Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: 8AmPXlQZS20ZrLJrar5dTaDlsYMB+eKIEnQWnQ45SSQ=
Subject key identifier: 57:AD:36:1B:B1:0A:D1:05:72:FD:E2:9B:FC:F3:B5:53:7E:48:CD:02
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 019D38D3C7AA497B1B8CE72532C065816093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: pEhtD9xTTDC/uXRTiwVjaYIoLLyxoEjPdxPhWwj9YMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c7:aa:49:7b:1b:8c:e7:25:32:c0:65:81:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=57ad361bb10ad10572fde29bfcf3b5537e48cd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:fc:f3:5a:10:dd:86:7f:18:e9:62:2b:25:
48:76:05:71:a7:6a:44:99:50:75:b1:1a:67:31:29:
0b:a5:0c:5d:05:e5:90:87:27:a9:37:13:b9:17:07:
9b:62:59:52:29:c3:39:77:36:54:61:b3:eb:77:ff:
d2:44:0a:e3:9f:f2:2c:a8:5e:ac:22:09:69:e2:58:
51:80:2a:49:8e:f1:f5:fa:c2:e1:a5:88:85:21:0a:
d7:26:a1:36:2e:15:cb:bb:4e:53:46:0c:4c:df:77:
cf:b6:ec:bf:29:a9:59:cf:65:56:c0:08:9c:7f:cf:
5a:1e:cb:69:ca:ea:18:04:cc:e1:be:bc:1e:a2:63:
3b:da:24:41:06:cf:fb:d4:02:e8:29:33:16:be:8f:
eb:35:ee:92:5f:b2:72:6b:ed:ab:93:5f:6f:e3:d4:
47:f9:8f:df:a8:c7:04:f1:b9:ce:3c:97:d9:72:91:
07:61:21:3c:55:bf:5a:4a:33:fe:54:2b:5a:3a:3a:
61:e3:6a:fb:cd:83:71:65:77:2e:5e:2b:19:a6:f0:
20:e0:d4:0e:32:2e:41:2e:a4:d7:83:d7:72:c8:aa:
56:e8:65:b5:8c:a4:d3:1f:f1:f6:62:9f:6c:62:e3:
34:cb:5a:5b:cc:dc:4c:e5:68:81:7a:fd:b0:fe:42:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:36:1B:B1:0A:D1:05:72:FD:E2:9B:FC:F3:B5:53:7E:48:CD:02
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:06:b7:39:8f:cd:da:1c:f5:20:3b:35:18:f1:97:44:7d:e4:
f2:ad:1c:be:46:5e:98:e2:fa:5d:3d:f9:55:18:0d:6e:bb:69:
85:3f:ef:2c:ac:87:71:4e:5c:1f:11:55:05:1f:18:61:20:3c:
3b:06:92:1c:c8:dd:b3:20:6a:16:60:2e:9a:30:61:c7:6f:17:
e6:65:28:e2:d9:ba:8a:16:33:1f:dd:45:11:91:5d:be:86:68:
11:25:d4:ea:95:82:3b:9e:a1:61:fc:80:6e:06:73:85:ff:5a:
c3:dd:07:9a:e3:ec:d8:10:d6:01:c0:3d:8a:c4:29:f9:48:12:
0f:7d:6e:da:54:7b:05:eb:31:dd:1b:51:0e:c8:c2:44:54:8b:
1a:2f:aa:90:fa:74:f8:9f:dd:e1:12:d8:34:50:5e:91:c0:04:
77:83:96:e9:d2:3c:3e:60:ae:dd:0f:e3:35:9a:97:dd:8c:4a:
02:4e:5e:6c:5b:a8:06:66:13:30:5e:f0:f0:77:77:e3:50:63:
94:f8:7e:4a:3b:3f:37:c7:de:61:0c:93:da:77:2f:14:59:83:
93:d2:9e:b6:84:83:e9:c2:81:81:25:43:ed:11:e0:08:96:6d:
4d:0a:46:54:62:18:e3:e1:3a:3f:aa:a6:f3:ce:5d:88:8e:b8:
9e:78:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:56 2026 by rpki-client