Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: 6zbJdwFBokHxhqhqT6b9niPSFkfisCA4mGYfadCfL7A=
Subject key identifier: B7:EA:D6:37:DB:AB:A5:07:60:24:DB:9B:F5:48:BD:E9:E5:08:E9:04
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 019D27DF517B92BD1D5A2A4D624AC88CADAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0D6A
Signing time: Thu 26 Mar 2026 02:00:39 +0000
Manifest this update: Thu 26 Mar 2026 02:00:39 +0000
Manifest next update: Fri 27 Mar 2026 02:00:39 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: N22wu+aUoYdKVuD2Bi7PjIN+LOYQfIZC+ZQX4KPNTq8=)
2: r8_Pkht5LvuIUKkXxWRZPNhds_A.roa (hash: NBzWUBYoQAPM9L8l3h0b1Ywu4V34+t30OZWBM39xvCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:51:7b:92:bd:1d:5a:2a:4d:62:4a:c8:8c:ad:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Mar 26 02:00:39 2026 GMT
Not After : Mar 27 02:00:39 2026 GMT
Subject: CN=b7ead637dbaba5076024db9bf548bde9e508e904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7a:ef:c1:e0:45:d6:87:69:d1:8c:66:52:32:
f8:9a:97:e6:c7:13:ac:2b:bf:58:3a:46:eb:72:ba:
0b:3e:51:9c:2d:f0:da:5f:e3:b0:18:cb:6d:01:28:
cb:d7:23:5c:68:0d:10:45:46:00:59:32:8f:a4:71:
55:0e:15:16:da:ca:11:f7:f0:d8:e5:60:63:ce:77:
93:cb:c6:a9:e8:f1:d3:06:a8:14:1a:c7:b6:c5:7b:
06:7e:fa:1f:6d:b4:14:a0:63:98:eb:57:3d:4b:89:
a2:0b:e5:88:0e:b2:4f:c8:69:5d:79:d7:45:01:6e:
b2:0b:a6:10:fe:f4:79:e0:94:bd:c1:fb:61:a1:ab:
08:76:93:bd:49:c7:fc:87:c9:77:e7:a2:c3:ff:dd:
c5:17:d9:78:7a:72:66:df:54:67:e0:7e:32:1c:25:
bb:56:be:33:9b:23:15:54:86:f8:95:7e:f8:b0:83:
74:9d:40:92:ec:55:8a:ea:f5:5f:59:46:16:21:8a:
b3:4e:a7:db:63:15:c1:89:8a:0c:dc:0f:40:14:81:
ca:6a:c0:25:45:74:c1:b2:b7:28:df:0a:a1:83:5e:
eb:91:3e:88:dd:3e:52:54:7d:df:23:f1:41:0a:9b:
59:85:15:c5:58:c8:70:36:4c:f0:78:8a:70:65:50:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EA:D6:37:DB:AB:A5:07:60:24:DB:9B:F5:48:BD:E9:E5:08:E9:04
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:36:e6:95:81:cb:44:c6:c1:a3:40:6f:18:a6:9b:ee:2b:
78:a8:58:b8:80:d5:18:4e:28:34:51:10:fd:01:48:e8:8a:68:
60:58:80:f9:ec:0d:00:b5:c5:3f:f4:cb:13:ed:94:23:a9:1f:
8f:32:d5:7a:bc:c3:4d:24:8a:03:97:23:81:21:a2:8e:24:74:
27:75:f3:aa:cd:b5:fa:21:c0:f2:0d:ed:63:d2:70:3e:f1:67:
de:c0:3d:4e:3d:b7:53:98:69:f0:99:49:05:1f:a0:90:46:fb:
fe:6f:cb:86:57:b3:e8:0c:be:ea:31:13:ce:0e:db:ae:2a:97:
55:90:73:8b:eb:54:4f:b2:ed:0d:c7:4f:8f:87:16:59:38:1e:
d6:04:9b:ab:e1:47:d8:03:dd:50:57:84:dc:cc:1a:cf:93:24:
13:c6:7f:59:21:9e:74:45:b0:ff:2b:86:9c:16:23:8b:a7:27:
ae:d3:4b:78:a9:cb:be:e3:64:a0:04:cf:df:d0:90:e8:9e:42:
70:82:6c:9f:97:bb:35:47:bb:c2:4c:b7:a3:f4:26:55:df:4f:
35:5a:b3:81:c8:13:68:a4:68:99:7d:e4:b4:92:de:7f:61:40:
76:7b:97:ac:d9:a5:60:ed:8b:b0:f3:fc:7a:ac:1d:d1:d0:b7:
2c:b7:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:16 2026 by rpki-client