Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: VqZwXbYuItgjpHcePZsK6VUA0IoLwfpZZvZZUwAm5K0=
Subject key identifier: CB:92:38:FA:6C:CB:34:A7:2B:5D:8A:49:91:07:27:C5:41:54:C6:1E
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 019D3941613B427A5F12F47DA99034327BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: La2WPm3LYF79MEJ5dmUf5iwdqMk.roa (hash: RkxUiCmpQV7nr6FWYwJ2GApRVYq0umpCRpKV/azNpzM=)
2: acmzZO4WdYbcbfIVT_LX9qTPV78.roa (hash: pEP2EoeuhTQlSixvaPnjA7Q75y0GUPve3N+3u4ET3rs=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: pAVUslpEKpgPOQZrHfhkxvBMiXQXr+3t9uvBEaXZhRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:61:3b:42:7a:5f:12:f4:7d:a9:90:34:32:7b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=cb9238fa6ccb34a72b5d8a49910727c54154c61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:19:be:44:eb:e7:98:e3:b3:48:84:e7:24:e3:
aa:6d:16:77:76:aa:29:4f:27:4c:2c:55:e0:e5:21:
dc:82:17:86:9e:48:a1:09:bf:fc:5b:f5:fc:7e:4d:
06:af:c6:8e:77:07:fe:37:77:19:86:85:35:a6:76:
66:98:a5:47:45:d4:6c:3a:19:16:f9:53:20:4e:49:
e2:08:dc:42:60:33:7b:4a:46:77:e4:b3:63:eb:b2:
be:fe:5e:eb:00:95:74:fd:b7:50:06:6b:59:f0:37:
a4:cb:5e:e3:70:8d:7b:3c:9b:8c:b7:19:e9:85:ce:
39:86:f5:f0:ba:79:c7:b0:70:21:c1:13:04:6d:74:
67:84:b6:de:ac:b2:0e:79:8a:82:6f:80:e5:5f:5e:
2b:cf:1a:02:ac:e7:d1:11:c6:05:ed:36:7d:2a:60:
1d:cd:a7:a0:02:f7:2b:d2:12:6d:0d:f9:8b:b6:da:
7b:c7:44:ff:56:f3:19:e0:f2:b1:ba:c0:79:0f:e7:
68:c7:8a:56:0a:34:8f:6b:a0:2c:5c:78:e2:50:85:
a7:54:57:e4:47:16:58:39:5c:34:38:51:da:95:22:
d5:e0:a8:02:42:74:ce:10:ec:88:31:aa:80:ae:e2:
16:3d:9f:0d:26:64:54:0c:78:79:15:39:6b:b1:56:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:38:FA:6C:CB:34:A7:2B:5D:8A:49:91:07:27:C5:41:54:C6:1E
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:40:4a:2a:a7:0a:5a:8b:d2:6c:e9:99:34:ec:45:bc:0f:b8:
40:71:a6:aa:c5:76:ac:c2:00:26:5f:3e:dc:bc:8f:5a:bc:a2:
8a:c1:b1:df:f9:fd:0b:aa:51:5f:63:f4:41:9d:d2:0a:6b:63:
00:20:7e:d8:f7:16:7b:1d:e9:85:4a:ab:a0:f5:c9:d2:9a:53:
49:9f:f8:3d:2e:9e:97:df:b2:cd:6e:ac:bf:10:6f:02:db:c5:
94:4f:67:e2:39:44:fc:25:78:ae:b7:0a:6b:fa:03:36:5b:cc:
d1:eb:50:dc:b9:1e:11:6e:98:ce:b2:ed:55:16:2f:d3:a2:c2:
26:0e:72:7e:be:00:27:45:71:d8:95:36:53:c9:33:05:fb:ab:
84:04:f3:b3:45:a6:77:e7:33:dc:12:f9:1d:9b:e5:77:a1:2e:
8a:ad:6d:f8:67:1d:8f:4e:87:5b:a5:07:a5:d8:ca:bf:5b:23:
3d:f6:22:d0:5c:3f:b5:86:20:0d:9f:a5:0b:a7:73:78:8b:22:
fa:47:32:33:ab:b0:1c:39:0c:ad:ef:d5:c1:cb:7d:1d:e9:3d:
ee:97:f7:2d:2e:76:ed:c9:ce:13:c8:3c:90:3c:84:e6:2f:d9:
f9:e2:00:c5:49:d2:56:ba:8b:0c:70:a2:fd:12:32:5e:85:75:
8b:13:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:16 2026 by rpki-client