Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier: T1IgD0lE3mQjDnUPD+/GtN/jmi5BpfLMLdNXKTT38Ew=
Subject key identifier: 3B:4D:EC:7F:97:07:E5:92:21:59:1B:D2:46:A2:D4:8B:E4:33:8B:0E
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 019D2704600F1CEE8C5BE7172DF78E508166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number: 0782
Signing time: Wed 25 Mar 2026 22:01:31 +0000
Manifest this update: Wed 25 Mar 2026 22:01:31 +0000
Manifest next update: Thu 26 Mar 2026 22:01:31 +0000
Files and hashes: 1: abh6_OV0w_23vHurZg2lf03FAWI.roa (hash: WaNrZ48mNKxaEjIRodmrrMT60e4DHtMtypg5HH38Fac=)
2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: G3ljLlnx09FkSDMoGXsSfroOPKnEjVy/kP9O4ujE2d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:60:0f:1c:ee:8c:5b:e7:17:2d:f7:8e:50:81:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Mar 25 22:01:31 2026 GMT
Not After : Mar 26 22:01:31 2026 GMT
Subject: CN=3b4dec7f9707e59221591bd246a2d48be4338b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:f9:90:dd:42:54:52:46:3e:f8:d6:2b:b7:
13:fc:af:db:0a:fb:11:dc:3d:0d:20:c7:22:64:f0:
68:3d:5f:5d:94:66:1c:b0:79:f5:e7:3a:06:03:33:
6f:23:e1:13:52:d1:12:ce:6c:90:8e:99:35:04:f4:
07:3b:d4:1b:4a:8e:26:25:fd:97:27:3f:1e:85:d4:
f1:5b:34:4b:ce:9e:3c:47:93:62:51:4b:f7:6e:e0:
04:ee:e6:a6:76:f5:fd:ca:0e:66:b1:15:31:06:85:
ec:17:30:a8:c8:61:f1:3d:92:d7:87:ba:6c:f5:ab:
66:39:86:7a:22:4a:f6:de:f2:9c:fb:70:25:1b:d0:
49:6d:f5:e1:2d:1f:f6:18:98:e4:25:c2:e4:79:a6:
99:27:c8:88:46:67:e4:83:34:4a:f9:71:c8:79:ee:
93:22:ea:b3:4e:ac:d0:bd:c2:12:c8:21:a1:37:13:
e8:f6:67:45:ed:8c:3f:75:10:3f:e4:c3:37:ae:49:
57:ad:2e:5a:b4:eb:f9:45:0f:69:ca:1e:7c:e7:19:
51:b0:e1:5b:14:1c:8d:ea:e2:d7:79:81:a3:bd:72:
e3:4b:cb:bc:07:0c:b6:0b:0f:b3:6a:11:88:34:85:
85:6b:fe:5f:aa:25:9b:3e:fc:90:5e:19:08:a3:cc:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4D:EC:7F:97:07:E5:92:21:59:1B:D2:46:A2:D4:8B:E4:33:8B:0E
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0b:aa:e8:2f:1d:cd:32:9c:98:35:44:22:b2:64:93:f8:14:
b1:fe:dd:bf:6d:55:33:d8:8c:de:72:ea:24:63:29:5b:05:08:
4d:bb:df:6a:a0:ad:08:d2:89:e3:11:9d:73:ec:61:6e:f1:db:
66:23:8b:49:fa:b7:e1:d2:cf:02:f4:aa:c1:6e:a7:ed:6d:12:
21:35:9a:1d:4f:a4:7e:a5:4f:70:25:77:0a:b9:5b:fe:4b:da:
67:31:85:8b:d3:30:79:83:ab:69:02:71:ee:73:67:58:5d:20:
a5:5d:15:dc:a7:5e:1d:6b:9b:0a:1c:92:b5:49:b2:d2:90:9a:
6e:1b:f9:d1:9d:3f:af:ee:1a:7e:54:27:1e:72:66:94:47:95:
0e:74:03:64:e3:ea:3b:e6:8e:b9:c4:e2:d9:ca:99:d7:09:4d:
23:2c:9d:49:9c:c2:cf:b1:90:00:53:be:aa:61:bf:e0:9c:75:
15:82:2d:82:1b:71:9a:7c:52:37:ad:9e:bd:02:50:d6:4b:a5:
b5:e5:cb:ac:d3:5e:60:1d:53:f7:1c:a3:0f:74:8b:30:28:6a:
6f:14:11:39:8b:d3:48:93:d5:9f:30:b3:e6:f4:5e:d5:fd:63:
a3:dd:4a:1b:e4:3d:0b:a6:7b:c4:3d:d5:24:5c:5e:34:a2:c6:
0f:41:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:31 2026 by rpki-client