Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: IdygXKoIevSoV2pHmYlCKc58Lq94kinMaCIOHDvF++c=
Subject key identifier: 11:3A:16:13:AF:D6:4E:2F:98:24:26:FB:40:CF:6C:F5:89:A2:FF:DB
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019CE55A254B4C55A7DB22B522C6C14DAAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 0407
Signing time: Fri 13 Mar 2026 04:00:16 +0000
Manifest this update: Fri 13 Mar 2026 04:00:16 +0000
Manifest next update: Sat 14 Mar 2026 04:00:16 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: HiR9jtymq5VvgleU3R73PV5qnfy2tugeDsmDdpNNuQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:25:4b:4c:55:a7:db:22:b5:22:c6:c1:4d:aa:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Mar 13 04:00:16 2026 GMT
Not After : Mar 14 04:00:16 2026 GMT
Subject: CN=113a1613afd64e2f982426fb40cf6cf589a2ffdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:78:a4:a1:99:61:ac:9c:b5:35:cd:67:0e:
c7:62:e3:3b:60:b2:05:5f:19:f9:3a:36:87:a3:ce:
25:16:3a:ae:2c:50:8a:cb:5f:cc:f9:d4:f2:ea:bd:
e3:e1:99:c7:f7:e7:6c:b2:82:26:ea:db:eb:92:7e:
36:ce:6c:f3:26:b2:26:b5:da:f6:ab:3e:80:65:8a:
9c:08:bb:65:5a:ea:83:3d:bf:f2:33:fc:69:04:22:
37:63:f0:14:06:51:ec:45:24:49:35:a8:62:0d:94:
71:7e:09:06:9c:b9:35:49:eb:47:b2:c0:71:02:3f:
9f:da:8e:dd:24:8e:b2:e7:45:8e:9b:df:b6:5c:ba:
cb:33:66:c7:24:ba:09:39:f4:9a:36:3b:a9:da:82:
e9:7f:bb:67:a5:5d:3a:f2:ff:44:13:14:56:8c:07:
72:0f:ca:a6:1f:c8:ca:32:7c:38:78:13:e4:b9:69:
ba:c2:34:2c:75:67:86:d8:f0:10:f5:49:71:f3:03:
f3:aa:0b:9b:4b:1e:c5:45:74:5e:0b:26:bb:a4:0e:
10:10:ea:e0:5f:c2:6d:22:d6:8c:91:61:7d:c5:9d:
60:41:f0:78:6d:39:d8:60:da:1f:cf:eb:c9:e5:60:
82:28:6d:c1:14:9c:13:cb:67:78:bb:d2:56:0a:6c:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3A:16:13:AF:D6:4E:2F:98:24:26:FB:40:CF:6C:F5:89:A2:FF:DB
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1e:0a:5a:24:7b:a9:05:24:8c:e9:3d:aa:a3:f3:1a:eb:4a:
ee:25:fd:b2:27:45:a5:d5:9d:08:70:ba:1f:59:6e:d2:e2:44:
e1:6a:61:c3:3d:cb:5b:6d:f1:ff:9d:f3:19:20:41:fa:fa:1f:
da:7b:5a:0d:b2:30:f3:2e:b2:63:6c:d6:06:ad:80:a2:13:37:
2d:72:b9:7f:04:0a:f3:11:d5:b6:59:ef:d6:90:23:ff:bf:f7:
70:ac:fe:65:13:53:40:93:36:59:b1:ff:10:0e:63:b4:34:e8:
70:b9:b1:a4:02:8e:f7:03:28:08:6a:93:98:01:3e:c0:d9:d1:
ce:64:66:59:fd:03:b7:43:5c:a8:66:f3:c0:e4:b6:9c:22:61:
57:4c:81:06:73:25:2c:c4:4f:37:ec:c8:d7:e7:56:47:14:39:
56:b3:c9:4c:8c:c2:da:c9:4f:31:81:f7:1b:53:08:61:d0:a6:
12:5b:0b:1f:d9:c1:0b:93:06:ef:85:73:7a:71:6d:2b:8c:1a:
4e:87:d8:cb:96:b4:8b:b7:96:e5:ea:36:c6:25:95:e6:ad:c7:
96:60:45:b6:20:c9:17:4a:85:04:33:82:d3:1a:a7:60:37:d3:
66:29:fd:ac:11:65:e7:b9:05:31:5b:33:80:a3:d2:d1:a0:f6:
92:1b:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:28:36 2026 by rpki-client