Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: 15nkcN1xJhYQxPaFW8VHvyzKMDtDmXWnSTjM8oo5SlE=
Subject key identifier: 65:45:0F:22:E7:E7:A5:7F:78:CF:DE:F7:29:5E:CB:3A:5E:44:AA:89
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 019D37527AA48D3CACBB527D236ED3438CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0E04
Signing time: Sun 29 Mar 2026 02:00:45 +0000
Manifest this update: Sun 29 Mar 2026 02:00:45 +0000
Manifest next update: Mon 30 Mar 2026 02:00:45 +0000
Files and hashes: 1: qBBRB8HmJZEtxi-niy9T8cyyncw.roa (hash: cgLv9kyCGCoNq0/R+t8v8q6At3djIYgfHJi87YrPrCE=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: AkUxSfFsNBEPBTqqEpiOriY+cjYJxQ8xHF0Q1yLVrr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7a:a4:8d:3c:ac:bb:52:7d:23:6e:d3:43:8c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Mar 29 02:00:45 2026 GMT
Not After : Mar 30 02:00:45 2026 GMT
Subject: CN=65450f22e7e7a57f78cfdef7295ecb3a5e44aa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1c:9c:83:a6:8b:9b:16:8e:ab:78:2d:68:b3:
c5:8e:21:26:90:07:a4:90:87:b8:77:e5:86:f1:a3:
bb:a0:e5:c7:72:90:cf:55:71:ae:b4:7a:56:af:78:
05:e6:26:03:c8:f0:56:5e:dd:c8:dc:86:8a:f5:24:
25:72:a0:d1:2b:eb:29:7b:7e:7b:13:46:3f:7a:85:
7e:60:4c:98:6f:1c:cf:32:45:3a:d9:b9:45:8d:a0:
31:9d:c3:b7:43:f2:1a:2f:9a:6d:9f:7a:64:66:45:
8d:5c:37:3f:39:68:d9:41:c2:43:af:67:c6:73:2e:
3e:a3:c5:e8:3e:14:67:76:d3:af:31:79:14:d3:ae:
b9:b4:3c:fd:8f:17:58:e3:b1:5c:2d:c2:22:92:1c:
90:9a:97:6e:dd:40:35:85:ba:26:61:9d:2e:58:e9:
41:ac:9c:bb:a0:7a:c1:49:86:55:5b:bc:8f:df:65:
fe:71:60:f8:3d:83:19:1b:12:96:bd:a3:0f:0e:b4:
76:40:d6:f8:a0:bc:a0:be:0a:37:55:37:5f:d7:4c:
27:98:ce:3a:48:8a:4a:3e:06:e8:53:c4:a2:7b:5e:
c1:43:3c:98:9a:ea:b0:02:29:d4:28:e5:1f:9d:77:
9a:47:2b:52:98:72:b6:6b:da:45:eb:c3:46:26:02:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:45:0F:22:E7:E7:A5:7F:78:CF:DE:F7:29:5E:CB:3A:5E:44:AA:89
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1f:7e:57:d8:ec:9f:d8:45:9f:07:35:86:0d:0c:7a:09:1c:
07:b2:e9:d0:83:48:98:88:01:5f:d6:21:51:30:04:3e:91:3e:
78:06:1b:42:f1:f6:a5:21:2e:27:9c:ab:91:c7:ce:5b:d7:5b:
21:25:6f:5e:cf:98:fb:ea:b6:e4:88:48:68:d4:e5:b9:b4:11:
9d:2b:c9:4c:cf:f7:09:59:4b:79:13:78:26:74:de:be:5d:8f:
27:64:c7:9c:52:0d:55:2f:37:f6:2b:05:8d:9c:60:1f:e6:69:
5e:4c:b7:0f:09:da:9b:3c:57:9b:ac:f6:4d:e2:14:88:93:10:
fa:f3:2b:79:c8:44:a3:95:25:2f:7e:05:20:cf:c3:4e:da:0d:
a6:dc:bf:eb:9e:2d:88:07:02:68:14:47:31:cd:d3:70:60:80:
37:66:a3:3a:4a:b9:49:bd:bb:be:29:3a:22:3a:31:2f:9b:d9:
d3:b6:ed:73:8b:2e:bf:1b:2e:41:1f:a0:70:d9:00:29:89:d7:
56:2a:5f:8c:d2:c0:5b:55:4f:16:66:2a:09:0d:c0:dc:ae:0a:
a6:80:21:c8:b0:76:83:d2:19:c5:e9:83:ff:20:89:a1:eb:80:
b2:9a:fa:34:32:65:42:0f:83:8a:69:cf:38:fb:95:45:86:c7:
69:da:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:44 2026 by rpki-client