Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: rcAtubK7jbJOyHvAFONgv4OGVUIbhlUc2OT0Ow1YW8M=
Subject key identifier: 8C:E4:7E:70:2C:1C:C7:6E:B6:A2:C4:AA:7E:E3:D8:4C:C4:11:BA:2B
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019D2AE05704CB040CD28D5B16E2EB944DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 16:00:38 +0000
Manifest this update: Thu 26 Mar 2026 16:00:38 +0000
Manifest next update: Fri 27 Mar 2026 16:00:38 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: kt6rXNo+8ix75IMEXLuBhUEq8ApYmmS60BI8z1+l0HU=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:57:04:cb:04:0c:d2:8d:5b:16:e2:eb:94:4d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Mar 26 16:00:38 2026 GMT
Not After : Mar 27 16:00:38 2026 GMT
Subject: CN=8ce47e702c1cc76eb6a2c4aa7ee3d84cc411ba2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:8c:83:e8:60:bf:80:36:2e:fe:7d:41:c3:
d9:ec:ad:88:b6:5d:4e:26:e6:58:05:0a:7d:17:67:
89:92:86:8b:0f:15:bf:17:27:b2:38:8b:39:d4:74:
6a:03:61:c1:6b:3c:94:bb:97:fd:d7:d5:f4:a3:c9:
d1:9b:a4:70:c5:79:77:bb:2e:5f:b6:e8:2c:78:fd:
bb:72:ab:d7:35:a5:95:cb:8e:de:c2:cd:dd:88:68:
92:8e:52:df:cb:62:52:c5:b3:a0:47:47:db:49:f3:
97:15:88:f0:25:d9:6f:d8:e9:9b:96:13:43:4f:73:
cf:a4:ee:31:60:a3:12:dd:35:51:f3:d4:7c:c1:0b:
07:e1:fd:7e:73:cc:26:a2:a0:72:4f:68:35:77:91:
7f:ce:19:6b:4a:00:49:12:09:71:01:fd:7e:13:21:
c8:ff:00:38:e0:95:22:a8:9d:74:90:d6:a2:a4:01:
29:c1:fa:0a:de:1c:84:4f:69:f4:d8:d4:27:81:da:
de:e0:21:77:14:04:9a:cb:38:8d:23:2c:a0:55:11:
8f:f9:42:1a:ab:e4:40:dc:70:3d:ad:b3:27:34:82:
36:38:63:77:5a:19:79:67:ff:19:de:5e:9c:b8:60:
cf:1a:c1:4c:18:61:a3:6c:e8:e3:7c:a2:2f:15:4f:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E4:7E:70:2C:1C:C7:6E:B6:A2:C4:AA:7E:E3:D8:4C:C4:11:BA:2B
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:53:97:79:95:83:67:ce:db:e7:32:06:22:4b:b6:5e:17:e8:
9c:6e:d3:0c:93:15:52:7f:7e:ff:7c:fa:2b:8a:68:97:04:f7:
20:31:8b:b8:c6:d8:81:47:67:c2:34:c6:9a:f4:34:70:62:71:
e0:92:de:39:9b:15:99:6e:57:87:b0:a6:bd:f5:13:7d:d7:d8:
5a:22:8d:a8:41:6d:14:a4:5f:b7:1b:26:75:f2:ca:66:cb:0b:
bd:10:ca:88:25:7d:b7:01:25:1b:a6:08:24:29:b8:70:60:84:
8e:9c:a1:4e:20:0c:56:5b:97:c0:d5:11:b7:7a:42:f2:e6:17:
78:2a:bf:14:a8:b2:ec:f3:42:86:14:5b:64:75:1c:d2:f0:37:
4b:ef:c4:c7:8c:ce:97:b0:3f:99:fc:60:e7:a1:67:86:74:ae:
c5:86:09:d8:93:7e:27:a6:1d:32:a1:c9:e9:c1:13:6a:67:69:
8e:71:8b:f7:7f:d6:64:76:66:a6:da:6d:d3:f3:3e:89:37:7c:
3a:53:dc:a2:88:78:c9:f3:d6:b6:2d:a2:56:cb:08:f8:aa:53:
ed:b2:22:de:53:13:72:b4:61:bc:54:a2:7d:69:bd:aa:5e:40:
3b:47:33:1f:32:6b:c9:0b:fd:00:2d:2c:20:25:2a:da:f5:1b:
c2:ff:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:24 2026 by rpki-client