Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: X5+HpQ5u/cjZOsr6+Y1uonACzz+7JgUoL9+jlP3D3AQ=
Subject key identifier: BA:B0:14:65:ED:5B:EA:BB:0A:39:0B:4C:CD:E3:EB:47:C8:78:A3:54
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 019D29CE75C03194315B35F8FC903DBFE2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 056F
Signing time: Thu 26 Mar 2026 11:01:29 +0000
Manifest this update: Thu 26 Mar 2026 11:01:29 +0000
Manifest next update: Fri 27 Mar 2026 11:01:29 +0000
Files and hashes: 1: U7czUOTZqayV5F4Km_Oxj_WlDUo.roa (hash: WcGm9+GdN6IqYMN7rk3gbjv/CZUu9hkDi4qO4kHYeVw=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: k0SCIDXQBP3irRcJf96VjXTzKpHZlRb4H3EcD+AIjsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:75:c0:31:94:31:5b:35:f8:fc:90:3d:bf:e2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Mar 26 11:01:29 2026 GMT
Not After : Mar 27 11:01:29 2026 GMT
Subject: CN=bab01465ed5beabb0a390b4ccde3eb47c878a354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:b8:66:f9:18:a4:7d:17:a4:dc:fb:a0:d4:
7b:38:5c:3f:af:97:a0:88:f3:8b:69:d9:59:f5:80:
5e:1c:ec:84:e0:a0:ea:28:c9:60:43:09:53:72:9b:
7d:14:61:bd:a1:db:0e:63:eb:17:49:e0:82:75:62:
b7:ee:63:0a:1c:56:8d:95:f5:69:40:20:16:72:df:
2a:53:c8:ab:5c:fa:33:d0:e8:39:bd:72:d7:86:48:
e5:d7:35:2f:cf:70:9c:95:5f:bb:69:c1:0b:43:dc:
fd:12:92:57:63:9a:2d:b9:d7:f7:59:b2:7f:49:9f:
99:87:71:6c:7d:c1:ea:a3:5a:5b:24:e8:42:6d:41:
0d:1e:fc:26:e1:20:25:1a:4e:6b:b0:5f:c0:43:1d:
f5:3b:3d:a5:b2:a2:fb:87:b6:5d:97:9d:b9:01:3d:
f0:d5:b2:14:e8:c2:c2:70:a0:e7:f0:6f:d3:2c:38:
a8:1e:9b:d2:78:9c:25:b0:0d:31:4c:e6:6f:d0:1f:
02:6e:45:4c:e3:7a:20:ee:ce:a7:51:7d:fe:23:c7:
88:4a:f8:6d:5d:25:4d:11:4c:c0:72:32:ea:0e:53:
49:f3:3d:75:b5:a8:4a:dc:ff:d2:4b:e0:b0:35:35:
1c:82:49:50:d0:fd:3f:76:0b:52:71:10:1e:0f:8d:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:14:65:ED:5B:EA:BB:0A:39:0B:4C:CD:E3:EB:47:C8:78:A3:54
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:db:f2:e6:44:75:aa:ea:60:fc:ca:93:cd:ff:2c:ca:f8:b5:
c3:f9:07:0e:6b:53:d5:53:d9:67:1f:98:6a:55:3d:5b:38:45:
eb:f2:56:e4:94:f4:1d:7f:7b:32:5d:39:cb:f7:f3:0e:1f:ca:
9c:31:4d:2e:81:d5:25:0f:85:10:b9:10:15:9c:c4:1c:04:67:
b3:91:98:fa:60:ce:b6:7a:f4:51:5e:16:0b:1b:0c:ea:da:b9:
dc:71:f1:93:83:da:5b:b4:dd:a6:97:fb:28:1f:cf:3c:ea:84:
11:2e:c2:91:77:3d:4e:49:41:17:4d:39:9b:a9:e5:37:ac:cd:
6f:65:1a:70:34:da:bc:d5:b6:32:67:04:2f:9c:a3:7b:1c:42:
62:59:37:3a:b2:6d:f4:d3:60:d0:0c:3d:b8:85:41:a9:6c:14:
93:6b:ae:01:9c:4f:ed:5e:e7:ba:ad:73:c5:93:ce:3a:2d:fd:
80:6b:42:50:58:4e:58:d8:75:1b:74:bc:6e:0a:1c:3d:21:c4:
f2:6a:d3:e3:99:74:54:07:ad:28:14:16:ba:c6:2e:70:1d:4b:
3b:5a:80:97:97:3c:ec:cf:ee:a4:ef:a4:e6:dd:63:aa:6a:2f:
f1:61:9c:5f:a8:d7:65:fa:60:7f:bd:0c:0f:57:c9:c4:7d:07:
00:88:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:11 2026 by rpki-client