Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: 9zfSK0kogl31JPx63Gq8WWQO7/MKLPduXLX8Oln78v8=
Subject key identifier: 82:32:5C:C7:25:3A:DB:1A:83:C7:DF:97:D3:11:82:F0:B7:C2:CD:61
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 019D3977C53B0462C44AE68C9B260932DE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 0AE1
Signing time: Sun 29 Mar 2026 12:00:43 +0000
Manifest this update: Sun 29 Mar 2026 12:00:43 +0000
Manifest next update: Mon 30 Mar 2026 12:00:43 +0000
Files and hashes: 1: WXDefoGzoUIZ3AxVVx77aC_MDc4.roa (hash: 0/oY/YwsoelOzPNcClAu/TuufBye/1HGrabd5S28VWg=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: Kk+h/xbTqxHnP1Fhkkblpzhg683w/LpmryIOHc9Mvzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c5:3b:04:62:c4:4a:e6:8c:9b:26:09:32:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Mar 29 12:00:43 2026 GMT
Not After : Mar 30 12:00:43 2026 GMT
Subject: CN=82325cc7253adb1a83c7df97d31182f0b7c2cd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:16:6f:7f:43:72:c9:9b:fe:de:1c:5b:b3:
1e:4d:cb:37:16:41:4e:50:5f:f6:5b:58:10:a4:65:
b8:d7:7e:b1:7e:65:75:4e:72:f9:6d:9e:b6:b4:fe:
fd:54:a3:9f:c0:87:32:48:8a:0f:4e:a5:ee:e8:56:
d3:af:83:4f:c7:06:3c:54:46:b3:7f:9d:d8:a6:ac:
b4:7d:d2:3b:93:ce:0d:ba:fa:69:ae:58:cd:64:7d:
32:97:38:a8:eb:22:5d:52:ca:3c:38:e0:d3:01:d8:
2c:76:22:fc:16:dc:5a:5d:02:be:a2:90:bd:bf:2c:
8b:82:b4:52:bd:48:40:18:8f:cf:88:5e:5d:dd:e1:
06:6c:23:bc:6e:e5:84:69:c9:b3:6d:a6:d7:75:fc:
6e:60:25:a6:50:5e:e3:64:ef:16:5f:e3:ee:8e:15:
c1:7b:e6:00:4b:bd:e9:45:53:1c:36:7b:15:26:b8:
e1:46:d4:c4:8b:22:87:fc:fc:46:84:52:c7:c1:fd:
9f:ea:5b:ff:eb:c8:fc:31:e3:6c:01:07:ab:90:5e:
bd:84:cf:ca:d2:63:ac:7d:7f:df:61:26:10:7c:e6:
a4:c5:d3:9d:f9:8c:6b:87:fe:21:0b:99:b0:22:dc:
16:6e:9b:13:8e:52:4c:31:be:35:9a:3a:32:48:d7:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:5C:C7:25:3A:DB:1A:83:C7:DF:97:D3:11:82:F0:B7:C2:CD:61
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4d:bc:a0:d8:fb:3d:b9:be:50:10:1f:78:20:98:43:36:1e:
3f:1c:d5:c0:cb:1d:3b:72:f4:1d:6e:c7:ea:32:c8:39:aa:e0:
7c:44:73:96:93:de:c9:da:38:28:bc:bb:44:02:b9:02:25:bc:
58:fd:74:a6:52:2f:47:69:ec:e1:22:08:47:89:83:41:0f:11:
03:1f:53:f3:ef:49:e1:45:00:03:17:ba:68:ca:49:a5:08:5a:
72:7d:2f:dd:c6:23:16:1a:e8:16:3c:a9:ad:d0:a7:3f:1b:08:
e0:8f:98:31:c5:a7:40:78:cd:77:30:29:a1:43:a0:ae:1b:12:
d7:87:97:2b:ba:09:62:d1:e8:66:13:c4:c0:84:e4:00:23:ea:
18:0c:95:8c:8d:bc:ec:c0:65:07:e4:ba:27:e4:6e:7c:92:77:
c8:94:22:73:bb:a2:80:c1:bd:ee:65:b8:0f:e7:ba:47:2a:01:
ec:fd:3b:89:66:bc:c0:9e:f4:5f:14:88:88:c1:2a:72:5f:c4:
b7:74:d3:89:25:8a:de:d8:2b:92:47:95:04:90:88:24:00:71:
0e:67:c0:43:3e:c8:a8:56:01:52:a1:54:02:a0:6a:bd:8c:7b:
0d:56:f2:28:a4:cf:b9:35:3f:ad:fa:a9:fe:83:7c:8a:36:4e:
b9:50:6a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:55 2026 by rpki-client