Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: iVFhxQQhb/UqnAQhRh5eTk4zF20cQQSezkVHu4Z5HKQ=
Subject key identifier: F6:2F:0C:29:B0:52:6A:74:45:8E:07:E7:0C:15:D0:CA:9D:70:B7:94
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019D37C042C54A178B3AD672AF7FB4F0C8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 04:00:39 +0000
Manifest this update: Sun 29 Mar 2026 04:00:39 +0000
Manifest next update: Mon 30 Mar 2026 04:00:39 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: AtkLuyNvqN8GFR97yyQRP/IInbDclj6P8W+6fTnYino=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:42:c5:4a:17:8b:3a:d6:72:af:7f:b4:f0:c8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Mar 29 04:00:39 2026 GMT
Not After : Mar 30 04:00:39 2026 GMT
Subject: CN=f62f0c29b0526a74458e07e70c15d0ca9d70b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:4b:d3:f2:43:81:53:67:ad:73:9d:46:cf:
c1:29:7a:36:3b:3c:34:95:42:60:4e:eb:0a:83:8c:
d8:78:76:b8:c9:3a:50:59:8f:47:20:f4:c9:64:07:
c1:65:58:19:b7:3c:c8:44:c0:3c:a2:25:e2:75:e0:
39:7b:c9:bb:89:aa:ae:ed:53:70:fc:d1:8a:1c:66:
8d:16:bf:be:32:ad:b8:e7:27:62:ec:17:54:7f:4b:
15:94:9e:bf:23:1c:1c:53:9d:56:06:db:29:c9:28:
55:f1:da:6b:af:94:ba:5e:86:f2:54:31:c8:a3:52:
92:d2:a1:66:34:9a:59:dc:d9:ea:80:9b:a5:6d:cd:
a2:c9:31:84:60:96:6b:81:53:06:66:a2:d2:f8:2d:
89:04:26:cc:64:f2:ca:ed:7d:ac:8d:c2:59:0f:16:
0a:e9:6d:72:68:b5:f2:3f:d3:ca:b2:82:51:26:a5:
31:b0:bd:55:ca:09:0d:a5:e4:e2:8a:50:3a:d8:94:
00:4b:5b:5b:28:49:a4:0e:b3:7e:6b:82:13:1a:9e:
70:e0:22:ca:9a:cd:d4:72:67:1e:ca:7a:31:81:f9:
27:18:60:ec:70:16:06:c4:7b:f6:3b:f9:a7:c4:cb:
74:27:42:c9:cb:00:77:df:e5:8e:85:9e:02:44:07:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2F:0C:29:B0:52:6A:74:45:8E:07:E7:0C:15:D0:CA:9D:70:B7:94
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5b:a1:f8:02:0c:d9:bd:c8:56:85:92:9b:95:5b:b9:5c:9b:
0f:c8:01:ca:c5:d0:f9:a3:b5:f3:90:c6:74:b7:c6:9e:36:02:
8a:c5:e2:05:35:73:71:b2:27:b5:92:e4:77:f9:b7:19:08:b0:
fd:8f:1d:4c:4d:18:ae:47:3a:59:f3:fc:c3:e5:24:08:e6:e6:
ad:23:fd:3e:5b:b5:8d:bb:58:15:ab:ae:b7:b8:a1:fc:58:af:
86:e0:b3:b6:ad:35:d9:a1:e0:06:93:79:46:c6:cf:eb:36:88:
bc:b1:74:82:c0:5e:cd:25:19:8f:8b:72:aa:c3:c1:6a:01:b3:
ae:bb:99:3e:98:cc:37:f2:8e:ab:1d:f8:ad:6e:29:58:28:fe:
2d:fe:44:6f:92:85:3d:a9:02:dc:0e:b2:5f:ad:dc:32:a0:d4:
4e:b9:89:c5:6a:3e:23:f6:54:86:57:7a:0e:6f:3d:64:53:7b:
f1:f1:1f:99:43:54:d8:6b:41:a0:18:00:56:4e:d3:22:8f:c3:
11:77:10:53:61:52:d5:56:ea:b9:b7:d5:24:fa:e6:80:ea:f0:
6f:75:a9:75:34:c4:bf:72:c9:96:86:ae:21:6c:82:af:b8:68:
db:bb:b6:c4:ef:b7:3a:c6:46:4d:30:3e:62:20:de:72:2c:ae:
4c:d2:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:11 2026 by rpki-client