Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
File: qtT1OyE_1fbkbdPuO36dKH_JFzI.mft (raw, json)
Hash identifier: Yg32DEHOX+Zm6cPzBeiBSBcSrgUTcTZn1zsjDmA9cGw=
Subject key identifier: 80:1E:E1:7B:7B:1B:38:46:C2:B8:B7:E1:39:85:37:9B:3C:5F:6D:8C
Authority key identifier: AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
Certificate issuer: /CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Certificate serial: 019D2704CEA50FC72B84B6B7F7D62CBE0166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
Manifest number: 01AF
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: D3QWsZD5slBszZssssGu-y6SPDY.roa (hash: m5arG3sgwaeIurzLGruOIuKyUYJet4zIQQosgeemCIc=)
2: qtT1OyE_1fbkbdPuO36dKH_JFzI.crl (hash: AyHux23BMrDO1DgcuQCBJkbM4YeO6b0G+pXJfYsnUZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ce:a5:0f:c7:2b:84:b6:b7:f7:d6:2c:be:01:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=801ee17b7b1b3846c2b8b7e13985379b3c5f6d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:bc:1e:86:e6:2b:5c:c8:7b:11:0c:d0:56:
ea:de:83:3f:b5:4e:a8:c5:5a:db:fd:8d:6f:08:ba:
b4:61:4f:0a:51:18:a5:07:fe:d9:2d:e4:ad:66:41:
88:a6:c3:3d:35:6f:4b:ff:a5:02:5f:69:2f:ea:e2:
58:95:29:d8:0c:1a:7f:e4:c0:d3:75:66:33:37:e9:
18:51:98:4d:7c:9b:46:15:05:83:ed:47:e6:57:81:
97:f8:34:8f:3f:b1:54:09:43:51:87:9e:3d:5c:b9:
3a:23:85:64:8f:08:cd:42:b3:b5:81:c4:fd:78:51:
70:9a:c2:a6:be:96:ad:10:5b:56:e2:33:2c:e5:26:
ff:7b:5e:a3:ca:6a:da:0b:e1:24:ee:ca:b4:f9:80:
00:5e:a2:37:36:c6:d6:c9:a4:f1:7d:4d:3b:1f:29:
0c:47:4f:1a:79:f5:2f:19:19:21:a8:e6:82:49:28:
2f:b8:6c:74:b4:91:79:83:08:0e:e5:31:ef:ef:e5:
23:87:e2:4b:e0:82:04:fb:f7:12:ea:df:73:4a:42:
c2:7b:d6:6c:0d:85:7d:84:5d:d8:ce:eb:27:3c:10:
fa:c7:92:ac:06:95:5c:d2:51:b1:5a:d6:1e:5a:61:
ad:0d:46:ce:9d:f4:f7:a5:c3:b1:a8:38:e7:5a:d5:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1E:E1:7B:7B:1B:38:46:C2:B8:B7:E1:39:85:37:9B:3C:5F:6D:8C
X509v3 Authority Key Identifier:
keyid:AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:15:aa:a4:02:54:36:a3:16:32:57:5d:c4:ba:2d:25:11:f1:
bb:dd:b9:ad:35:be:c1:83:85:fe:a9:f5:e5:d3:6e:b9:ed:27:
53:20:f8:24:df:9d:7d:28:a5:d0:17:ea:4c:7d:86:1d:32:a3:
97:e5:27:56:eb:1f:55:e7:5e:1a:14:17:87:69:e6:06:83:be:
4a:c4:e9:9e:bd:c8:40:41:38:57:f6:88:81:96:fa:ac:06:e7:
db:9b:40:37:6a:8e:cb:df:27:77:ac:25:ce:86:9c:e6:87:6a:
29:ca:bb:c3:6d:eb:77:e9:a8:11:a7:a6:80:79:e1:80:ba:35:
a4:92:c6:8c:43:9f:eb:a1:48:51:35:8c:46:4a:3b:bd:88:e0:
e4:8e:15:5b:6f:6b:c6:e9:2a:33:07:76:20:1e:ca:00:34:74:
a7:bd:58:7a:b0:e5:7d:66:6a:1d:1a:c6:81:aa:d0:ea:ca:21:
fb:c9:0a:4c:64:16:63:2d:3c:8e:25:15:06:e6:57:21:c7:2f:
fc:34:7c:77:fe:4c:09:e7:9a:8b:88:06:ec:89:e3:c9:14:bf:
43:45:8b:71:1e:82:a0:78:ca:40:b1:d5:33:58:5c:0a:aa:3e:
be:7a:36:d4:50:51:c4:92:6f:d7:54:a4:99:d3:9b:5e:d9:ec:
8f:b2:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:34 2026 by rpki-client