Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: 1BzhaDhaEAlg7uIhDDGqhyVjnzpQyhEdUYaZ400Vs/o=
Subject key identifier: 39:DB:64:B9:1D:00:C1:FB:05:D5:14:5A:DC:2B:6F:12:9E:D2:BF:67
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019D390A10FB5811E4C24ED2D736968E6402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 10B1
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: ygEm/nMozOv2DMo7Po8R5D+OBQuUCsOBQApmmWk6sEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:10:fb:58:11:e4:c2:4e:d2:d7:36:96:8e:64:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=39db64b91d00c1fb05d5145adc2b6f129ed2bf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:68:5f:69:67:3a:b0:51:ba:6d:4a:9e:ae:
a4:04:f8:d8:98:27:59:b2:be:e8:f7:95:03:a8:c8:
f7:bf:6c:ee:e9:23:60:f2:b3:43:5d:de:f1:98:b3:
d7:90:2e:75:06:34:33:9d:a2:51:bd:b1:91:d0:b5:
12:dc:ab:c2:7a:50:68:ab:85:f6:d6:49:29:b5:85:
1a:ae:c1:d9:e7:3d:2d:23:50:9a:3d:89:93:cd:2a:
9e:ce:70:a8:20:d2:1a:a9:e0:53:54:dc:28:36:4b:
82:f1:73:7d:97:d1:bd:6e:90:91:00:18:33:77:7e:
a3:0d:7a:c5:e7:04:a5:25:81:08:ad:57:d7:74:ab:
b9:a0:ac:ff:9d:12:35:9d:2b:50:87:5c:a5:7b:d7:
38:55:2b:e2:2e:bb:eb:73:2a:d4:71:01:79:48:c8:
0e:e6:ba:6f:74:0b:da:34:e0:8a:2b:4d:33:c0:cf:
79:0b:df:37:e5:49:87:52:a9:1c:e2:7b:64:41:d2:
fb:fd:b6:16:cd:b4:8d:12:6c:f4:1a:7b:68:1a:06:
01:45:12:9f:8b:ce:e4:70:ae:b3:5d:63:a9:5d:a6:
11:0a:5a:c2:9b:85:52:77:b8:21:0e:ed:cf:68:f3:
88:6c:fc:c4:8f:95:d2:be:4c:ac:c6:b5:6d:f4:27:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:64:B9:1D:00:C1:FB:05:D5:14:5A:DC:2B:6F:12:9E:D2:BF:67
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:27:e4:21:f3:ac:19:8c:b2:61:e8:16:3c:f7:ee:f1:c4:6b:
b4:52:a8:15:6a:e2:d0:62:10:17:3d:1b:9f:dd:26:9b:78:15:
e0:5d:91:c8:90:ca:36:3c:8e:31:9b:5f:e6:04:b9:f4:5e:e2:
70:90:22:de:7e:1e:ad:c5:a6:71:f3:7b:66:c8:66:c1:77:70:
b7:e6:de:16:f6:09:78:51:90:b6:13:62:29:6e:7f:07:5f:c2:
7c:31:d5:3e:01:2e:90:81:b1:58:5e:15:65:9a:db:0a:26:13:
61:a7:a5:48:ba:ba:9b:57:70:5e:44:d3:1d:a6:84:11:21:0a:
bb:a8:fd:a6:e5:f3:de:e6:74:40:fb:4d:cf:50:69:4c:ae:74:
bb:65:19:5b:d7:d6:3a:08:b4:d0:59:b5:84:3d:42:39:24:33:
42:7e:27:86:b0:94:7e:15:56:28:02:98:2f:09:b3:8d:33:81:
82:84:06:be:b2:eb:0b:30:4f:ce:95:d5:bd:20:f5:5f:78:80:
bd:35:f6:b1:b4:d3:f0:44:23:7c:b0:39:83:56:19:18:7f:f5:
a3:e0:cc:e5:c2:cf:b4:31:8b:c3:fc:e9:3a:49:11:93:94:30:
09:71:c6:50:b6:07:62:60:3a:c7:1a:ca:df:b1:62:24:de:21:
b2:f5:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:09:39 2026 by rpki-client