Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: SU5ioj3K8pOI4nfFny/P9CyVwoC6p21LATJHlg5mL74=
Subject key identifier: 9C:24:01:ED:32:19:CF:6E:B9:19:8A:FB:D5:B8:54:A5:9B:0B:71:89
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 019D2A04FB1AEDE9FE72595A3D22303B7C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 0A5B
Signing time: Thu 26 Mar 2026 12:01:02 +0000
Manifest this update: Thu 26 Mar 2026 12:01:02 +0000
Manifest next update: Fri 27 Mar 2026 12:01:02 +0000
Files and hashes: 1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=)
2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: dTWlivY40kP4Qn66Tr+V5ZbRDPtFvmYeocFvTjjq2gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:fb:1a:ed:e9:fe:72:59:5a:3d:22:30:3b:7c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Mar 26 12:01:02 2026 GMT
Not After : Mar 27 12:01:02 2026 GMT
Subject: CN=9c2401ed3219cf6eb9198afbd5b854a59b0b7189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:ce:81:94:cd:b3:0f:b0:9a:1c:cc:b7:05:
e8:d8:a9:12:b0:42:8e:8e:ac:97:33:58:fb:90:4c:
e9:89:fc:0a:9e:72:03:d8:f4:78:1d:d5:01:ed:36:
1f:60:20:a0:89:a5:bf:b2:c3:04:dd:91:2e:d0:ea:
d7:2c:d4:f7:8c:74:3f:e0:41:5c:36:85:c6:70:cc:
52:85:81:11:a1:5a:00:87:33:68:1a:c8:04:9e:52:
ea:40:0d:cf:aa:f8:cf:74:73:c2:ea:48:56:fe:2b:
33:e4:ff:d6:86:c7:2b:71:47:1a:7b:5f:65:bb:28:
a8:6b:92:dc:9f:b2:c2:47:1b:e2:a7:43:71:f8:f1:
45:e8:4e:a2:69:af:7e:b2:5b:39:c8:c7:af:26:dd:
37:c3:e7:bf:2d:09:0f:31:3f:8b:6e:b6:2f:cf:5f:
86:d3:77:74:eb:33:d1:28:b6:e8:81:b3:9d:b1:eb:
07:09:be:1b:00:b2:a8:b6:fd:73:14:5a:b4:79:d6:
8d:22:fe:50:8c:ac:a0:ba:df:d6:a8:27:5e:66:92:
80:f4:fe:38:9d:e9:3c:41:02:aa:45:72:76:bd:41:
46:e3:70:fb:b5:2e:a1:20:c7:42:cf:3c:bb:cd:59:
2c:24:8f:0a:81:f2:8a:c8:bb:ef:7d:6c:0d:b2:7e:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:24:01:ED:32:19:CF:6E:B9:19:8A:FB:D5:B8:54:A5:9B:0B:71:89
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:56:6b:7a:f8:54:24:d6:28:c5:9c:41:2b:b2:81:be:9d:
0b:9b:76:3a:42:b3:d2:fb:94:2a:3f:22:63:c0:0d:ad:00:30:
da:86:e6:a3:3a:0c:d7:85:e3:3e:8d:bf:27:e7:d7:ee:09:35:
d1:4b:5b:01:26:92:4d:59:87:4f:45:6a:fa:b3:05:4f:05:5d:
44:56:75:30:1a:7b:cb:5a:5b:d7:96:6b:08:1e:fc:db:6e:a8:
8e:d3:f4:dd:4e:f6:31:e2:ee:5e:6c:16:6b:2f:5f:c5:82:6c:
e1:3f:38:db:8b:ba:09:79:66:71:e2:89:19:67:47:44:b5:cf:
88:c1:62:e0:ab:4a:b8:28:12:02:bc:7b:85:19:1c:f8:3a:f7:
fb:4e:0f:34:63:9c:a6:09:1f:6b:c8:e8:2c:3e:18:ee:de:db:
f8:d0:aa:84:b7:51:89:17:c6:95:4c:38:ef:ac:34:2e:70:ab:
92:da:01:78:11:8e:46:ca:a8:4f:5f:15:da:5d:34:07:96:20:
9b:7f:a4:0a:04:be:40:0f:1b:58:39:66:ec:ab:6c:8e:8b:7d:
dd:11:40:00:2e:54:19:27:d3:38:89:e9:c2:68:2b:00:fe:d2:
97:27:d6:95:c2:0d:61:a8:a2:01:ad:0a:e0:18:50:19:25:3b:
3d:91:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:42 2026 by rpki-client