Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: 1LZ6d+N5bV6wGe81yxjKF/WbcCXzrfZ1+98++7SBdNg=
Subject key identifier: 48:AE:C9:C3:44:C0:20:54:C0:B1:91:63:F8:54:5E:C1:5B:2F:E1:FF
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 019D28F22B437993A68645D89AAE75E94068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 02D7
Signing time: Thu 26 Mar 2026 07:00:52 +0000
Manifest this update: Thu 26 Mar 2026 07:00:52 +0000
Manifest next update: Fri 27 Mar 2026 07:00:52 +0000
Files and hashes: 1: A5iuXW_cORbsvixFXow7PusXUbs.roa (hash: +5gLj6Wt4ZaNqfSC+m0HrIiKPOrW2+yDa66ixdPJ/8M=)
2: ih8GcxAhVwfWwQlPUzpQuVOLe-c.roa (hash: 3wfNubXgjKJ1/TUZb+D2ubigUZwrjebFGAnwYbZd+Zg=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: q/SCEoShtN9DFIkM/imB0hh8gk3/HnbazVawaZjnVQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:2b:43:79:93:a6:86:45:d8:9a:ae:75:e9:40:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Mar 26 07:00:52 2026 GMT
Not After : Mar 27 07:00:52 2026 GMT
Subject: CN=48aec9c344c02054c0b19163f8545ec15b2fe1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:b9:7b:05:a0:d3:a5:a6:1a:e4:cf:88:bd:
fc:01:ad:6a:5a:9e:6b:f3:35:8a:aa:18:d1:51:a6:
18:61:c2:bd:ba:39:d0:be:9c:39:31:09:07:f9:76:
aa:84:f3:43:ba:1d:72:ec:97:96:05:fc:f1:32:15:
9e:fd:3d:64:b0:8c:c7:65:eb:4b:4a:1c:2a:62:a3:
23:60:d1:3d:3b:52:b8:f3:1c:0f:7e:5d:84:be:be:
e5:c5:f7:a0:ee:95:96:35:a6:4f:db:07:5d:24:b8:
ae:7c:53:95:ed:b9:6b:26:06:5b:90:27:d1:f6:04:
da:78:65:55:cf:c0:66:c1:c7:ad:44:ca:c5:47:9e:
90:1f:10:c8:5e:33:05:33:0c:dc:a9:3d:69:fd:72:
36:01:da:0f:ce:ad:bf:77:d1:27:1c:df:d7:e7:7a:
22:ff:25:c4:94:a7:b3:1c:f4:e1:c7:3e:d4:b0:d1:
65:f4:f8:58:90:a8:39:ff:13:03:eb:aa:11:22:78:
b5:ec:06:b1:74:0b:39:0c:86:4a:ea:64:8e:8f:a9:
b5:63:45:12:0e:54:2b:b0:70:02:9e:58:3d:56:3d:
50:b8:5f:fa:18:d7:9b:1f:13:8f:53:5e:96:e2:8b:
60:6c:4a:c9:13:85:f7:37:ce:40:a9:8a:9d:98:23:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AE:C9:C3:44:C0:20:54:C0:B1:91:63:F8:54:5E:C1:5B:2F:E1:FF
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1c:72:36:f1:6c:2b:31:a8:a3:76:65:36:a4:db:28:34:08:
7b:e4:9f:95:c3:1c:ad:6c:eb:ec:3f:3f:70:ad:69:a9:60:1b:
cb:04:e7:3b:e2:59:5b:54:ba:75:58:7c:e9:16:3d:cf:38:d3:
6b:5b:a9:22:c9:d8:07:d5:d3:5d:6e:86:ab:73:82:23:d8:be:
57:68:08:98:95:ff:8d:45:4d:aa:e6:d6:60:85:e8:64:1c:38:
1d:b9:6d:fe:01:c4:02:4d:d4:c0:5e:25:bf:21:6b:2a:c4:92:
4a:e4:7e:46:0a:27:e5:c9:31:0b:ed:d8:bc:83:60:b8:23:81:
4e:c4:3f:75:6c:89:ea:ee:6a:68:68:ec:f0:cb:7c:0f:10:82:
21:aa:d6:0d:b3:80:1f:54:b6:55:50:f3:4f:1b:7e:cf:c0:58:
da:2f:01:61:8f:c7:e3:0f:a5:67:b2:dc:9b:2b:0b:40:d6:db:
31:18:40:b3:be:56:45:57:1b:c8:55:8f:04:77:77:11:72:04:
e9:4f:97:24:00:bd:bb:94:ab:2d:ea:df:48:40:50:d2:c2:be:
04:a0:93:e4:58:1a:1f:89:52:3d:23:75:4d:28:bf:03:1b:18:
50:cc:f6:0a:f2:9b:2d:36:8a:84:23:5f:c5:35:1e:c1:cd:91:
ae:19:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:53 2026 by rpki-client