Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: 2ZGGMQr477t2ZGcBUO2lxwzkht9bQXtu6NJcGZt9w0I=
Subject key identifier: 89:CF:36:93:18:4C:18:75:B8:78:DF:BF:52:09:2B:99:EC:B1:DF:D8
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 019D39AEC5AA9FC532BA7CF85644ED118382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 107B
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: 7JHxpyxpo02zkoPorIc6uG3BVuA.roa (hash: b8rxzTKBj6Qg6MVgNOKKZSKKJO0QmX7hL5AcNsaVFUw=)
2: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: 9qekdlf8QnFhdS+Vn+RFqm2XP66jBA+Bf/mCuLtz9pA=)
3: cfefMU6VCTQ-krOdPG6PUT0K-AE.roa (hash: /iqY0OlFoitueMsNG0GZcTyMYyjjsKmq3zEGu1XC6Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c5:aa:9f:c5:32:ba:7c:f8:56:44:ed:11:83:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=89cf3693184c1875b878dfbf52092b99ecb1dfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:29:f7:15:5f:29:44:b2:f7:35:cb:19:0d:
62:a1:bf:70:52:98:37:54:79:4d:78:df:a5:2d:ad:
41:19:fe:62:1d:4a:a0:80:36:44:a1:8e:f5:7a:4d:
05:e5:07:74:78:6f:7d:c4:ce:ed:f5:87:49:2f:bf:
45:c3:f9:55:43:b6:ce:e5:a0:07:92:e9:93:26:f9:
21:d6:aa:c3:88:dc:60:af:c5:1f:44:f9:ab:20:d1:
5f:c1:86:fd:ec:74:b8:7c:7b:8a:7d:91:9f:98:a5:
08:0c:b4:e7:f3:75:df:52:65:83:79:16:02:0c:e7:
40:20:73:5f:ca:0b:c4:f7:82:ae:12:4d:1b:4c:d5:
23:24:43:d1:76:89:b2:0c:04:14:a7:f3:99:d6:cc:
26:af:57:16:46:57:af:d1:77:e6:b1:2e:64:aa:dc:
ca:70:f3:de:cb:f1:f5:d0:a0:4f:a5:d8:65:b2:d7:
fe:c3:66:86:47:d3:6e:54:73:33:0d:01:fb:28:80:
dc:e9:5d:ee:55:11:19:9b:e9:0b:6f:e1:b3:09:ff:
8b:98:0a:6b:cc:76:7f:20:87:f8:f1:88:35:c5:7b:
79:74:cc:ef:59:c6:31:7d:e0:60:5f:4d:ee:12:1f:
96:ce:fb:b1:77:e3:2e:02:0a:33:19:a4:4e:10:ad:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:36:93:18:4C:18:75:B8:78:DF:BF:52:09:2B:99:EC:B1:DF:D8
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2a:d6:2e:0b:74:39:1a:16:f9:d0:fb:51:78:83:99:8a:cc:
1b:63:23:9f:87:90:3a:74:b9:8b:56:87:e6:f8:a3:cf:21:67:
d8:33:f5:fe:87:62:8d:67:95:69:70:b3:76:10:4a:90:3c:8d:
30:ff:1c:42:60:63:2e:dc:2c:b8:eb:25:b5:55:13:36:29:2e:
20:52:6f:34:e6:e8:ca:7b:e6:b0:ab:85:5b:66:fc:9c:51:a7:
42:ef:64:a4:8d:43:d8:db:63:35:ef:2f:ee:87:a7:61:b3:e2:
63:fc:3d:aa:8f:05:c7:14:39:31:42:02:51:3b:8f:ee:fc:15:
3e:9e:de:85:a3:53:5f:76:ce:31:cb:f2:b6:c6:af:47:09:f6:
57:d8:df:cc:d8:0b:81:4a:3f:e7:b5:62:c8:24:d3:21:54:74:
d9:90:a3:7e:40:02:9f:55:ca:5d:59:c0:81:8a:0d:35:36:53:
88:51:c2:3f:24:2d:07:5b:cb:04:56:9c:61:28:61:6a:49:b7:
84:30:ed:25:bc:5e:e7:4d:86:0f:f4:89:71:ce:7e:7c:3a:82:
e7:e7:d1:26:77:55:ab:45:79:bb:ca:b4:7a:7e:6a:d4:9e:ae:
72:5f:e9:c3:0d:14:51:06:51:4f:e8:3b:b1:c9:ad:92:4e:d7:
65:f9:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:51 2026 by rpki-client