Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.mft
File: qcvBJu1Nk1wRzrnc99lyjMTugQA.mft (raw, json)
Hash identifier: W4yO+7i5ku7HA0SuewvizmFJsO7RprdhN0L2zzYKIQs=
Subject key identifier: 38:B3:5A:A8:4A:12:D9:65:75:6A:03:C7:D3:72:13:84:41:01:2E:EA
Authority key identifier: A9:CB:C1:26:ED:4D:93:5C:11:CE:B9:DC:F7:D9:72:8C:C4:EE:81:00
Certificate issuer: /CN=a9cbc126ed4d935c11ceb9dcf7d9728cc4ee8100
Certificate serial: 019D37525EE03B7B0C361C3CE5ADF074A0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcvBJu1Nk1wRzrnc99lyjMTugQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.mft
Manifest number: 44
Signing time: Sun 29 Mar 2026 02:00:38 +0000
Manifest this update: Sun 29 Mar 2026 02:00:38 +0000
Manifest next update: Mon 30 Mar 2026 02:00:38 +0000
Files and hashes: 1: 2wTY5Gm7CSw3ysryU-lsYX_7Wqo.roa (hash: tYaP07kcvDwffj5/xbkCu9i1XMAaCPLrJcNb5rto4xs=)
2: 8KJeCBfDeBIyavZ1WctKlr420vc.roa (hash: LDf/JZH0zLtMx88N6zCd8v+gRLqRrAT9RTGvIZY5tC4=)
3: qcvBJu1Nk1wRzrnc99lyjMTugQA.crl (hash: XFioAJnju7mAH1+JfpMOzjttXFepbZE6abFHu1LYohU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcvBJu1Nk1wRzrnc99lyjMTugQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5e:e0:3b:7b:0c:36:1c:3c:e5:ad:f0:74:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cbc126ed4d935c11ceb9dcf7d9728cc4ee8100
Validity
Not Before: Mar 29 02:00:38 2026 GMT
Not After : Mar 30 02:00:38 2026 GMT
Subject: CN=38b35aa84a12d965756a03c7d372138441012eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:31:b1:bf:59:84:3a:30:98:79:d1:b8:d7:21:
48:01:3f:28:96:b9:5a:36:37:0a:d9:1c:4a:0e:97:
df:d2:20:bf:cb:b6:b4:e7:49:ff:79:9b:68:0a:3a:
75:75:7e:a5:dc:32:a0:ae:c3:ab:5c:e0:d9:e3:3f:
e0:10:19:d5:c0:46:68:cd:a6:6d:d8:33:a1:b8:49:
fa:31:f4:2c:ed:08:8b:6d:de:c4:c9:7f:e4:10:dc:
fa:31:e2:23:6e:da:24:f5:fa:6e:f2:d0:62:d2:79:
ea:9f:85:a6:09:70:67:c3:6a:f6:1b:4d:b9:0e:19:
44:4b:3f:86:b5:40:45:30:9c:90:f9:99:14:6c:52:
ac:c1:53:36:f9:a4:0e:05:70:da:89:b5:47:b4:15:
aa:41:b4:a7:df:74:9e:6b:18:87:25:2b:2a:a8:c1:
f4:ef:09:d9:c0:74:9a:94:05:92:37:86:b5:4e:83:
07:28:88:f7:ca:2a:61:f9:77:75:b7:3d:63:14:d6:
e6:3a:f3:b5:7f:23:3a:8c:4e:93:15:4d:7e:2b:38:
3f:b7:f4:7f:76:53:b3:a1:79:fb:de:73:ba:57:b3:
91:e8:21:84:f4:bf:10:93:00:24:53:49:c4:9d:f7:
ae:7c:f4:cf:77:fb:d4:cf:ac:1a:16:c6:08:ce:15:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B3:5A:A8:4A:12:D9:65:75:6A:03:C7:D3:72:13:84:41:01:2E:EA
X509v3 Authority Key Identifier:
keyid:A9:CB:C1:26:ED:4D:93:5C:11:CE:B9:DC:F7:D9:72:8C:C4:EE:81:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcvBJu1Nk1wRzrnc99lyjMTugQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3de11e-6e63-4224-8e42-995a28f310e2/1/qcvBJu1Nk1wRzrnc99lyjMTugQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:80:ff:64:4e:97:77:ef:87:cb:4d:1f:c0:f2:10:06:dd:89:
e6:49:b5:9c:74:84:38:e1:38:5e:de:87:f1:6e:93:1d:7f:1c:
b5:fd:9f:c9:f9:91:43:c8:d8:72:7f:8d:c9:3c:28:f6:c0:0f:
6e:43:06:89:88:35:72:94:0c:e5:1b:68:24:36:f9:1f:74:bd:
04:5b:e4:43:ce:c1:b7:ac:0f:fd:ec:bf:a0:32:fb:86:21:bd:
c0:b6:2a:3f:90:3b:c1:40:63:8f:5f:3f:20:1c:51:a9:9f:e6:
36:cb:16:f3:34:56:92:73:5d:cc:75:66:c1:dd:52:3b:bc:e1:
3c:4c:9c:79:52:78:ca:14:45:3d:f5:a9:9c:ee:eb:4f:09:0a:
cf:5f:1e:8f:e4:4d:6b:ec:99:f6:74:10:51:f5:5f:17:a3:75:
bc:3c:90:3b:12:04:e0:22:87:c0:93:76:9f:d3:72:7c:2f:87:
7b:4c:78:df:fc:4e:c5:96:95:69:4f:bb:21:7b:ec:9b:d7:4b:
70:de:aa:92:50:c6:01:83:a9:f2:50:0c:7e:ee:9a:f6:53:9a:
bf:e6:9e:11:72:46:d6:ad:6c:ae:29:af:1b:3a:32:55:05:6d:
51:ca:f5:6f:2c:02:9d:67:94:64:2b:45:49:6b:fb:16:c6:59:
24:e9:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:16 2026 by rpki-client