Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: gZ2jyf4N44N4mZd8P3wKJBjSd0yPd3YZ2iKyJ93hRnc=
Subject key identifier: 16:35:A1:FA:B1:3A:65:08:29:6A:BC:2D:D5:06:7E:64:5D:A1:AD:66
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 019D29610F518F85D55739FF78A2FA310757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: E7
Signing time: Thu 26 Mar 2026 09:01:59 +0000
Manifest this update: Thu 26 Mar 2026 09:01:59 +0000
Manifest next update: Fri 27 Mar 2026 09:01:59 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: AM1PrlCNZHqg1XPQPqoKyzOgTp9h1H/+oJvapsJhKsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0f:51:8f:85:d5:57:39:ff:78:a2:fa:31:07:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Mar 26 09:01:59 2026 GMT
Not After : Mar 27 09:01:59 2026 GMT
Subject: CN=1635a1fab13a6508296abc2dd5067e645da1ad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:df:d7:3b:25:86:83:9d:4c:e6:42:56:26:
31:a0:1a:2c:de:b8:7d:63:10:9a:62:02:74:f1:84:
73:77:6d:3d:47:0c:a7:94:75:49:7f:51:7b:9e:b4:
cd:27:52:8f:1d:90:e7:6d:71:c1:2d:1f:4f:3a:f5:
b7:2e:d8:05:5d:b4:2c:67:73:0a:19:2e:5d:01:61:
dd:2a:b5:d0:cd:43:24:91:87:79:88:89:97:6c:1d:
37:1d:66:35:4c:54:e3:1d:b8:76:30:a6:f8:cf:50:
fb:46:a2:97:a1:2d:30:78:d5:24:19:2d:25:9c:e7:
43:51:ce:f5:89:a9:a6:33:ee:12:c6:71:78:d3:51:
93:a0:ad:b2:a1:7d:7a:7d:ce:27:c6:e4:18:72:83:
c3:55:b9:9f:2c:df:29:99:28:d0:36:1e:49:c5:df:
f1:c4:91:5d:2b:e6:73:de:52:eb:31:64:1b:3e:42:
85:6b:08:d4:2b:3c:65:df:cb:e7:e1:dd:83:88:7f:
b7:90:1d:04:6a:10:94:7a:63:5f:ef:f7:58:0d:60:
b1:62:63:57:eb:12:dc:22:ea:0c:f0:88:f9:27:b9:
7a:cb:ae:9d:a2:78:d4:f7:66:1a:12:2d:b7:3c:03:
47:e4:a4:b5:8e:ac:07:59:bc:38:1f:ad:3d:68:58:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:A1:FA:B1:3A:65:08:29:6A:BC:2D:D5:06:7E:64:5D:A1:AD:66
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5b:ba:38:c9:4e:4d:54:ae:7f:d2:c5:57:21:03:9b:3e:f8:
31:89:d5:86:a6:d2:38:36:52:f9:59:95:96:ae:1a:e7:be:ed:
86:27:f6:5b:b6:35:37:91:db:cd:ec:5d:3c:cc:c6:7e:41:f3:
f1:1c:9c:8d:cb:f2:5a:c5:44:87:b5:2b:3c:4b:93:62:c4:05:
16:d7:f8:8f:24:bb:06:ec:56:60:f9:28:1d:7c:61:1d:bd:a3:
7d:d1:cf:d7:32:bd:01:ef:45:b1:ec:c2:be:b4:79:9c:65:50:
50:3e:4d:f4:05:1a:d1:00:58:f6:29:91:5b:48:b4:f6:06:1c:
41:45:54:0a:4c:ac:24:49:35:05:01:49:c4:80:48:f0:b7:91:
ec:15:f2:52:84:c4:5f:48:1b:02:d9:85:c2:d1:92:b3:af:41:
28:b8:f4:1a:53:b3:e8:1f:a4:be:5f:41:c7:20:17:0a:9d:f3:
aa:13:38:d5:36:96:84:9b:5d:8d:b2:32:51:ca:75:5f:f1:a2:
37:bc:3f:ee:f9:42:60:3a:5a:85:b1:7a:62:22:79:d9:64:5f:
c1:d7:d9:ec:34:70:17:a8:f1:e4:3a:af:64:cc:82:94:15:69:
b0:b6:7c:b4:d8:a7:87:c1:02:77:ce:32:2d:be:dd:98:74:36:
71:6e:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:35 2026 by rpki-client