Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: 1IyAhKrT4nLmny1Sb8HoQAxcu+7scIugUsuNAbyIQ7U=
Subject key identifier: 22:F5:FA:C8:10:5E:AC:E6:A6:8F:C6:E7:28:EC:D8:4F:48:2C:33:75
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 019DCDBDB4E00F148B407B8417B43B9B1EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 0FC3
Signing time: Mon 27 Apr 2026 07:00:55 +0000
Manifest this update: Mon 27 Apr 2026 07:00:55 +0000
Manifest next update: Tue 28 Apr 2026 07:00:55 +0000
Files and hashes: 1: 0rfYrVviZUVYPptqvM07XCjMZN8.roa (hash: NsAvwSlgjtFhEFUQcFrnr4l17cyyPI73mz93IQlKjBw=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: gBgnYVBTyeecSXizReLfxDDVa9VacJ2W0Ac7L1GyHrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:b4:e0:0f:14:8b:40:7b:84:17:b4:3b:9b:1e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Apr 27 07:00:55 2026 GMT
Not After : Apr 28 07:00:55 2026 GMT
Subject: CN=22f5fac8105eace6a68fc6e728ecd84f482c3375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:00:6c:4f:c4:2b:b0:6c:55:5e:bf:c8:b7:
42:47:96:5c:35:7f:e4:72:c2:52:10:f6:07:15:c8:
47:f0:75:25:a9:dd:8f:93:2a:5f:50:86:6b:f8:49:
80:51:fd:f5:bf:f6:e1:d7:d2:d2:48:94:30:2a:4f:
1d:e9:ad:9e:64:ed:d0:1c:c5:11:a0:61:9b:0d:34:
2e:a1:44:bc:81:54:42:5f:f1:9a:bd:75:0b:e7:eb:
aa:1a:6e:cd:42:06:ed:13:f6:49:f5:e2:fa:69:76:
71:57:32:6b:8a:13:d4:3a:40:02:9c:0e:dc:5c:69:
34:96:59:39:a3:24:87:b4:32:f2:cb:58:c9:7d:b3:
72:ab:86:14:1d:ec:27:94:aa:67:f4:72:be:31:f4:
b5:d9:7e:58:cd:1a:8e:4c:23:7a:ac:02:29:10:95:
4d:bc:a4:cc:e5:8c:9c:e2:d7:5e:6b:39:62:81:a5:
6b:7e:6d:f6:5c:4a:82:e7:70:dd:af:3a:10:39:9b:
eb:91:01:bb:94:93:71:6f:27:65:bc:21:d8:01:86:
64:54:8f:62:08:ac:9f:50:c1:bc:97:0b:76:9a:23:
d1:2d:da:2b:f3:46:d5:12:34:c2:a1:63:0e:b7:43:
15:bb:14:fa:c5:ed:48:82:47:86:3d:62:03:46:5f:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:FA:C8:10:5E:AC:E6:A6:8F:C6:E7:28:EC:D8:4F:48:2C:33:75
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ae:57:4b:7d:17:3e:e5:78:f4:55:65:9f:b7:1c:d3:b6:ac:
92:f1:66:24:3b:3a:8c:66:0b:2a:05:8c:fa:ff:02:29:d1:32:
eb:a5:ae:a2:4c:7b:48:60:1b:cd:fe:87:bc:6b:e3:4a:2b:42:
db:39:f3:67:e3:92:53:81:ca:b8:be:33:a5:de:e5:95:13:1a:
06:13:4b:b4:b8:05:9e:53:af:e8:d1:fb:51:30:c5:8a:98:2a:
ed:59:3d:08:81:0d:9e:12:1a:1d:87:6c:a6:20:ee:4a:11:6d:
26:64:fe:41:7c:35:00:58:8e:ef:60:03:4f:4c:a2:a9:a9:62:
61:1b:2e:b1:30:07:b8:fd:4c:e5:29:9e:52:ae:1e:a9:cb:57:
9a:a4:26:0f:b3:5c:28:e0:39:19:68:0a:e1:00:1a:8d:d1:be:
38:2f:6c:cb:41:c5:90:3c:d9:42:75:95:35:e7:1d:e2:6f:ab:
00:ad:7b:13:b0:50:6f:e4:37:bc:39:07:a1:e6:fb:ab:98:98:
9b:78:ab:9f:d6:6e:f7:60:95:0a:b7:77:3f:7b:ae:da:ee:17:
3c:9e:7d:30:4b:6c:1b:a7:72:33:79:8c:9c:3f:13:89:e2:6c:
48:11:c8:4b:2c:db:69:bb:d1:56:e7:36:22:8d:fa:02:76:a3:
ae:bf:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:31 2026 by rpki-client