Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: KVChGM9o2zvIZuSxtY6u07h0JZvLqgoT4kSB6Sh9dRw=
Subject key identifier: 15:7A:15:D4:BF:F4:B2:7F:EA:CD:FB:29:07:92:82:02:FF:13:63:B4
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 019D378966EEB65E9C8A82559F1E498AC7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0AF0
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (hash: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4=)
2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: woa6AAiwnxlXX8rJkN1wYemNeurNnrMoCs2CKN80LOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:66:ee:b6:5e:9c:8a:82:55:9f:1e:49:8a:c7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=157a15d4bff4b27feacdfb2907928202ff1363b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:19:18:b4:e4:7f:31:11:6e:eb:0e:c2:77:86:
ba:2e:4f:f3:ca:96:5b:22:31:f6:c5:f3:49:cd:8a:
f4:ef:5b:40:4d:58:e0:bd:50:cf:31:55:7f:97:a1:
0e:c7:8f:42:f5:18:46:a6:a5:27:0c:7d:86:d0:7d:
e1:8c:29:99:40:16:5e:b9:44:7e:f4:f5:de:b1:69:
35:a4:6c:7b:d7:34:06:5f:2e:bf:60:f1:29:0d:f3:
99:28:79:24:f1:92:f7:b8:23:5d:12:71:27:0f:52:
ba:b9:de:71:5e:8c:94:35:f4:b0:56:96:93:d2:39:
66:bc:ee:91:80:c4:09:1f:42:12:38:5b:6d:d6:68:
b7:cc:1c:68:d3:b0:b4:7b:60:17:32:41:6c:13:bf:
31:ce:8f:32:61:ff:1a:bc:66:da:c9:ba:ab:a2:39:
4c:89:21:d0:77:ba:c1:c8:87:68:26:aa:b0:fb:b9:
76:fa:f7:4e:44:ac:36:69:c3:ce:ad:61:a8:fd:71:
ed:68:40:fb:7c:7c:a6:8e:09:95:ac:1d:5e:30:c5:
b4:d0:d4:b1:dd:6d:c6:25:7c:6f:46:b2:b2:1f:85:
50:b1:08:60:b6:d6:85:af:b9:ed:de:9b:0f:06:03:
a7:7b:75:e5:e9:ab:6e:28:5d:52:76:1b:3d:44:9a:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:15:D4:BF:F4:B2:7F:EA:CD:FB:29:07:92:82:02:FF:13:63:B4
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:86:2d:a4:b0:a9:b2:bb:ff:a8:fb:bc:34:fb:27:f5:65:a3:
ab:0e:bb:27:7c:6b:7c:68:92:48:0b:1b:82:92:39:91:2b:90:
dd:d2:3f:8d:0f:71:56:71:05:71:d3:50:5d:ec:67:73:d9:d7:
b9:83:ef:59:e8:69:c3:f7:94:3d:c2:46:37:45:7f:05:d6:de:
66:90:96:2b:86:94:9a:b5:e9:cd:ea:e1:29:87:83:26:a3:58:
61:7f:bb:e8:22:15:ad:80:d6:79:f7:4b:bb:10:97:d8:21:a8:
8a:2d:8b:f8:5f:a6:b0:65:7e:66:8a:a8:2a:7b:ec:59:0f:a2:
b8:eb:7e:1c:fa:bb:54:d9:84:7a:e7:e4:9b:93:ce:ac:27:c5:
e1:8a:75:8d:7c:2b:32:fb:20:1b:38:7f:21:94:28:ad:0f:fb:
c3:92:4b:5b:b6:2c:c5:45:ce:24:48:0d:4d:04:77:61:38:d6:
1d:e8:80:08:b1:d8:0d:1b:8c:2e:e2:46:69:e1:41:c7:a8:51:
84:e9:d6:d1:3f:d3:70:44:9e:41:71:48:70:95:6b:85:ca:71:
49:6d:3d:ef:13:75:2b:6f:41:b9:8f:67:99:b8:70:60:42:00:
8b:fb:9b:58:9a:c9:ea:e6:48:4b:39:62:a5:bd:9b:2c:79:e1:
74:44:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:06 2026 by rpki-client