Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File: qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier: CPQs4LLSful0Ti6+KcBbEhlwrKYS3x0keCzOlaMIOAo=
Subject key identifier: CF:82:DF:A0:19:17:AD:46:98:9D:34:05:43:E8:FF:65:E6:B1:2D:3A
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 019D37C07692E01D36AFE98D393850346DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:00:53 +0000
Manifest this update: Sun 29 Mar 2026 04:00:53 +0000
Manifest next update: Mon 30 Mar 2026 04:00:53 +0000
Files and hashes: 1: IDJxz5Lf-bhA1wZBvX00WPWc418.roa (hash: jtojvMTm31S/WThDl0+VIPwens+k95gEp5w6ddEUhik=)
2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: TQzCvNScPlzbPbd1GUx1/RWQvQtJU4b8sDg34hRSiCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:76:92:e0:1d:36:af:e9:8d:39:38:50:34:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Mar 29 04:00:53 2026 GMT
Not After : Mar 30 04:00:53 2026 GMT
Subject: CN=cf82dfa01917ad46989d340543e8ff65e6b12d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:1c:30:91:82:12:21:ce:67:34:c6:c8:28:
85:30:15:66:b1:8e:ec:a9:09:4c:b8:ec:d1:97:43:
c8:ec:2a:c0:83:23:64:9f:6b:b0:41:e7:55:ea:0b:
23:59:18:0c:5c:6f:69:79:45:03:e0:89:1c:ad:d8:
30:ad:6a:b7:0e:67:c3:fc:72:63:88:22:60:5a:e8:
d9:44:5c:ca:51:da:dc:0e:fb:58:65:8b:6c:b3:0a:
b3:6e:4a:00:7d:10:5e:0e:f9:9d:52:c9:96:0e:16:
fb:14:90:47:52:8e:df:e9:e0:b2:a9:4d:93:7e:60:
58:85:d7:62:c6:b8:f5:d6:f1:3a:f2:7e:ae:fa:ba:
ee:83:6a:13:75:8b:32:a0:bd:3d:8c:30:62:73:7e:
a2:34:b7:2a:1e:d8:2d:ab:14:57:ae:4b:89:13:3f:
7b:fd:b4:1a:69:30:1f:08:f5:05:d6:34:9e:b5:c8:
53:f8:40:04:e8:bf:c7:f2:8d:c9:d8:36:a3:bc:88:
4a:1b:c1:51:b0:bd:d8:87:cb:0f:3e:50:c2:25:c8:
5a:2f:67:e2:cd:c0:2b:d0:2d:4e:5d:db:a2:cc:5a:
6e:65:c4:77:eb:f6:37:1c:80:cc:a8:7a:ac:8c:21:
e4:6e:54:4e:64:36:af:c2:b7:17:42:3a:78:97:1a:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:DF:A0:19:17:AD:46:98:9D:34:05:43:E8:FF:65:E6:B1:2D:3A
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:a2:6f:e9:de:60:8a:63:ff:82:f1:b4:d4:88:43:9b:fa:
57:a6:a0:5a:7c:8d:a5:dc:e2:7a:a6:c5:6a:67:41:24:9e:d1:
a5:26:3f:7c:a5:78:b4:a9:de:c0:d4:f4:a7:e2:ea:2b:39:54:
99:64:16:a4:4c:55:31:79:5f:22:d5:1a:ce:9c:f1:81:b5:75:
e9:8e:bc:62:a5:dd:48:15:29:de:6f:f4:1c:73:f3:db:77:f6:
35:57:45:56:b6:eb:c3:68:5a:ee:aa:43:b8:de:0e:48:52:46:
66:ba:d0:86:7a:7b:37:a6:c3:d6:59:7a:92:96:35:93:42:bf:
10:36:9b:81:18:e4:82:a6:23:e9:45:98:2b:d2:1d:09:11:0b:
99:aa:2a:f8:d8:c1:e2:4c:d5:35:1d:0c:44:c9:f1:80:85:d6:
d6:7c:0a:43:de:b5:21:69:01:f8:1f:4a:b6:3b:14:ae:78:21:
d2:c1:58:a7:af:34:d1:ca:15:54:7a:37:45:ef:59:53:dc:0d:
df:c0:fa:97:f2:d8:6f:4f:cc:dc:b2:63:5b:f1:83:c9:ed:29:
32:cd:c8:cb:ca:f7:e0:d9:be:fc:30:46:df:01:15:cd:55:d6:
71:15:84:50:6c:e5:e7:04:9e:7f:5e:89:49:88:d1:7b:1e:9d:
5e:95:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:10 2026 by rpki-client