Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: qnqWrnd2cI452stJluRysNkWk+tLZXxPVWr6Qs6Q05M=
Subject key identifier: E6:64:EC:7B:CC:A7:4F:3E:E1:20:B0:84:46:BC:37:98:E7:53:03:A7
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 019D3940F842E4E48FC392BEDC806627EB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:52 +0000
Manifest this update: Sun 29 Mar 2026 11:00:52 +0000
Manifest next update: Mon 30 Mar 2026 11:00:52 +0000
Files and hashes: 1: pZAFv0jFSIg3T6apn7mzvuziSbo.roa (hash: Mivi7UE7PO7E6vo4gXQ02GjqhdIj6xXgGbCncGPuXD8=)
2: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: SitO/ZHW/ke3KlK+Rup7e05H09yCAIW6zDqV9hqLTcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f8:42:e4:e4:8f:c3:92:be:dc:80:66:27:eb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Mar 29 11:00:52 2026 GMT
Not After : Mar 30 11:00:52 2026 GMT
Subject: CN=e664ec7bcca74f3ee120b08446bc3798e75303a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:ca:1b:88:d8:af:a1:d3:ca:2b:f2:13:e5:
bc:41:5b:f5:3a:d1:75:18:2e:be:f7:ae:85:0d:9b:
8a:cb:e3:b4:60:b3:77:13:4b:3a:4d:dd:20:3e:5c:
b2:5c:44:71:61:5a:24:f6:cb:bb:36:92:d3:dc:c1:
8a:ac:85:d1:9c:90:a0:9e:87:29:b1:a8:95:a4:4e:
92:fa:43:b9:2c:d4:8c:96:ac:8b:3f:6f:1a:2d:c9:
7b:61:42:69:6d:87:12:35:d2:33:28:c7:0e:7d:97:
36:f1:ac:89:49:19:27:c2:46:50:84:74:b5:27:d6:
82:b1:00:78:05:b1:d9:72:43:fa:07:40:06:bb:9a:
be:35:ca:8c:41:73:9a:23:14:ef:e4:20:46:9a:2e:
03:7d:66:99:2b:ab:59:0b:97:37:f4:ca:cf:65:e3:
ee:02:2e:ad:70:95:9f:7b:d1:db:e9:bc:d0:a0:5c:
a3:16:5b:6b:12:de:ba:13:37:32:59:e3:8f:a0:23:
8f:5a:e5:dd:39:08:c2:20:b1:b2:28:69:d5:f1:88:
64:57:d5:64:ad:88:c6:c6:9f:5b:18:e4:ad:56:0b:
1a:0c:6d:36:bf:3c:3c:0b:2c:be:a8:a6:94:6b:7b:
5f:38:45:25:da:92:d0:b9:d9:14:16:14:cc:c3:11:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:64:EC:7B:CC:A7:4F:3E:E1:20:B0:84:46:BC:37:98:E7:53:03:A7
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b9:fb:f8:79:36:2d:2c:08:f8:61:ee:7f:53:cf:e9:f4:76:
5f:61:89:17:83:67:0f:3b:0b:24:5c:5b:17:d1:cb:8b:41:0f:
46:d0:bc:84:ce:2f:7c:76:bb:5c:2a:53:83:d8:ac:8e:48:4c:
53:95:1a:68:14:91:e9:15:c1:a4:53:b8:27:d8:46:49:5a:73:
fd:75:02:10:ee:b8:47:d8:d3:55:f5:bb:27:4e:f1:0e:63:31:
8a:cb:6d:a8:59:61:21:df:b1:be:bf:f9:8a:dd:1a:77:5e:49:
ae:e1:e7:d1:4b:4b:93:d2:b9:ea:f6:b2:a7:ec:a8:7c:6f:cc:
cc:1e:e9:a6:fc:3c:b2:8b:d0:e7:c1:0d:1d:f8:4b:5f:22:33:
5c:30:49:b9:de:0f:86:95:f2:35:4d:08:e6:3e:a1:02:46:73:
df:c6:25:3e:2d:4b:07:22:e4:b1:18:d3:71:49:25:04:61:01:
f4:af:1a:2d:de:f7:45:f8:4c:47:3e:b2:67:aa:6c:c4:81:b2:
9b:d4:68:9b:4c:15:ec:43:82:8c:73:2a:ea:c1:ac:b0:c1:30:
da:a3:d6:81:2d:4b:80:cf:61:13:df:bb:38:d9:77:31:65:93:
1c:47:13:52:bb:11:95:4d:f6:a5:0a:d9:e1:bc:de:b9:7e:9b:
62:ed:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:18 2026 by rpki-client