Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: wa0eM+avz1h4x/JmHkZx0a6+T6YrTmEH/3JOGipPdvE=
Subject key identifier: 96:61:EA:D8:3C:15:72:1E:AD:24:19:F0:30:E0:26:3B:A1:A8:4F:10
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 019D375292011A6522D536C75C49E049BDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:00:51 +0000
Manifest this update: Sun 29 Mar 2026 02:00:51 +0000
Manifest next update: Mon 30 Mar 2026 02:00:51 +0000
Files and hashes: 1: kW0WK2IFHNGeUqtoeqP2787mYnk.roa (hash: OoUVW67pQ7OzkcQcCKnAORtBV+T6+mdVc97qhb5jPng=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: tzUNJ06vVwqVvDAu7aG6OOIT0kLyX9DUrzS9qEIYFm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:92:01:1a:65:22:d5:36:c7:5c:49:e0:49:bd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Mar 29 02:00:51 2026 GMT
Not After : Mar 30 02:00:51 2026 GMT
Subject: CN=9661ead83c15721ead2419f030e0263ba1a84f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:b3:9e:be:6b:d1:b1:e2:4d:9b:be:1a:fb:
25:e6:dd:99:fb:19:8d:b5:fa:c4:94:f0:10:e5:a9:
f5:b3:27:3f:7a:f8:59:de:79:e3:0c:4a:35:d9:da:
d5:b7:88:a2:08:70:ea:a0:13:fd:67:39:54:97:d2:
54:bf:ee:ac:3a:0d:79:9a:72:f4:66:f5:1d:d3:7a:
67:47:28:14:9e:91:41:88:ed:b9:b0:43:15:3e:b1:
a0:26:98:58:c5:9d:46:4e:5f:48:9b:ae:d0:1e:8b:
57:b5:06:02:fb:d5:43:36:48:84:ab:5f:ce:f0:df:
41:31:ef:da:13:25:4f:49:42:5c:67:e5:d1:f2:0b:
5e:c7:fd:94:fe:e0:d6:5d:dd:b5:36:aa:d5:c6:85:
6e:39:fb:7f:68:93:5e:c6:f7:90:ba:33:1a:79:4d:
7c:47:0f:98:31:ed:1b:9a:2f:3d:af:d3:a4:86:0b:
86:df:88:b1:90:be:70:49:51:18:ac:1c:da:1b:85:
b7:75:ed:af:91:36:65:e6:28:67:63:64:19:85:43:
f5:de:17:61:97:c4:3b:b1:bf:c1:a9:83:f6:ec:a4:
2f:3e:22:d8:e3:f0:03:2f:6a:58:2a:6b:ff:a2:ca:
b6:60:ef:6b:d9:e3:0a:5e:52:9b:be:99:0b:e3:0c:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:EA:D8:3C:15:72:1E:AD:24:19:F0:30:E0:26:3B:A1:A8:4F:10
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:15:97:e5:7c:15:82:7b:3d:50:31:64:5f:b4:3f:16:83:3a:
64:bb:f9:7f:d4:e3:ae:1c:92:c4:8e:3c:d9:35:02:08:eb:6a:
4f:54:e5:eb:27:4b:06:03:ea:db:9e:63:87:71:d7:63:c6:fa:
12:68:06:d1:6c:71:27:18:96:90:78:a1:a4:38:bf:1a:43:93:
44:d7:57:bb:bc:33:de:79:61:47:08:6e:7e:c5:9e:0f:da:ac:
17:bc:77:b6:08:21:c3:f1:82:7a:e7:1a:5a:90:05:ba:52:d9:
90:8a:ec:6f:cc:39:4c:27:0d:98:52:c2:61:e7:dd:45:d5:f8:
69:74:9f:5f:f1:d7:c4:08:72:60:05:d3:81:5a:96:35:d9:69:
d2:1f:77:5b:c0:22:61:74:48:bf:db:ba:14:9f:1b:7e:b3:67:
cb:82:39:18:c1:7c:a9:81:ad:24:d1:6a:79:6a:94:e4:18:98:
cf:c6:a0:ac:a1:f8:e3:84:3f:dd:fa:34:49:44:6f:60:5d:e2:
15:f0:3f:70:ec:cb:e6:02:43:9e:45:33:cb:5f:7c:d1:0f:a2:
f3:e2:8c:08:f7:6c:fd:ab:0e:44:ec:53:e0:b5:38:36:51:8b:
28:92:08:9b:f1:ab:d1:ff:05:eb:4c:84:77:40:c8:46:92:6c:
5b:f6:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:23 2026 by rpki-client