Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: 73f8AVTrKzN16pcvUYTdYc3iONPMeB+J36NOGqBnfwg=
Subject key identifier: 30:29:DE:8D:6C:71:2C:DA:65:A1:7D:C4:D8:E3:CD:47:C5:2F:CB:FC
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 019D37897ECAFEE80F0A5A64D8DD962BEA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: NMKwSUUrM8k8eQKWjQoXhVr67Q0.roa (hash: CYXCafl1+25dso4rJFuju+aK/xutXRo5p4nK7eGdbTw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: 71ecIIyuY++hauz/2gzRKBMJTAmm8w4NaeycJ4Jjckk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7e:ca:fe:e8:0f:0a:5a:64:d8:dd:96:2b:ea:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=3029de8d6c712cda65a17dc4d8e3cd47c52fcbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:98:fc:09:04:f2:2b:37:62:fd:39:56:15:
41:f5:5b:71:ea:7f:5d:16:86:c1:c3:96:7a:58:99:
23:42:7c:9a:fa:61:f9:f8:58:dd:42:7f:47:5b:98:
13:04:58:63:21:ff:1b:86:db:81:84:b7:67:2b:99:
43:aa:96:16:d7:7b:81:2d:c6:c5:d6:75:a7:0c:bc:
c0:a2:a5:1a:1f:7c:f0:30:f9:21:6f:17:53:86:91:
37:0b:66:21:a4:b3:b6:7f:3e:ac:01:d3:3d:70:2f:
d4:b4:8c:38:04:bd:5c:28:82:65:36:05:8f:51:22:
23:96:26:72:7f:fc:d7:13:f3:3f:a6:8a:94:80:b7:
b3:15:11:65:f4:af:79:09:12:5b:fc:3b:5d:d2:15:
22:cf:b9:f4:65:0f:a7:67:62:56:ed:e2:8e:46:29:
49:0c:4a:8e:07:f3:f6:cc:58:a5:7b:a8:90:0c:0e:
69:aa:fd:ab:20:06:94:d4:e7:b8:c7:ca:85:a6:14:
65:c2:1f:c8:70:20:ce:0e:54:0f:6c:5c:57:9e:d7:
94:8e:ca:be:11:70:18:8e:62:9a:df:4c:65:0b:0d:
fc:16:30:78:e6:65:9a:87:cc:88:d6:f5:d9:4b:0b:
79:0a:bf:9d:24:49:2e:34:1e:f3:00:8f:e4:67:cd:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:29:DE:8D:6C:71:2C:DA:65:A1:7D:C4:D8:E3:CD:47:C5:2F:CB:FC
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:95:db:f3:5b:59:c9:f7:9c:e3:ef:4a:62:fe:18:41:33:29:
f1:9e:91:69:47:e0:fb:4e:b9:01:32:79:89:40:0e:81:ab:65:
93:a6:28:80:23:e1:ad:c0:b1:75:bf:a6:71:d3:da:f4:15:2b:
06:c9:0d:c5:0e:9e:35:b9:08:59:7b:b7:74:65:a9:d0:21:38:
99:21:e0:ce:fb:6b:8e:69:45:2d:a3:67:b3:a7:50:8a:a1:f4:
57:c3:80:ec:75:1c:08:4e:7c:38:a3:19:85:ca:79:9c:36:fa:
ef:e8:1a:04:bb:40:6b:8e:d7:40:5e:8d:00:78:1f:83:d8:f6:
49:91:2b:a7:ce:f1:28:85:91:d6:94:73:56:d7:2b:c3:c1:90:
33:c5:3f:f4:de:6f:79:5f:45:02:e6:80:72:21:70:74:ed:74:
80:3b:11:b7:2b:26:34:fe:32:f8:a4:ef:58:7f:7f:52:2b:99:
44:96:ca:16:55:cd:2a:fb:7c:25:99:eb:4b:d3:77:ca:f5:0b:
dc:fd:03:92:e9:dd:00:1e:7d:14:77:a8:2a:d9:c1:c6:08:06:
92:44:e6:5d:34:46:62:4b:42:56:38:34:41:d0:ab:c6:ea:83:
a1:d0:9b:c1:2e:af:85:76:bf:1c:13:bc:c3:11:ce:fc:c6:2d:
c3:72:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:42 2026 by rpki-client