Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: d1ZVKZnMF2PB/SrlfC19Vhzd8U69QtayydqhneC8jas=
Subject key identifier: 66:BF:10:45:16:7B:CA:B9:15:A0:5F:A5:F2:E4:C6:53:67:28:8F:E1
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 019D2A3BAF007AEA266FAA7D516A047548A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 06E2
Signing time: Thu 26 Mar 2026 13:00:47 +0000
Manifest this update: Thu 26 Mar 2026 13:00:47 +0000
Manifest next update: Fri 27 Mar 2026 13:00:47 +0000
Files and hashes: 1: X29-SsmJR9k5fDOjjkh75Kg4cpc.roa (hash: +euzTLNo94RLGMAt+aTDFJ+R3lTEiHq3dfTEgVifPSc=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: Tc1MG/4wvAUDu8xHqoJVn+F8YZeOFm4FMvajkPoZ/Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:af:00:7a:ea:26:6f:aa:7d:51:6a:04:75:48:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Mar 26 13:00:47 2026 GMT
Not After : Mar 27 13:00:47 2026 GMT
Subject: CN=66bf1045167bcab915a05fa5f2e4c65367288fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:a0:cc:77:4f:d5:74:5a:1d:08:02:32:f2:
b8:d7:c9:67:ee:4d:27:52:52:ef:8c:f7:0b:11:fe:
f8:a2:bb:28:1d:21:09:23:52:16:c4:be:9a:18:c0:
b4:db:6d:a6:e6:cd:e6:7f:6c:66:d0:3e:bc:9b:df:
f4:61:8d:46:b9:f0:0d:47:0a:27:b7:61:06:ef:3e:
b6:39:85:de:87:d3:de:81:c9:6e:35:ce:a0:83:fa:
35:0e:34:5a:3f:26:29:67:d6:8b:75:26:4b:24:45:
b0:5a:f5:78:17:4f:8f:ce:58:55:fe:b7:40:a0:d2:
99:08:25:3d:31:84:3b:69:39:91:11:ed:ed:cf:0d:
bb:84:b6:e0:95:a8:55:b7:b9:40:fc:5e:ee:2b:4b:
56:30:29:de:40:99:53:9e:bb:8e:fc:3f:d7:e1:8a:
1c:9b:12:ee:f5:c9:19:86:15:7d:52:ec:53:72:37:
e1:0a:66:47:76:a3:a7:36:20:5f:d7:84:22:8e:4c:
d1:01:25:a5:df:1f:7e:36:f2:d7:ee:39:14:0f:18:
4a:7e:d8:ef:30:37:b4:65:4a:ac:7c:e9:a9:3e:88:
b3:37:af:10:aa:d0:3b:9a:51:62:ed:5a:d1:da:aa:
71:b1:f7:79:82:af:a3:99:fd:c6:fe:d2:36:18:37:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:10:45:16:7B:CA:B9:15:A0:5F:A5:F2:E4:C6:53:67:28:8F:E1
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b9:21:50:29:1a:71:5e:e9:a5:a3:16:b7:d1:b7:f0:96:ec:
83:cc:ff:1b:c9:0d:c5:ed:dd:67:81:4c:66:6e:87:63:88:fd:
74:36:76:03:ee:dc:13:1a:56:c4:ec:c4:60:75:f6:a7:69:73:
bd:91:8b:22:29:87:7b:37:ad:36:2e:a8:d2:27:6a:fb:a6:e2:
aa:65:6d:be:51:c1:aa:bb:56:61:a7:56:e4:08:f8:c7:28:df:
31:22:e7:d6:58:b5:8e:94:40:4e:81:fe:26:11:51:f8:40:fa:
3a:c9:b0:e3:00:b1:f9:bf:aa:46:f6:c3:ca:34:f3:00:ed:5d:
ae:47:bc:96:13:b1:2c:c5:9c:aa:d6:72:a4:6f:56:28:b7:38:
eb:a0:2e:50:0e:d8:a5:e4:72:06:0e:da:d7:ea:05:77:a1:83:
e5:dd:78:59:95:f2:c2:de:2e:dc:5a:05:73:d2:9f:d8:5a:28:
9c:68:af:8e:7b:0a:d3:3f:36:bd:0e:22:c6:39:2b:ba:21:0c:
9b:11:25:33:7b:28:d0:a2:d5:37:e1:00:35:69:3f:1f:5d:16:
86:63:c3:f6:e8:c9:74:e0:ab:fe:35:07:7a:0e:87:93:3c:f3:
3b:a0:89:7f:0a:9b:ac:c4:23:e2:be:fa:3c:7b:bf:9c:9b:ae:
99:fa:30:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:36:28 2026 by rpki-client