Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: SPFqpy+4NiG/8j/v5VXxRVAkWFQ62MRfR71YxD0QWkw=
Subject key identifier: 68:CF:89:1E:D5:37:1E:23:E2:7F:A7:C3:D5:CC:D0:16:D4:76:8F:60
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 019D382E64238F36F3EFF618C66E772186FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: qXrwEYhg67uyUDcfCHYiqepZzQNQKI6qnztecZw9G/4=)
2: u73VKktNNDp99ZZ8-aw2FkAHHqE.roa (hash: 50jFlydOYBg1FIR0dL8Ur0REyQFfT4z/eOZDEpcxAyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:64:23:8f:36:f3:ef:f6:18:c6:6e:77:21:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=68cf891ed5371e23e27fa7c3d5ccd016d4768f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:ca:c7:3b:2b:72:86:f1:4d:9a:9e:5a:de:
a6:0e:2b:25:6d:4e:3d:4c:be:d6:8b:ed:a6:6e:05:
f4:30:3f:44:20:d8:30:65:48:ce:b2:cb:74:18:c7:
01:a6:b4:87:e7:0a:24:25:da:87:87:e3:8a:0b:c3:
30:26:be:78:25:37:87:a0:eb:a4:9e:70:a4:e2:81:
49:53:02:bd:5d:c5:7d:db:07:82:ec:c0:61:ad:7b:
0c:9a:da:e2:c8:aa:eb:13:f7:a1:01:93:6b:ae:5f:
08:f1:f7:e7:be:31:77:60:7d:bd:b4:12:1c:93:2c:
65:7d:f4:9d:fe:32:f8:6a:15:d3:45:4a:8c:dd:e9:
0a:6c:21:71:b8:12:a4:c1:7e:ad:13:c1:45:e5:b9:
d8:e7:0d:3c:25:e5:17:23:cb:a4:41:15:5f:d4:0d:
01:b2:f4:b5:27:3d:4d:46:a3:4a:fa:45:d9:43:d2:
20:5a:69:d0:9e:c6:83:72:91:be:29:66:9a:86:6a:
cc:49:1a:03:a3:0d:2f:2d:15:51:31:2c:eb:96:03:
2f:7d:b4:c9:39:fb:7e:e6:08:8a:60:2a:e9:c7:0a:
65:d2:3e:95:04:34:e8:3e:f4:2a:96:cb:0e:c1:d7:
12:6d:f7:43:69:dc:ad:2e:e3:70:d4:94:2b:51:14:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CF:89:1E:D5:37:1E:23:E2:7F:A7:C3:D5:CC:D0:16:D4:76:8F:60
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b4:7f:f2:6e:2c:d1:23:6f:fc:fa:ef:80:be:6a:8c:a4:b4:
a6:38:14:a3:8e:57:42:6b:9b:1c:94:95:38:25:32:47:fb:8d:
ea:35:ea:a4:12:cc:21:f6:7a:e5:0a:91:51:91:9c:10:4c:cd:
8f:f0:07:5e:b8:55:cb:d0:93:b1:b8:3e:01:3a:90:f4:25:f9:
b7:e9:b3:80:9f:3d:9d:41:d6:b3:51:12:5e:be:cb:dc:47:16:
8c:21:87:5c:e7:03:07:a6:16:e8:c9:ae:93:c0:40:0e:eb:57:
8c:05:e3:ee:da:50:bb:c6:15:40:d2:c4:f9:1b:f6:b4:30:42:
1f:15:0f:43:b7:12:55:2a:03:4f:33:68:3b:1a:a5:36:35:b0:
cd:43:c6:61:9f:c8:4e:3e:73:b6:8d:c9:05:7f:6d:2c:a7:97:
18:ac:fe:f7:c8:94:c6:57:35:31:18:1f:20:19:35:6a:ae:4f:
a7:d6:cf:a0:41:66:08:65:0a:b7:a9:b7:ce:46:6a:9d:fb:b5:
20:41:15:e0:ce:31:9f:06:3a:5a:94:8a:f6:70:d6:c1:7d:71:
a1:96:43:6f:d7:b2:55:56:84:38:d1:85:e5:01:c1:64:da:01:
b9:91:e4:6b:90:a6:00:f9:3d:41:64:9f:07:12:71:63:e9:a7:
29:6b:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:10 2026 by rpki-client