Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: uY0QQ8isDTJUOhHOBjXlIIgmwgWAmunlw4lSiDhQUpY=
Subject key identifier: C8:15:66:2A:EC:5F:2B:02:6B:FC:30:40:9E:18:CF:B0:C1:03:49:B8
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 019D38D2EC9FB484FAD1BC50D4AE8AE05665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: l8Y52p5aI63FDuq51m4qJ-mPHY4.roa (hash: wSpWuBqn1Tlul2t7+8SYMlOp535GnFPP8F8ir7MJTSU=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: KMNlu+d5A4iPsklFa3FCws52JlHQv+qXcHFnhkjzd3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ec:9f:b4:84:fa:d1:bc:50:d4:ae:8a:e0:56:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=c815662aec5f2b026bfc30409e18cfb0c10349b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:e6:66:44:85:dc:0a:34:bf:3f:fa:43:37:
7b:86:b9:d1:70:07:ac:a2:2f:74:9d:e4:25:47:a2:
34:1a:6f:45:4b:73:32:bf:46:e1:75:98:a8:f4:b4:
c9:ad:44:16:02:af:f7:39:7d:0d:49:12:04:a4:d0:
f4:d3:1c:5e:4a:06:fd:69:70:c9:29:d7:f8:4c:d4:
cd:52:45:30:10:2f:f6:28:62:9f:f8:46:31:37:ee:
4f:af:6b:f0:ce:4d:3d:e1:86:aa:3e:f9:68:ea:bb:
95:db:23:19:28:cc:ec:08:e2:af:66:19:8d:06:1f:
d2:08:c5:0f:48:2a:0f:3b:be:3b:1a:ef:33:6a:5f:
84:3e:3a:47:94:98:1f:e6:ea:ee:cc:be:af:2f:98:
cc:eb:32:35:b6:43:0d:9a:09:9d:21:8f:ef:87:77:
b5:5a:a4:f6:e4:07:75:49:89:60:28:0b:53:8a:8f:
eb:99:01:08:7b:3c:8e:3d:f2:e1:d7:16:c3:a7:9e:
8c:f5:16:e8:5c:0a:e8:55:2b:b6:51:d7:37:73:d2:
6f:43:82:1a:28:53:50:43:75:e4:5f:d5:c4:14:23:
f2:12:95:74:5e:58:95:06:62:9d:9a:00:14:99:0b:
af:8f:9a:9f:8a:2c:70:92:00:db:51:f7:20:23:f9:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:66:2A:EC:5F:2B:02:6B:FC:30:40:9E:18:CF:B0:C1:03:49:B8
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:61:5b:ba:d0:39:f2:2a:2e:24:bf:f7:63:aa:6d:38:74:30:
7f:80:71:f5:7b:55:f1:15:60:57:83:3e:a3:9d:58:aa:7d:ea:
66:15:ae:cc:2e:61:a8:d3:5a:59:33:65:56:dd:9a:45:8f:7e:
6d:ce:c1:56:3e:bd:e4:03:65:cc:b5:18:8c:f8:1a:fe:aa:fa:
48:61:87:3a:11:31:7e:2c:86:0f:aa:ae:07:49:09:73:5d:eb:
ba:b0:76:79:dd:e0:6c:3d:e8:e2:1c:89:29:92:40:21:fe:e9:
bf:c9:d2:42:a9:d7:47:4a:c7:22:e4:6c:64:99:9a:32:3c:f2:
1e:75:88:4f:8c:31:6a:bd:5e:b8:36:c7:30:18:64:67:7e:45:
c4:82:31:29:a0:8c:98:df:d0:e1:5c:2f:fc:d0:31:60:04:ae:
c9:82:0d:21:04:6b:31:34:9a:d4:be:72:1d:d2:1d:83:93:68:
08:6c:dd:0a:0d:aa:fc:17:b5:58:ec:e6:9a:67:df:36:33:c2:
10:38:24:21:b9:34:a9:f0:92:ef:3c:92:38:76:94:99:9c:72:
03:59:a6:56:c6:43:51:89:e7:a5:64:d5:f0:98:73:5e:72:2a:
25:d3:41:00:c2:e4:06:52:d7:72:43:11:75:89:19:d3:9e:47:
4d:91:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:25 2026 by rpki-client