Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: Hbg6wExjQVQqRlU02+6H7RSv3HhU8rEADgtMysxL2FA=
Subject key identifier: 22:7C:77:A1:09:34:CD:F8:90:61:B5:9D:72:82:1C:91:A9:9F:61:5A
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 019D38654D8EC3DE0715E817CCD785C4765E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 142B
Signing time: Sun 29 Mar 2026 07:00:55 +0000
Manifest this update: Sun 29 Mar 2026 07:00:55 +0000
Manifest next update: Mon 30 Mar 2026 07:00:55 +0000
Files and hashes: 1: 3FimOljJosTayAtjbZa6x1Z1MXs.roa (hash: MeEGr+necOtlrJoGJSW1/wG4DV94jp5QrV4hS1BQHCg=)
2: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (hash: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: O7SyXH0GJzSA5+3jzroTEK+bRjAOXulRiI+ikSixmAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:4d:8e:c3:de:07:15:e8:17:cc:d7:85:c4:76:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Mar 29 07:00:55 2026 GMT
Not After : Mar 30 07:00:55 2026 GMT
Subject: CN=227c77a10934cdf89061b59d72821c91a99f615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:14:c5:0a:03:da:b9:97:ae:9c:7f:69:02:
e2:4e:a7:bb:0f:75:55:52:76:46:0e:f9:38:d2:a9:
b2:7c:be:2f:3b:66:28:61:ec:57:41:a3:e0:7d:1c:
ab:d1:c2:d4:e0:5b:39:78:c4:f2:12:32:45:24:28:
e2:94:06:2f:b9:78:28:98:30:d7:c0:e0:04:14:a1:
e3:cb:80:62:9e:1d:ea:c2:c0:83:d1:1b:34:66:69:
64:7a:6a:34:f6:b8:6d:9f:ab:8c:61:4b:31:85:b0:
80:44:c3:eb:43:fb:6b:9c:22:44:11:2d:a7:6c:22:
07:d6:6a:65:a2:75:46:20:9a:cf:ea:96:97:f0:88:
2e:57:59:04:dd:ec:14:c2:20:cb:41:41:8b:d9:93:
a6:c1:fc:33:c8:2c:07:1f:5b:96:60:2b:42:ab:bb:
54:7e:5e:4d:c0:0f:ae:05:2b:46:8c:7a:91:3f:45:
9b:69:77:70:7b:09:d8:89:73:ee:40:f8:8f:90:63:
79:52:cf:b8:46:4d:29:21:6f:f6:e3:dc:46:18:23:
ce:23:df:ed:bc:b5:11:12:03:fd:68:f0:07:e8:ae:
7f:bb:14:40:d6:b0:96:21:19:9f:78:e0:b7:91:53:
6e:9b:2e:83:42:c2:69:47:5a:5a:4a:16:94:40:23:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7C:77:A1:09:34:CD:F8:90:61:B5:9D:72:82:1C:91:A9:9F:61:5A
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d8:15:32:5f:55:04:af:ac:66:94:b0:a7:50:5c:62:fa:5f:
93:c9:85:4a:84:82:e8:cc:3d:dd:91:c7:93:55:80:fd:ff:63:
bf:d7:b8:75:23:93:d9:5d:7a:5a:38:c4:3f:91:1a:f4:9f:1f:
8b:3e:16:ca:79:a9:19:d5:cd:e1:74:92:f5:4e:11:5d:f4:e5:
d7:88:47:5b:4d:b3:36:b1:1f:12:26:fa:02:1f:a8:f6:25:ea:
3f:d0:9b:25:ac:f8:df:de:c9:5f:c6:75:4d:9b:69:bf:a6:83:
ae:9f:7b:6a:b8:1f:e2:c3:0c:4c:cb:42:46:2b:3d:63:6c:2f:
0f:f5:a3:eb:57:13:43:e2:2f:cf:8d:f9:46:71:00:01:78:82:
2f:26:90:c9:6f:38:ef:6f:6c:18:24:53:9e:ee:ba:e7:9f:2f:
83:f8:4a:5a:24:6b:33:a2:5d:b0:58:76:f0:ea:57:6d:7b:e4:
62:50:6c:92:94:39:e8:35:74:cf:7c:ba:5d:41:3e:f4:0a:af:
09:f9:a1:02:9d:e8:6e:6c:df:fd:68:23:c7:59:44:7d:19:9a:
8c:1a:51:2e:a2:0f:ed:5d:f3:f4:cb:90:5c:c8:ae:dd:e3:58:
ec:ee:ac:92:10:fd:98:a9:7d:a9:35:4c:14:2b:3c:a0:93:ac:
96:a4:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:55 2026 by rpki-client