Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json)
Hash identifier: Grn/pfdSIRgD+4hXoZ5qUdP2I6xDfWz0tLM1fTkhIz0=
Subject key identifier: E9:73:CF:7E:11:48:31:11:2D:7D:AC:32:1F:14:C8:2A:6C:00:2F:F6
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial: 019D38668D4AEA93D44029B59EC95E8790FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
Manifest number: 05FC
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: 6sa9q4Dov1lYR1zbGcSJqHuAACs.roa (hash: dZJcWFj8zVWM8Kfo82Oh4jZ+RxNvw0lQ3GRg+Xs1t18=)
2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: TrlrOK8J8FHuuRqnUlLRjX1GZ7mj21udenp/Ih/KKzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8d:4a:ea:93:d4:40:29:b5:9e:c9:5e:87:90:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=e973cf7e114831112d7dac321f14c82a6c002ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:35:e1:0d:97:8c:6d:1c:0c:68:dd:2c:9d:
17:75:1a:e4:e6:59:6e:1c:33:ef:88:32:ec:40:fb:
4b:54:4b:99:2d:94:6f:1b:50:7a:2c:4c:66:20:90:
e1:12:b8:0c:3c:9b:cb:4c:01:0b:90:dd:26:4e:38:
7c:e4:9f:4d:87:38:7b:d0:76:98:0b:9e:c3:6c:81:
04:59:b4:7a:0c:a4:a0:8a:7e:70:73:e5:60:78:e9:
01:76:c4:25:ea:20:fe:0b:7a:4a:15:c7:be:47:85:
a6:d8:21:dc:af:0e:61:cd:74:d8:f4:cb:3c:eb:2a:
05:dc:fb:28:f9:41:f8:03:14:21:32:11:5c:91:d9:
94:96:33:d3:b3:9a:05:49:b1:aa:23:cb:37:d6:8a:
6e:7f:4b:f7:40:28:93:41:70:9f:05:f7:61:8f:53:
f9:36:bb:ed:54:75:c9:63:a1:da:9f:2e:2c:fc:79:
9e:fe:e6:7c:c6:83:4e:77:5f:28:c1:50:ca:a4:25:
5d:fd:5e:35:ae:3c:50:70:a2:3f:4d:e4:6b:0b:8b:
23:78:e1:72:a6:f5:0c:0c:8e:8e:4c:3a:a7:ef:2d:
23:cc:88:6b:dd:0b:d6:cf:b0:7d:60:92:8a:5b:5e:
2e:69:37:22:67:78:5e:08:6a:68:f8:f2:eb:2c:4b:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:CF:7E:11:48:31:11:2D:7D:AC:32:1F:14:C8:2A:6C:00:2F:F6
X509v3 Authority Key Identifier:
keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4c:a4:1a:bb:68:ce:86:c7:da:95:99:22:ae:43:69:9a:b1:
75:f6:c8:28:e4:e3:81:73:72:67:c9:46:fb:81:9f:4a:a5:db:
cf:d8:ae:f4:b3:21:09:f4:ed:85:2b:1c:cb:bd:b1:80:26:af:
99:ab:1e:8c:cd:07:f8:0d:3f:d9:de:e9:70:af:20:e0:bb:04:
6e:24:88:e1:03:a5:ee:4c:a6:ac:05:42:97:7d:cc:2a:da:63:
7b:25:e4:17:72:e8:2f:03:fb:0a:9b:58:2d:a1:23:23:71:04:
85:32:b5:75:f4:38:0d:53:12:8a:51:84:15:55:2d:c7:8d:69:
e0:92:75:8f:cd:12:0f:85:44:9b:4e:da:3d:8e:52:6c:2b:48:
fc:9e:48:8c:bf:95:51:12:0d:dd:39:b2:b5:1d:25:67:95:43:
4a:b0:27:a0:c7:d9:6c:1d:d7:45:cb:75:c3:0b:85:24:3e:fc:
28:08:c6:38:28:89:7c:31:16:31:93:8b:55:8e:b8:3a:f0:b0:
67:17:2b:a1:a0:fd:0d:d5:fe:65:ac:e3:60:dd:c2:3b:f1:8b:
6f:f7:27:4a:2f:a7:12:9c:d7:e3:9e:e3:be:9b:8e:ba:ee:f4:
ef:93:0e:39:22:49:d1:2e:69:c0:8b:7d:49:41:db:d1:f7:41:
8f:94:3c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:50 2026 by rpki-client