Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: 3FHlQbsGkUYoW89h4kAiA8ztU/ZIfcx5stOx6GD6J2c=
Subject key identifier: AE:E8:14:FF:18:B1:F8:83:D4:53:C2:6E:12:1F:1F:25:CF:7E:F2:19
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019D2771FA882C37B14462E005719075037C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0948
Signing time: Thu 26 Mar 2026 00:01:14 +0000
Manifest this update: Thu 26 Mar 2026 00:01:14 +0000
Manifest next update: Fri 27 Mar 2026 00:01:14 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: GyOz8ikH7m+UqYB97MrN2qj12eGlg6F6vqyC4RzTxuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:fa:88:2c:37:b1:44:62:e0:05:71:90:75:03:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Mar 26 00:01:14 2026 GMT
Not After : Mar 27 00:01:14 2026 GMT
Subject: CN=aee814ff18b1f883d453c26e121f1f25cf7ef219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:e8:25:26:af:0c:20:d8:43:a3:12:d8:98:
63:34:9c:38:ab:07:5e:99:6c:3c:e9:f2:bc:e0:b8:
4a:56:de:55:79:6a:b1:b5:7e:8a:4d:3c:a1:b7:8d:
01:4d:71:9e:da:01:b0:f2:00:59:b7:51:05:3a:24:
45:0c:b9:b1:1f:b9:76:77:7b:fe:7f:23:bf:7e:27:
2d:81:f9:b4:fa:f7:1f:3b:f1:0b:20:2e:41:79:e1:
54:ab:0b:79:28:51:74:bb:fa:ab:cf:63:77:f2:be:
ef:22:c1:c5:57:63:5c:71:e3:a3:31:1c:f9:fd:79:
f8:79:f3:3f:09:f6:d0:ab:90:fb:87:8b:de:42:a9:
b9:ce:ca:25:bd:ae:98:75:30:14:af:ef:2e:cb:35:
db:c6:53:e9:d4:3a:a9:ac:1a:55:3f:4c:1e:7f:fc:
02:79:c7:8e:63:1f:07:dc:20:18:99:9d:03:92:8b:
0d:ed:d0:6c:6a:02:93:42:e7:70:36:60:cb:30:5a:
51:91:0b:a6:de:b2:16:56:d4:29:87:09:af:d9:07:
f2:f8:7e:d8:ef:77:11:3e:77:35:67:c1:ef:43:76:
45:0c:5c:18:b8:7f:2b:1a:46:d9:87:59:8f:95:a1:
39:2b:5f:41:e4:db:12:14:3c:a3:47:45:8a:f0:03:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:14:FF:18:B1:F8:83:D4:53:C2:6E:12:1F:1F:25:CF:7E:F2:19
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:93:fe:bb:5f:58:83:48:f8:0a:60:e2:3a:64:a8:84:ff:6d:
5d:ef:66:20:06:3d:f6:68:7d:0a:7d:c6:13:57:a0:a9:f3:56:
79:be:ae:3f:11:c9:13:ae:ab:50:12:09:ab:d4:17:29:7b:b6:
04:bf:2f:93:50:00:c0:c7:e6:af:bd:35:03:3f:c5:d7:9c:e7:
2c:7d:87:37:b6:da:96:10:71:50:29:37:c7:b0:42:00:f1:60:
e6:8b:86:f8:a5:88:45:ec:9e:52:46:4a:44:9b:94:33:75:d9:
8f:87:f1:4b:ac:47:9d:75:ae:eb:4d:5c:26:ab:8d:5a:46:e1:
91:b8:f3:a0:4d:be:65:e3:92:07:a4:cd:b0:bc:a0:95:96:4a:
ea:67:e8:34:09:17:06:59:0e:0e:ec:1a:f6:03:d8:17:e1:cb:
f3:17:84:52:88:86:e0:17:9f:8d:6f:b7:43:f8:97:e1:a4:ad:
39:ea:25:4e:4a:42:e0:25:29:0d:62:b6:21:9e:01:cc:ef:49:
73:f7:14:31:b5:4b:21:26:89:ac:7c:27:15:cd:37:4a:d9:ef:
a4:13:3c:8b:9a:d3:30:da:12:e9:47:ff:df:6d:d4:89:ef:dd:
07:4f:6f:a5:5f:5a:74:1f:c4:74:af:7f:dd:92:d4:e2:f5:92:
d3:78:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:07 2026 by rpki-client