Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: J+6/kPHphpyh/C/AqqUBrrDmo9EnGClKiIXhU/oMouI=
Subject key identifier: CA:54:18:60:86:54:3D:03:E0:01:29:02:E1:2A:45:E9:3A:A9:CC:40
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 019D39AF5674C79791EBE2BDB2919D9E6830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: HyQmJzqnKNsyI3fs8wsXXo5JYlA.roa (hash: K4YLNNf5d2hU3VOcsfWG70mXY/0b7/Wb9z62jzKngps=)
2: kJXa9fRydrgc3PEgKj6e_ZPgJOw.roa (hash: vXw4a1fcUv1ExZN3oTfaxQy9guZhkfoKZDMFzMPNNx0=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: PefT8NoINO7I6LSkCGXoaO3GiFlTRKn7xSSvh6Tyn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:56:74:c7:97:91:eb:e2:bd:b2:91:9d:9e:68:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=ca54186086543d03e0012902e12a45e93aa9cc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:a8:8b:e9:ab:5a:fd:7a:c1:4e:7c:05:e3:
41:16:df:3f:bd:f5:49:7f:c8:04:9a:9b:64:3c:79:
78:d7:bc:6a:7e:86:4b:a7:a5:e0:2f:f8:e5:d4:8f:
ba:b2:0c:98:7e:70:eb:4a:c9:a0:53:94:60:b5:f7:
ae:11:25:0b:4e:d1:0b:20:c2:6b:54:e7:43:64:ad:
ff:6c:94:69:30:b4:61:6e:a8:62:4e:bd:47:dc:50:
e6:b6:12:22:56:b1:41:c9:e9:3b:d9:38:33:5f:95:
7b:7a:2c:de:b8:1c:ff:bc:4d:a9:de:fe:39:e7:55:
31:27:fc:c0:d3:fc:68:1e:97:11:9d:69:b6:d4:7b:
75:31:df:65:14:94:38:5f:a3:9f:6c:bc:ac:13:c1:
0a:fd:55:fc:94:ae:d4:45:18:49:9e:a4:26:c6:40:
87:7e:bf:00:99:90:2b:7d:1d:2b:30:69:01:89:f3:
54:89:e2:fb:7a:f9:81:e7:50:00:b7:09:b7:2e:2c:
1c:7e:a5:f0:42:ec:c5:de:e8:07:77:80:14:31:9e:
d8:c2:36:69:7d:f5:53:c6:bc:da:78:e8:5c:50:62:
48:12:a9:1b:23:16:71:4f:f2:82:25:55:85:cd:64:
d7:6e:89:6c:5f:b5:ed:67:73:e9:36:c0:13:e6:a9:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:18:60:86:54:3D:03:E0:01:29:02:E1:2A:45:E9:3A:A9:CC:40
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:eb:50:45:9a:c3:95:7c:18:e5:c5:a0:e8:f1:c8:55:e7:76:
df:a1:db:db:59:a5:1c:d0:dd:48:b4:aa:9d:cd:fc:a0:9c:65:
4c:c6:ee:04:18:13:75:db:75:e2:4f:8d:e7:59:07:ee:bc:a5:
70:e6:62:e7:f8:79:7a:2c:c7:64:97:e1:83:cd:44:2c:9b:fb:
b0:9e:3b:52:7f:be:0a:91:d7:49:9f:89:fe:43:f5:61:93:5c:
a0:a9:8d:aa:96:ff:dd:c6:ed:5d:71:53:7a:3e:23:2e:cc:ef:
93:92:fa:3c:97:e8:7a:6a:76:df:3a:95:ea:b3:c2:98:e1:50:
e6:a9:14:8e:01:9f:6b:19:3e:11:04:a4:ce:14:89:65:af:33:
1a:4c:0b:8b:ee:bf:f3:5f:1e:bd:94:a6:0a:a7:8f:97:23:28:
fb:f3:11:9e:43:5b:15:8f:82:77:b4:72:31:b4:84:6f:4f:7e:
7d:31:42:02:8f:5a:6d:cd:1b:09:65:21:b5:f0:48:05:6c:2f:
4e:c1:41:1c:24:fd:7f:04:64:74:d3:09:63:04:eb:7d:d0:18:
ca:28:03:8a:b5:53:10:bc:59:8b:1b:54:7d:a7:ff:e6:c4:5f:
44:ac:d5:a8:a5:07:a2:25:a8:05:a4:59:83:cc:95:c1:3d:5f:
13:a7:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:09:41 2026 by rpki-client