Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: tVqqZjItQfBtwDo54mlw2Ov8YUAQMbijUvlXa/onMLY=
Subject key identifier: 21:39:4C:BD:A1:61:A3:82:F4:3C:EE:94:A2:94:B0:3E:FB:0B:9D:20
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 019D37C01A3DA478CB916650D291AA749220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 1500
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: 13KLyP6gZAyfsLYlKYob4QTrBOY.roa (hash: UC903c/BhGuwxFubD7WJePOBlwZE5lZusD52hX3+scI=)
2: JDIQvJOOgOU1198oLwbvPRw_rhI.roa (hash: ULh5noQt/vxcOhnB+/7fGlpNTGaGPtsJ4TS11neT8M4=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: TStn7tEAmqFFRn0jgCa2WfKpfMimljRZWsycKTfqtjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1a:3d:a4:78:cb:91:66:50:d2:91:aa:74:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=21394cbda161a382f43cee94a294b03efb0b9d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:29:c6:a5:ca:d1:3b:b4:db:5c:81:7e:24:
59:49:e1:46:10:73:22:65:f5:ea:20:70:c8:71:76:
36:5e:23:89:2d:28:2e:fb:48:e2:3b:fb:a6:77:5f:
a4:d0:59:bb:1a:89:11:86:4c:cd:75:69:a4:a1:b6:
ca:27:b3:07:60:03:bd:fe:bf:aa:99:7f:60:34:de:
4f:c2:66:a1:40:b4:a3:42:84:10:5f:be:48:c0:70:
86:a2:79:67:f4:04:71:5f:50:43:31:0c:bc:c9:87:
fc:fe:dd:ef:b0:69:0e:29:12:3f:a7:ba:24:db:3c:
a4:24:99:2b:7c:24:2b:3b:12:f5:90:f0:4f:99:0d:
af:d8:bd:96:f0:4a:4a:1e:1e:4b:89:9d:22:2b:0a:
e1:4b:ec:48:ac:49:fc:b5:37:60:d6:40:83:ca:d1:
3e:4b:75:8e:36:8b:88:a4:35:18:99:8c:d0:5e:2e:
a9:74:03:82:b6:e7:da:03:f2:d6:e2:8a:ee:37:30:
f3:89:22:b6:35:d0:3e:91:8b:70:06:6c:ba:4a:93:
7f:29:a7:c1:c2:7e:68:6b:da:60:2d:3d:a5:1c:4d:
d8:85:25:09:5b:a8:9c:2a:6c:70:3e:f8:c3:af:5d:
a1:15:dd:4d:65:b0:a3:ef:04:0f:74:9f:39:43:17:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:39:4C:BD:A1:61:A3:82:F4:3C:EE:94:A2:94:B0:3E:FB:0B:9D:20
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:67:9d:2a:21:df:04:3e:b3:e5:68:e4:7c:84:5c:a5:3e:de:
7e:3a:34:31:cb:fb:dd:30:5a:18:db:d0:5f:14:0f:9c:28:cd:
77:ee:7e:19:73:5c:e1:7d:e0:0f:0b:cd:74:db:38:4d:d6:d2:
94:f5:61:f9:17:2a:bd:e4:11:45:a0:89:fd:2e:13:66:a4:59:
d8:12:2f:fa:fc:51:1b:f6:b4:ae:82:95:65:0a:a7:6c:a4:8d:
84:eb:9d:9c:79:08:ab:10:4f:04:58:03:25:4c:5b:d0:f8:05:
76:b5:75:a6:ce:c7:11:0a:cd:42:5e:b8:b2:f5:80:f3:2a:67:
8b:7c:da:70:10:47:38:3a:e4:97:eb:45:68:2b:08:6b:59:97:
fe:6b:17:cd:c1:42:c7:c8:03:2b:67:94:45:27:5d:bc:60:56:
63:40:80:b0:f1:fd:13:20:14:98:f2:ef:62:5a:3f:9d:4a:cc:
aa:51:74:d7:44:97:d0:0a:a3:f2:8b:57:c1:f0:55:98:62:ce:
98:34:89:91:9c:a0:fe:73:33:ce:0f:43:b3:84:c0:dc:86:40:
f0:c9:76:f1:a6:6a:bf:43:01:50:59:43:24:1e:e1:f6:3a:86:
0c:79:98:26:f2:5d:9b:a1:9d:e9:1b:78:49:95:bd:d6:0a:4e:
4a:64:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:29 2026 by rpki-client