Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: OQo5DVzdvzZMc20bbytVxB5SlSXCTuScwmJXMM9jrqw=
Subject key identifier: 2A:F4:91:97:27:66:B6:67:80:4B:92:62:96:3A:24:6E:DC:40:37:AB
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 019D29970E238164DCD45BD8FECBA7033720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:00:58 +0000
Manifest this update: Thu 26 Mar 2026 10:00:58 +0000
Manifest next update: Fri 27 Mar 2026 10:00:58 +0000
Files and hashes: 1: WlS5ojL7gDl1onOWJD5o8wyANuo.roa (hash: NX+jbIhhBEnEZTj9qhHO6FgUtaMrjfCgiQz82eLbv/s=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: XxsBU/ygkniYECCQeX/1sejLUzxO17xddDJnh5L8u6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:0e:23:81:64:dc:d4:5b:d8:fe:cb:a7:03:37:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Mar 26 10:00:58 2026 GMT
Not After : Mar 27 10:00:58 2026 GMT
Subject: CN=2af491972766b667804b9262963a246edc4037ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:ec:ba:d8:f4:26:83:14:ac:49:5d:18:7e:
86:94:91:dc:82:19:ad:64:cc:1d:bf:f6:f3:f8:88:
59:a0:c9:f3:b9:3f:ac:fc:9e:5c:72:6c:3b:8a:4a:
d7:2e:12:ca:c2:5b:9b:cb:61:b1:59:6b:e0:09:bb:
fe:4e:5d:39:11:b0:80:63:ea:2e:86:f7:5e:07:69:
08:c3:d4:e0:3a:69:ab:79:90:7c:09:b9:09:26:05:
43:cb:d6:06:b9:fe:23:78:b8:ee:07:38:da:7a:23:
b9:d8:48:8b:63:0d:83:5f:56:f8:79:09:1a:6f:6a:
40:30:d3:8a:7e:ff:fe:e1:ee:2d:7d:54:f4:69:11:
53:52:58:51:b6:dc:1f:ba:aa:6b:99:fa:bc:b2:57:
9c:a8:3d:21:15:be:f3:df:eb:bf:d9:24:9d:7f:e0:
2f:31:5c:e6:f5:95:0d:2d:42:75:2f:d4:d8:25:41:
82:c6:8c:f7:13:51:26:4c:68:0f:51:fc:cc:b8:a7:
62:bf:52:6b:d4:f3:00:fc:ad:2f:ba:e2:58:ac:3f:
95:bd:6a:a0:63:05:be:64:4c:4b:31:aa:e9:4c:cd:
63:d1:64:a0:04:63:fb:62:9a:db:c9:1c:46:24:63:
b9:ec:2e:17:c6:4d:05:f1:14:00:0a:18:95:ce:1f:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:91:97:27:66:B6:67:80:4B:92:62:96:3A:24:6E:DC:40:37:AB
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1b:53:2d:a2:96:86:90:e8:ce:60:39:2c:07:c6:c8:5c:55:
81:d2:22:84:48:e1:98:af:50:6f:e7:75:69:94:fc:6e:05:66:
29:9a:d4:6f:29:3c:37:f6:09:25:6a:0b:41:97:86:03:ce:14:
35:4a:06:2b:cc:9e:5a:ea:ed:c4:70:12:f1:ba:52:48:16:1c:
54:a7:0b:75:48:46:3b:85:99:45:16:a5:b0:5d:21:0c:80:f7:
ec:3f:e7:d7:3e:b4:a1:1b:f8:5c:b2:3b:b4:5e:3f:7f:9c:19:
e1:4b:a6:b1:4b:db:88:10:ec:32:a1:e7:3a:ad:0b:f1:0f:16:
0b:e2:fe:84:79:23:f1:48:44:26:4b:37:27:61:08:0d:2c:64:
76:80:38:b3:4a:04:9a:7f:1f:54:ca:f4:d0:4f:aa:e5:40:12:
63:03:33:72:4d:cd:74:b1:12:f8:58:c4:58:e7:cc:99:9b:b9:
3e:02:2e:3a:e2:64:11:d4:58:42:01:d9:a7:3d:36:c7:9e:63:
f6:10:21:00:70:17:ca:ab:30:65:cf:ef:11:53:9d:27:28:0c:
69:2b:f3:40:11:a1:8f:fb:88:ff:67:be:2e:45:a4:b9:bf:a0:
20:a2:90:12:56:66:3d:b3:d0:e7:4c:fe:4a:3d:44:88:71:c4:
4f:ec:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:37 2026 by rpki-client