Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
File: qX_5V51boEXbuQGijCxRWI0E_RE.mft (raw, json)
Hash identifier: Ex8H08R18SR8sM59zXHc5Z3O/nDkFAVOYplT9iFvycY=
Subject key identifier: 82:5D:D3:EB:EE:EB:C2:42:05:71:63:60:81:4A:62:84:93:D1:01:72
Authority key identifier: A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11
Certificate issuer: /CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11
Certificate serial: 019D389C60B81DD8D583F56FC18AB7A2EA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
Manifest number: 021C
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: YK_U4CDjht97i8Ypl3EcF7cq1PE.roa (hash: OWygReEMOp5WSHS2/sVrjgB4dtyR3z4cMlsYbMiaOY0=)
2: qX_5V51boEXbuQGijCxRWI0E_RE.crl (hash: L2ngFb7Wb7SAhM2D1ngYNbznZEkjgUpNGdfYeo2HoEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:60:b8:1d:d8:d5:83:f5:6f:c1:8a:b7:a2:ea:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=825dd3ebeeebc24205716360814a628493d10172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:d0:13:38:10:65:cf:67:b4:54:ec:5a:78:
5c:be:be:d3:1b:57:bd:5d:e5:fe:81:c9:7a:68:9b:
b1:d1:07:36:fb:d0:f9:53:69:cd:79:d0:5f:cd:eb:
05:d2:f5:09:01:a3:47:86:4f:e7:e5:06:81:5e:f9:
8a:11:d9:c7:49:f5:52:ab:ae:9f:bf:f6:92:95:6b:
e6:af:6f:52:d2:5b:45:48:b2:f2:6b:aa:6b:62:02:
9d:97:79:21:47:f2:79:2c:10:15:06:b7:ab:ab:a4:
84:d2:9d:73:f4:90:12:06:98:51:df:31:ba:57:fd:
e9:90:2b:f0:00:d4:83:ad:5c:67:e9:d0:23:0e:77:
4e:60:e8:85:26:b6:fd:9a:71:74:cf:6a:4a:07:bb:
fa:b8:66:fe:f9:ab:74:17:22:b9:58:6a:a8:a5:70:
31:d8:c0:f9:66:7c:72:c5:23:00:cc:0c:e6:09:ef:
82:3b:3b:1c:00:60:69:15:90:f1:f4:c0:69:07:d1:
b5:78:ce:fd:1d:f7:e5:88:9d:1a:0d:ae:e0:1b:80:
eb:58:c3:49:31:34:7c:fd:6e:13:04:2e:73:41:84:
68:84:d4:01:07:43:be:9f:29:18:59:fd:ca:ce:50:
58:ee:78:29:57:c0:8b:e2:c5:01:08:c1:36:90:43:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5D:D3:EB:EE:EB:C2:42:05:71:63:60:81:4A:62:84:93:D1:01:72
X509v3 Authority Key Identifier:
keyid:A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:c3:8e:fc:44:4e:b4:04:3a:66:aa:46:79:11:01:02:c3:89:
5a:5a:c6:18:73:6a:b3:a6:36:f8:cf:33:53:bf:14:44:59:9b:
4f:9a:c9:93:a8:6a:5b:c8:41:f9:fb:f0:6d:9e:8d:dc:89:60:
6d:b6:1d:61:25:04:32:2b:40:d7:79:f3:8d:48:6b:5e:23:d2:
5a:1e:8d:9a:2c:58:a2:96:40:27:44:b3:99:97:88:3a:aa:be:
e3:0a:41:96:88:92:ae:bf:92:2c:01:c7:98:26:c6:31:69:14:
8b:cb:4a:09:c6:a0:4a:95:76:c4:29:c5:ea:40:94:8b:0a:d6:
1e:bc:fb:0c:78:e0:de:91:a3:b5:59:9b:ea:75:84:9c:4d:65:
5f:53:dc:c6:0e:c4:a1:e2:59:96:e2:d1:d0:4d:94:04:36:df:
f8:75:0f:11:ee:0a:d2:d0:30:4e:62:90:24:62:65:f1:ed:3a:
bc:f7:c5:e5:ed:b1:fd:b6:0b:2a:f6:fb:ba:98:72:5c:32:2f:
5f:ed:55:71:a0:62:b6:84:0b:6f:2e:d8:ed:b0:b2:1a:c8:7c:
3b:68:f1:19:f8:df:9d:da:2d:ce:df:cc:40:01:ee:71:6e:21:
59:f9:83:51:8f:88:a1:57:2a:86:7b:47:6e:25:bc:3d:73:93:
b3:aa:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:07 2026 by rpki-client