Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: DgUZiAYx0iWRHQLnp35mk/jffN6j6GUJiVrShBwyo/A=
Subject key identifier: BB:F1:18:D6:01:82:00:1D:69:2F:7E:46:E0:EF:52:49:52:CF:1E:05
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 019D389C495D1F271AD455DE100C913D9B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: VQMozEw5e5cFbAbax7TNnFtChpk.roa (hash: kcI4JK6ZQqSjrwXa7nCut12JkcTP0x/T3dN3B6kDSUw=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: Kivf7kIx4wjpHanoPmQNU7qldBPgoNgG2eU8brUespA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:49:5d:1f:27:1a:d4:55:de:10:0c:91:3d:9b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=bbf118d60182001d692f7e46e0ef524952cf1e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:f2:61:e4:39:68:f0:20:ed:6e:c5:37:54:
d7:3a:98:9d:5c:6b:70:91:88:67:f8:22:52:db:94:
4a:99:24:97:7e:17:a4:84:c9:12:78:34:37:f3:d2:
5a:61:54:0a:41:00:a0:51:0e:d3:99:8d:d6:78:89:
58:a6:42:c5:b2:7e:7c:f5:8d:cd:8b:17:25:36:14:
53:97:9d:2d:02:e5:a5:c0:04:83:ed:29:4a:0a:4a:
53:5d:9a:d0:a6:e7:49:83:ee:fc:9f:cf:84:a5:9d:
0e:e8:3e:d2:84:d7:3c:35:5f:8a:02:71:92:51:a3:
62:04:05:13:e0:a8:cc:3e:1a:e4:d5:e9:d8:e8:c7:
a9:56:5c:3f:d3:3e:15:14:07:fd:8f:67:02:79:26:
dd:2c:cd:25:bc:64:4f:c0:ec:12:4f:05:52:18:7c:
fe:44:04:26:75:58:31:5c:89:4c:78:07:15:ee:1d:
c3:e2:55:5d:c7:db:75:a1:8a:ba:fc:da:25:5c:2b:
5a:3c:9d:48:eb:a5:79:7d:e9:eb:0a:67:76:c0:cc:
4e:31:f7:59:03:7f:b0:da:ab:86:21:fc:f6:33:e4:
4a:2d:54:ed:7f:04:8b:63:56:87:2d:ac:82:05:3e:
60:63:0b:86:f4:89:06:df:03:b5:9a:0f:7c:90:d4:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F1:18:D6:01:82:00:1D:69:2F:7E:46:E0:EF:52:49:52:CF:1E:05
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:53:8c:0b:3d:79:d5:46:11:6d:50:65:60:67:d3:fd:df:cf:
7c:42:75:24:6f:68:b1:5c:0a:b1:cb:6f:a7:94:36:71:dc:21:
73:50:64:3b:83:47:31:de:39:2f:f6:62:e8:ec:c9:aa:7a:04:
9f:5b:22:44:84:08:27:c1:d8:f1:0f:11:ac:ae:c7:32:64:f4:
c7:7b:7c:55:ca:8e:d0:4c:07:cb:b1:68:db:0b:b7:08:47:17:
67:a5:77:34:10:5c:49:d3:ab:52:96:42:fa:b6:bd:5d:61:cb:
da:97:ea:d2:6f:55:a6:5e:aa:fd:2e:a2:85:62:26:a7:82:c8:
4d:e0:48:22:16:c4:24:71:cb:8c:35:28:db:7f:33:15:0c:e0:
29:7e:a5:56:bb:87:11:0e:4a:11:ff:52:96:21:5d:e6:45:ad:
3d:4e:fc:7e:b0:e6:65:10:58:39:4c:c9:4b:97:2a:48:12:0a:
11:91:19:6f:27:29:4f:9e:1a:96:18:cf:74:a1:0a:9e:a0:29:
08:37:a2:e6:18:57:ab:d6:fc:af:94:a9:ba:a4:e1:0c:46:3b:
54:25:8d:d4:85:e3:0f:88:69:31:27:8b:b5:7e:58:0c:20:8d:
da:3e:7d:8a:2a:19:3c:df:84:2c:a4:13:c8:7f:22:bc:cc:16:
f9:78:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:23:58 2026 by rpki-client