Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: gOenyrLrCtClpHyQyQq+/jneyR81W2aEj87PbFawUac=
Subject key identifier: AC:BD:92:C6:DB:39:E4:62:1B:82:A8:7B:EA:32:6E:FB:BE:EE:53:A4
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 019D299702294B0A363A7F62F693FB7CAADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:00:55 +0000
Manifest this update: Thu 26 Mar 2026 10:00:55 +0000
Manifest next update: Fri 27 Mar 2026 10:00:55 +0000
Files and hashes: 1: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: OorIKnQVINf5de+Qyz7F3gp+h3p1h4aT/FfV9RETPd4=)
2: tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa (hash: oFn0sS2KIEC+fcfgS1boOcIBmwWzk50WRGkvZp+ryXo=)
3: wga_WdR_8QvLv6SYCAFbkFgE4IY.roa (hash: 1WShRNTFDIi2o5zhM9Z4CcfauIXDzI1Kphz/pH1YsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:02:29:4b:0a:36:3a:7f:62:f6:93:fb:7c:aa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Mar 26 10:00:55 2026 GMT
Not After : Mar 27 10:00:55 2026 GMT
Subject: CN=acbd92c6db39e4621b82a87bea326efbbeee53a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:4c:59:65:5f:6d:ca:a8:64:92:b2:d4:c5:
a2:54:bf:fc:dd:38:d6:48:99:10:67:cb:28:b2:8a:
ab:a8:9d:d3:85:58:df:32:57:01:de:5e:3e:cf:87:
1a:fe:5e:b5:f0:45:f3:fc:dc:5b:ea:99:fa:e1:4b:
ee:a6:53:9a:06:7b:e6:b4:03:7a:f3:c8:85:26:07:
fb:5e:3b:20:94:72:63:c1:56:4e:66:ab:21:07:3f:
a3:d9:c8:94:97:f8:f1:52:0d:44:b4:b4:92:26:01:
23:4d:7a:3e:0a:7d:6d:d2:35:c4:86:2a:10:ff:2e:
78:66:54:25:90:ac:c3:14:a6:01:93:14:ed:67:39:
10:b5:8b:0e:84:34:32:35:fe:50:de:c1:61:9e:16:
4b:58:aa:c8:59:b3:6c:7c:a1:ab:c9:10:a8:63:d2:
88:e9:e8:b4:6a:85:ae:a5:f5:7f:aa:b3:35:e6:d4:
02:6d:09:49:5e:87:b1:ae:1b:a8:53:ab:81:ef:3c:
31:b6:90:a6:fb:5b:bc:2b:2c:c7:d8:38:ea:c0:a2:
50:03:aa:51:4d:b6:c3:e0:65:9b:fe:b3:dd:cd:d7:
c5:0e:56:f8:e0:06:d9:02:2f:2b:a0:09:d1:a0:0c:
ef:e4:af:db:fa:27:90:fb:15:c3:a6:c8:24:1c:c5:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BD:92:C6:DB:39:E4:62:1B:82:A8:7B:EA:32:6E:FB:BE:EE:53:A4
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2f:35:4e:e4:97:7b:a1:66:3e:8d:70:c6:41:da:87:60:c8:
90:42:e5:09:36:be:60:98:f5:de:7b:aa:ee:46:8b:b7:b6:76:
3b:18:b0:40:89:c9:f1:e1:1f:39:85:7b:e1:0a:50:1c:fe:2a:
cd:e1:2d:93:84:d0:03:50:f5:3d:9b:b2:00:39:e5:79:b0:9d:
25:28:45:b7:30:03:68:62:11:ba:b3:ed:d4:a1:2d:ca:e8:3d:
7d:69:f1:6b:b7:b8:66:a1:a7:2a:64:ea:9a:d7:b8:1f:c2:7d:
80:f1:4f:66:91:6a:b6:ca:ae:19:a1:71:62:fa:69:a4:9e:64:
89:5b:d6:15:7f:d7:5a:9b:63:f9:0f:79:c0:60:05:6b:85:c2:
af:01:1c:5f:a5:93:10:0d:27:ca:82:12:b7:20:ca:a8:ed:59:
52:fa:19:1e:d2:fc:16:5d:1b:96:08:e5:c5:47:d4:85:64:04:
8e:4b:06:a7:78:52:f0:b2:38:70:1e:36:3d:68:a6:08:cd:7d:
78:ae:5b:f4:53:03:8b:80:95:c8:4c:65:53:6f:bf:39:e2:56:
00:89:42:71:5f:03:7f:93:08:f3:20:29:cc:18:ad:c3:f7:f7:
5a:02:ed:77:50:77:d9:48:ba:a5:bb:42:92:11:39:c9:2d:ef:
37:f0:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:18 2026 by rpki-client