b1:2b:39:7a:
5b:8d:65:ca:83:b4:4f:f5:6f:66:f3:7d:31:1a:0b:
7d:f3:b6:3b:24:1d:dc:37:79:83:ef:8e:d8:16:9d:
93:37:76:d0:44:1a:13:8d:8f:79:f6:ef:52:0b:82:
44:f0:91:12:b8:4f:39:ac:1b:c3:bc:0d:e3:e5:e9:
ea:f3:2d:21:91:40:0c:b5:99:9f:d8:91:f5:cc:c9:
65:a8:6f:a3:c5:4b:04:7c:7a:0b:43:fd:c7:61:c4:
45:34:43:fa:1e:c4:64:b3:91:20:08:47:04:fc:a6:
c2:ee:d8:0b:53:d4:4f:89:9e:48:df:3a:4f:c9:f0:
b6:39:ed:50:09:5a:64:b7:d8:81:72:67:26:fe:83:
28:a7:37:d6:c2:6e:67:e0:f1:a8:67:66:54:df:98:
61:b0:4f:83:4c:0a:53:d0:f0:68:e1:87:fa:a7:f5:
5d:b4:30:6f:a7:11:d6:f9:58:35:75:4e:cf:f4:24:
7c:97:02:5a:f4:5d:e2:84:7d:32:bb:44:93:65:6c:
87:28:c1:44:6f:1a:ee:60:e4:5e:f1:00:09:7c:cb:
99:f7:9c:68:cc:64:11:f9:66:3f:e7:bd:14:2b:65:
45:07:6b:5a:56:d0:b8:21:6a:76:4b:b5:df:61:a0:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0B:02:27:B4:4E:98:9C:C3:3A:75:B9:5B:99:04:B9:30:38:D7:23
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:54:dc:3b:e1:b3:2c:21:f1:84:26:1e:47:d3:90:0b:8f:83:
69:65:dc:06:12:a7:32:2b:83:d4:2c:9c:d8:6b:3a:1b:c3:4a:
03:1a:e8:55:a6:16:3a:75:75:7a:3c:de:e8:63:da:80:9b:a5:
8b:30:46:bb:63:a8:be:61:62:bb:b1:09:f6:e1:9c:fb:e3:e7:
29:8c:80:8e:fd:17:1e:22:4a:d2:6b:15:d4:16:e1:33:bb:75:
b8:a9:b8:60:10:80:d6:67:b6:3d:a7:d2:8a:6a:d0:e8:35:c4:
32:b5:59:8f:7c:45:92:69:bd:ce:28:d9:5b:92:99:e6:45:66:
81:8c:fc:6f:a8:49:03:99:38:8f:07:76:0a:03:41:62:a6:8b:
5c:26:25:e4:dd:e5:f0:2c:5c:e8:56:e7:13:85:9f:c2:d7:01:
b0:3c:94:ed:f0:3d:5d:60:0b:22:77:89:3a:cb:a5:56:04:ef:
5d:1f:45:8b:f7:9e:d8:59:10:91:cb:43:7c:19:f8:40:f6:69:
ae:89:aa:1e:56:0e:57:38:c1:41:7c:b1:5a:24:f8:ad:31:a9:
8c:3d:67:a1:c4:09:16:06:e0:0e:90:48:a0:93:bf:6d:37:8b:
34:53:cc:19:20:c7:e0:90:cf:d9:ce:95:35:20:63:f9:ab:c0:
4e:0b:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:01 2026 by rpki-client