Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: RQqnKTI5VzxUNF8iEiu1GKnppFIo0oBO1jGdU5aR79U=
Subject key identifier: E5:C7:60:43:56:AD:E3:D3:BD:F9:41:13:59:7F:E8:CC:1D:1B:A9:7B
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 019D389C184AE7093E434AF028EEBB24ED7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: UrVvZVnA9sxhDnytnq_6CJMVGDY.roa (hash: Eo7tDFpvsB5+kGHIClxenKJ/I8v5IPSf0jD2mkBbqy8=)
2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: 97t2pDBA8HqsyFXnQNozr4/jkZggFmjy/OHkLXBcMZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:18:4a:e7:09:3e:43:4a:f0:28:ee:bb:24:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=e5c7604356ade3d3bdf94113597fe8cc1d1ba97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:b8:06:aa:07:d4:54:40:4e:70:23:27:0b:
b2:29:5c:b9:73:fc:38:17:25:ee:14:a6:75:75:9a:
04:0f:0d:e3:6a:dc:1d:ca:03:94:5a:11:34:eb:df:
79:53:7f:88:17:25:f6:35:7d:a8:91:7f:cd:e8:d5:
08:46:36:13:b8:7f:c1:cf:f9:8b:73:19:fa:ba:5f:
3e:1c:dd:21:9a:ab:21:3d:94:1d:79:64:a4:a4:9f:
44:66:84:ef:d0:eb:75:c7:a1:aa:03:7c:7e:9f:e5:
5f:c5:15:ec:d4:54:fd:ab:7d:7f:0f:16:25:8d:b0:
0d:87:d1:3f:b6:23:20:d2:c9:00:51:6a:a5:e0:04:
f7:dc:d2:e5:7a:6f:48:cd:4f:b4:4e:14:b5:ae:bb:
bd:a1:0e:04:1f:dc:bc:05:3b:cc:a6:5b:74:96:a1:
e8:30:41:30:4e:68:d6:cd:8a:c4:e0:5f:7d:59:63:
03:91:9d:39:d0:fd:76:18:8c:5a:ad:b6:3f:a9:98:
29:35:bb:ef:20:a8:97:d1:66:3f:0d:83:0a:8a:68:
ba:a0:4a:45:3e:1b:5b:6d:42:2f:d3:e2:e0:a8:d9:
64:ab:5e:d0:9e:77:4e:23:42:cf:bf:5d:7b:e8:4f:
b3:5c:a3:77:ce:9c:75:20:d9:ab:e4:8a:d5:3f:03:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C7:60:43:56:AD:E3:D3:BD:F9:41:13:59:7F:E8:CC:1D:1B:A9:7B
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fc:56:ef:71:38:c5:f4:61:19:c6:0d:28:a8:cc:a3:37:65:
cb:c2:28:2a:ef:42:13:cf:b1:48:5b:7c:93:8c:bd:79:21:7c:
44:17:58:11:c9:48:4f:3b:f9:fa:49:0c:70:56:d3:30:33:0d:
cd:14:f8:46:6f:b4:2b:e0:a4:f6:06:86:77:89:c8:c8:4b:6c:
30:e1:39:2f:cb:86:76:01:f3:eb:49:42:dc:fb:73:d5:2e:4d:
09:bf:ef:48:70:b6:fb:0a:69:f3:95:46:af:d7:dc:b7:64:39:
ec:2a:2b:0f:5f:c5:ee:7f:7f:be:38:58:9b:f6:e7:7d:10:77:
b4:a6:2c:ae:5d:93:42:0a:1b:53:f9:18:c5:bc:75:17:a3:2d:
55:47:a0:a6:b3:9f:6c:bb:0f:b0:95:ed:94:55:76:6e:5c:00:
d9:e2:c8:90:d9:4e:4a:43:38:47:d9:e4:f8:63:58:2b:d4:30:
ac:cf:f6:2f:ed:b7:86:b0:08:27:ae:5c:7f:a0:6b:95:10:d0:
9f:b2:86:4f:34:08:a0:78:0a:3e:14:17:fc:73:c5:d4:55:7c:
31:b3:7d:4b:84:57:f0:67:bd:4e:c1:f0:fc:59:94:8f:0d:34:
6f:fb:d1:0c:5f:c0:70:3f:0f:6e:d1:bb:aa:96:91:53:67:e7:
8c:9c:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:26 2026 by rpki-client