Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: 7pKMGMly9Lmg3fE79B8KgWl32xG+bZyWgrYteJdecIM=
Subject key identifier: 34:E8:CF:CE:2E:77:BE:B3:8D:F3:B7:DB:C6:9E:A5:78:55:81:CF:B3
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 019D3A8AD8B3DBF4C7AF6E0552611BF4B08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 17:01:11 +0000
Manifest this update: Sun 29 Mar 2026 17:01:11 +0000
Manifest next update: Mon 30 Mar 2026 17:01:11 +0000
Files and hashes: 1: 17NcvApuNSXy7j6b0yleIlW66rE.roa (hash: ELqpc8rB+esi/WJGkFsbXdMD1AmM+2FxKPDU9lOV9eY=)
2: M_-1yevGXxmg89kgZZwEjkECaGQ.roa (hash: Vo4/wHw48EoLaCQHDcS1MW43X+9bXlGsuQH6qGMPLug=)
3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: U+Bug0c5wA1OdFZbFMvCorfQ8MiBa5CBks3zCYbDBz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:d8:b3:db:f4:c7:af:6e:05:52:61:1b:f4:b0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Mar 29 17:01:11 2026 GMT
Not After : Mar 30 17:01:11 2026 GMT
Subject: CN=34e8cfce2e77beb38df3b7dbc69ea5785581cfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:95:74:a0:e3:f8:de:13:2b:61:db:59:73:23:
68:d9:29:b3:ae:b8:f8:1e:81:32:2e:70:24:3f:27:
3a:a1:c9:4c:a7:e9:c1:a7:a8:8b:fd:5d:7f:dc:a2:
50:41:b7:c1:f7:f2:57:70:87:24:21:24:94:ec:98:
f4:95:0d:4e:24:62:39:05:c9:9c:4f:b2:f9:37:6d:
8c:86:db:06:fc:fc:af:e5:5c:b0:e2:65:f5:db:3e:
08:25:da:fc:32:76:35:9b:d3:05:7a:ea:c1:9f:2e:
5b:9c:f7:07:6d:83:ac:94:d1:a8:8f:b2:96:42:4a:
70:d1:f5:16:00:e0:49:b1:16:69:f5:75:a3:5d:1c:
cd:cb:5d:50:25:aa:8a:af:2f:d6:3d:f2:6e:a3:79:
77:be:08:5e:59:bc:76:b4:86:58:9a:b3:3c:53:af:
6f:a2:4b:de:2e:0d:ae:6d:97:1f:3e:c1:18:a7:fb:
63:d5:e0:c8:16:0a:08:d9:5a:dd:12:e9:5f:da:4b:
bd:dd:e3:5f:89:93:b0:21:a3:b6:d7:04:15:1c:43:
b1:b6:ac:b4:a8:43:02:b2:74:8c:20:0b:7e:4a:58:
7d:a3:19:76:0f:8e:ba:d0:28:46:44:14:fc:59:2b:
4c:31:5d:fc:56:17:38:58:0c:13:bd:96:ff:22:08:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E8:CF:CE:2E:77:BE:B3:8D:F3:B7:DB:C6:9E:A5:78:55:81:CF:B3
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:63:58:1a:4a:76:07:4c:6c:0f:13:30:95:b9:35:f2:0d:e4:
32:93:c2:f5:54:11:2a:dc:2f:9b:0e:ea:75:0e:21:76:6d:bd:
f9:c3:f8:5c:a9:04:b8:2c:95:a4:90:25:71:ab:aa:0a:2e:8c:
d0:d9:47:b5:58:bc:69:5d:9f:9b:b1:19:3e:bb:46:60:ba:7b:
8a:d1:ca:2c:0e:c2:da:37:9f:71:e2:cd:47:64:eb:45:28:2f:
74:25:b5:93:70:3b:1a:a4:6a:4e:bd:97:99:19:ca:a7:49:0d:
34:82:14:52:6a:76:9d:89:a1:7e:41:22:9c:af:54:b3:37:29:
09:ea:63:27:d8:56:65:e8:40:8f:77:53:96:6a:9d:2e:ff:38:
96:b8:61:2b:3e:f4:60:2a:3d:a2:9a:58:6d:b4:54:3c:e3:cc:
fb:da:a3:7d:4c:27:7b:8e:07:c4:93:84:99:d4:93:14:70:22:
62:3b:6e:cf:e6:54:1c:ec:53:1d:c9:e9:44:f9:ee:f0:33:0f:
43:bc:6d:ee:a1:0e:48:36:d0:3f:14:c5:9f:90:b1:39:1a:a7:
8e:83:dc:8d:a3:65:8b:34:c9:dd:67:ca:89:d3:53:21:89:7a:
12:a1:18:1a:ca:f2:f0:fb:2e:fc:ae:7c:c6:3a:42:87:76:1d:
ff:74:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:41 2026 by rpki-client