Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: /JxGxxkIvNaA7pCz26fm60xOFqm6p2/95YSMSY7X+bU=
Subject key identifier: 32:60:A7:09:32:57:DE:41:42:92:0D:8A:34:97:D4:1D:CA:FD:44:6F
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 019D371BD1CE055B68C88FDB6EB6C0B6E27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 1658
Signing time: Sun 29 Mar 2026 01:01:03 +0000
Manifest this update: Sun 29 Mar 2026 01:01:03 +0000
Manifest next update: Mon 30 Mar 2026 01:01:03 +0000
Files and hashes: 1: brwHnJn9j349deS3lmnqCOoNhq8.roa (hash: m2Te8mjf6FkoLB1a3b50ZNfCC4MLvjshErjN5GPxq0M=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: +ouFETt1/ZrBlRJ3Xr7OIth8wB4DtJ4kcRQzoOiooYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d1:ce:05:5b:68:c8:8f:db:6e:b6:c0:b6:e2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Mar 29 01:01:03 2026 GMT
Not After : Mar 30 01:01:03 2026 GMT
Subject: CN=3260a7093257de4142920d8a3497d41dcafd446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:39:f9:6b:83:23:20:fe:30:e5:d4:6a:67:
bb:0e:11:b6:e6:7b:0c:c1:b3:d7:60:e2:99:6f:b0:
51:a2:99:9d:0a:8e:82:cd:4b:2e:25:b2:db:f7:78:
85:84:2d:51:c2:df:91:e4:8d:c1:cb:88:92:23:f2:
c2:82:dd:ea:8a:86:04:3c:71:be:3c:48:54:c0:95:
b6:77:dd:ac:1d:13:ef:86:d2:a6:1d:db:5a:75:af:
8b:83:98:ae:9d:c3:27:a9:bd:69:ae:ed:39:6f:7b:
15:33:92:32:d3:6a:76:31:d3:9c:57:09:1e:da:25:
7c:ce:4e:ca:ce:be:6b:ba:69:b4:20:70:f6:db:65:
a5:08:69:4c:83:7c:57:73:18:5e:c9:a5:c7:8f:90:
82:a5:f0:27:c7:83:90:02:fa:55:95:e5:5e:b5:e6:
13:6a:6e:d1:bb:70:33:7e:fe:e0:64:ef:86:1d:98:
df:77:9f:13:35:1d:cf:a1:c2:22:f6:97:f1:40:84:
61:e8:80:24:29:f1:a0:bb:a3:e1:f4:b1:d4:b0:e7:
dd:a9:26:9a:ad:66:20:25:8b:09:a8:c2:95:8b:40:
6a:3a:65:1c:5f:1c:af:24:b9:38:24:53:dd:7d:d3:
a0:1c:a6:ad:44:89:a8:c1:a7:09:97:cf:fa:a3:82:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:A7:09:32:57:DE:41:42:92:0D:8A:34:97:D4:1D:CA:FD:44:6F
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ad:de:09:33:4f:3e:46:1b:ae:ad:29:bd:b4:d0:f4:4b:1c:
c1:40:46:67:ce:e0:1f:81:dd:39:33:1c:96:b8:a7:5d:5f:19:
80:f2:90:fc:55:b4:a0:f8:16:24:91:71:f4:25:a0:18:6f:d2:
41:6a:f3:3c:af:a5:ae:5e:82:0d:14:55:5a:f6:35:ae:7e:a7:
6c:94:7f:43:24:a7:b1:78:f5:ab:66:21:2e:a1:0d:47:2d:2c:
b5:de:e7:4f:ff:90:ae:43:ad:4a:a2:1e:e6:67:47:62:8e:67:
d7:60:71:4f:e6:83:53:8b:07:45:f7:3f:98:0a:e9:fe:00:ee:
51:ea:3f:7d:e5:45:cd:ff:21:11:2a:c2:a8:f8:6c:89:92:65:
9c:bf:04:11:1f:da:86:12:82:98:53:e0:f6:28:c2:35:d1:01:
21:a9:d5:3f:28:7a:f3:a0:3b:b0:6b:47:d9:56:91:85:ea:93:
55:fc:78:17:2b:de:75:54:fe:95:2c:0b:54:62:4a:76:ec:64:
3a:70:65:7f:f1:bb:9f:23:c1:ce:76:94:8e:f3:98:fb:24:3e:
ad:45:d3:35:5f:db:82:13:de:02:83:cc:79:04:be:95:d1:4d:
f0:42:c0:ca:dd:84:0f:82:f8:e1:77:2c:88:e8:97:f0:90:03:
2c:80:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:48 2026 by rpki-client