Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: Kt5CA9GYh5MnmO+IJl/ibmFouz6FbuULVH0xPanefrY=
Subject key identifier: 43:9A:D4:83:E4:BE:31:46:32:43:34:30:B2:E5:88:92:E5:F8:BE:B7
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019D29619F12D6C3CB6EB165A4776FAB54D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 184A
Signing time: Thu 26 Mar 2026 09:02:36 +0000
Manifest this update: Thu 26 Mar 2026 09:02:36 +0000
Manifest next update: Fri 27 Mar 2026 09:02:36 +0000
Files and hashes: 1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: tzMz+u6IyygFglSPWydwFilfwEWWSZms8lbjAfMPl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:9f:12:d6:c3:cb:6e:b1:65:a4:77:6f:ab:54:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Mar 26 09:02:36 2026 GMT
Not After : Mar 27 09:02:36 2026 GMT
Subject: CN=439ad483e4be314632433430b2e58892e5f8beb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:24:57:1c:25:38:d4:89:35:f0:9c:d7:d8:
bd:eb:0d:ba:61:30:18:3d:a5:d6:7f:21:69:e5:9e:
42:85:e8:9f:ca:32:9b:13:e9:56:97:9a:bd:4a:11:
40:f8:6b:3d:e0:be:83:f4:7d:d4:e5:f0:9d:c0:63:
db:ec:56:46:90:24:7b:9f:43:09:76:c6:36:78:12:
95:05:25:c4:b2:06:ba:86:15:55:ba:d8:79:d7:e8:
51:47:40:f2:d9:49:63:54:00:82:ab:af:4d:32:91:
0c:54:a5:c7:eb:90:5e:61:d4:2d:07:3a:c8:47:85:
89:c7:a1:b3:b4:ea:46:15:72:5d:70:fe:12:46:a7:
0c:4d:95:ed:5a:6f:c8:d0:83:5f:79:f7:34:a9:9d:
92:44:f4:03:0f:d9:54:13:18:a9:15:88:2f:af:52:
cd:04:5f:f3:c4:b6:56:3b:67:05:b7:38:03:bf:09:
06:4e:85:b7:1a:8f:47:e4:52:45:d6:25:86:8a:2c:
71:67:22:48:da:6f:1b:4e:ff:b8:7c:11:01:fa:2a:
c6:3f:78:f8:c1:49:fe:8c:3b:ac:de:65:41:1c:23:
98:ad:50:e4:e7:f8:6e:e4:58:d8:55:02:2f:38:c0:
9f:62:f8:03:9b:0b:66:2b:69:09:7c:3d:57:32:3a:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:D4:83:E4:BE:31:46:32:43:34:30:B2:E5:88:92:E5:F8:BE:B7
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a4:09:23:67:ad:7d:ca:6a:f7:b1:1c:8d:5b:e1:7a:38:6f:
52:23:2c:50:69:84:a4:f4:45:57:9f:fe:e8:e9:11:3f:68:c6:
ab:2b:93:59:13:d7:7a:ca:93:2f:11:37:1c:48:51:bf:1a:09:
5f:7f:39:08:4b:5e:03:75:15:44:f5:4d:60:47:bd:6b:95:a6:
49:a0:82:a3:58:74:36:ac:bf:55:91:30:27:cd:18:4d:61:04:
98:a2:fc:aa:34:b0:74:5e:06:a4:40:44:43:45:27:92:ec:75:
15:76:59:8b:76:fe:64:5b:c4:f3:84:07:21:35:68:d3:f6:6b:
32:97:8e:c0:8e:4a:24:36:7e:69:be:99:17:7f:59:d1:e9:a0:
b0:3d:22:b2:ed:48:d1:78:4c:e7:de:a3:4e:04:08:64:8e:41:
7c:a3:d0:df:61:67:b5:06:95:bf:5b:3d:a5:29:c8:dc:a0:9d:
0d:86:7c:54:32:c4:71:5c:d3:7e:91:90:cc:98:3a:f1:fa:6d:
da:03:a8:72:4c:c6:45:26:62:49:0c:6f:b2:94:12:93:51:27:
7a:3c:3f:85:65:53:f5:01:db:7c:76:4b:eb:df:68:8c:fa:f3:
9f:a0:87:c3:f2:09:ea:f2:08:9d:38:86:75:c5:4a:bd:0c:07:
0f:a4:55:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:59 2026 by rpki-client