Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: xj8pJYJ3ZcHLGWnucYIB7Sck9lHD2FnJjYvmualBPEE=
Subject key identifier: F3:9A:43:29:AD:B1:46:92:B6:D8:2A:91:80:23:B0:DA:A1:3B:B6:70
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019DCF07FA8CF89FBC98FA67D173E8E1812B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 0480
Signing time: Mon 27 Apr 2026 13:01:39 +0000
Manifest this update: Mon 27 Apr 2026 13:01:39 +0000
Manifest next update: Tue 28 Apr 2026 13:01:39 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: gjofbRUOinV6SBmRBI9El+H46xY16TNNQCXbeCLJliA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:fa:8c:f8:9f:bc:98:fa:67:d1:73:e8:e1:81:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Apr 27 13:01:39 2026 GMT
Not After : Apr 28 13:01:39 2026 GMT
Subject: CN=f39a4329adb14692b6d82a918023b0daa13bb670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:27:65:4e:3e:32:b1:63:e6:bf:7f:38:89:
dc:b5:27:04:8b:57:c7:1b:db:f0:5f:d8:fc:53:70:
32:a7:ce:f3:6c:67:28:41:d9:82:eb:ea:96:4e:28:
e0:7a:70:15:2c:7f:fe:d7:2b:51:c5:5f:b5:ff:c1:
3f:9a:7e:3d:12:fd:3b:41:e3:aa:52:74:87:05:cc:
75:14:d5:d7:db:08:58:9d:2e:b5:d1:cd:da:6f:08:
2c:b5:99:ae:4c:e4:0e:d9:a3:47:01:66:8f:c1:4a:
2c:f2:04:5c:5f:cd:25:53:af:ae:24:87:81:cc:f5:
a0:1b:d4:cb:6a:c1:43:99:f4:e4:34:18:90:b0:f7:
99:e2:dc:db:ef:d7:3c:c6:62:88:b7:68:ab:26:82:
c8:ce:d5:d6:34:a5:e5:f8:19:d4:42:60:41:0f:f3:
d7:90:16:63:ff:ae:fa:58:9b:99:ff:3f:db:5f:d9:
d1:1d:d5:30:50:c5:50:1c:d0:1e:02:27:2c:64:6f:
7b:79:20:a1:8c:d8:a5:50:f3:d5:8c:f0:4c:10:ed:
99:70:f2:08:09:07:81:41:97:4d:6c:76:dd:6f:b7:
d0:aa:79:bb:36:33:b2:a5:ec:18:0d:c9:63:b0:e9:
ca:84:da:ce:f4:80:55:90:75:ca:7d:80:b0:b4:43:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:43:29:AD:B1:46:92:B6:D8:2A:91:80:23:B0:DA:A1:3B:B6:70
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5b:7e:c6:6f:45:c4:14:65:4a:9f:07:af:49:6b:70:ef:90:
b9:a3:45:fc:62:f0:47:8a:6f:2e:ac:69:eb:6d:74:26:6e:75:
b2:28:ee:72:4d:11:5d:6e:c6:39:07:a9:6f:4f:9d:d6:bd:28:
8f:0e:40:91:20:bb:e7:73:c5:a0:d8:e0:9b:7e:08:54:3d:6d:
06:bb:85:f1:17:c2:ed:b5:ec:70:cd:5e:ce:3b:8d:27:ca:14:
40:0c:6a:15:2c:77:dd:b4:cc:0f:45:dd:40:f2:85:f6:36:8f:
cc:0f:37:9e:f0:91:f5:f5:53:ce:86:c5:18:ac:78:1b:89:50:
b2:98:0b:d4:91:31:81:b2:6d:93:89:98:bc:84:10:83:ae:07:
d8:51:e0:fa:91:64:63:11:71:54:eb:d9:a3:81:03:21:76:65:
49:44:bf:f1:cc:de:18:f9:77:03:77:17:ca:07:93:a4:70:66:
e0:7a:a6:03:94:98:a4:b5:7d:bd:45:6d:4c:f8:a0:58:c2:e5:
95:40:59:38:b1:d0:ab:0f:0a:d8:2e:85:3d:77:6b:5d:e5:49:
9a:66:0d:ea:cd:54:99:aa:c7:4a:89:43:6b:1b:07:09:c2:3a:
97:95:a1:df:05:cd:31:58:67:3b:49:fe:9a:12:a2:e8:6b:a0:
e7:ef:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:10:25 2026 by rpki-client