Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File: rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier: Vl2bXEh8b5ciZPsO5+KqY5xLNUIbPqb0I/D2hmP6VYA=
Subject key identifier: F9:13:27:65:F5:3F:D2:4E:79:06:E3:41:FC:74:21:40:55:65:88:94
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial: 019D3A1C5E77F23C3B0F520456C35C3CDA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number: 0355
Signing time: Sun 29 Mar 2026 15:00:30 +0000
Manifest this update: Sun 29 Mar 2026 15:00:30 +0000
Manifest next update: Mon 30 Mar 2026 15:00:30 +0000
Files and hashes: 1: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (hash: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4=)
2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: SKr4eMa41qqq3UCXt6FDjcdYmqfQFy7eSA8o5EDGD10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:5e:77:f2:3c:3b:0f:52:04:56:c3:5c:3c:da:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Validity
Not Before: Mar 29 15:00:30 2026 GMT
Not After : Mar 30 15:00:30 2026 GMT
Subject: CN=f9132765f53fd24e7906e341fc74214055658894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:aa:6a:48:42:f5:c5:ec:02:f2:19:41:45:
6e:03:9a:73:9a:ae:65:ae:7b:9a:e3:9a:b1:b4:55:
fa:55:96:3f:57:ab:19:05:e2:f9:2a:83:77:70:4f:
72:f6:ab:ed:ba:54:7e:83:b1:bb:da:cd:a0:99:80:
91:69:c3:f3:5d:9c:d5:d8:0f:c8:56:bd:62:de:06:
f6:69:8a:3b:62:59:76:2b:25:1b:db:fc:73:39:7b:
1a:a2:9e:7c:8b:3f:dc:f1:1d:6a:2b:53:7e:e3:af:
bf:0f:4c:58:97:38:37:9b:9a:ce:98:23:79:e1:26:
3c:5d:3e:e8:31:29:f4:17:6e:a3:15:62:47:79:b5:
04:fc:3b:df:71:26:4a:d1:de:4d:8c:1c:fe:60:ae:
d5:48:61:42:5e:dd:27:a6:f2:97:e4:c1:04:a6:9e:
ee:48:6a:bf:85:b7:62:8d:5f:3a:42:da:35:7f:ec:
92:91:75:ed:e4:21:79:16:ad:d2:58:6b:d2:2a:23:
b5:27:4e:27:f3:64:f2:34:5d:27:8f:85:1a:83:02:
90:64:5c:90:cf:6c:3b:cd:16:30:83:83:f1:05:c7:
42:42:ed:bc:61:4c:b0:9e:38:34:9f:b0:07:b8:16:
10:8a:03:c3:72:dc:6a:7e:53:a0:b8:22:8f:dc:50:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:13:27:65:F5:3F:D2:4E:79:06:E3:41:FC:74:21:40:55:65:88:94
X509v3 Authority Key Identifier:
keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:51:48:b7:bf:6b:44:a7:7d:cc:56:54:ec:30:64:ff:16:27:
b0:eb:29:1f:f5:2e:b4:90:c4:4b:7a:ef:16:b1:01:28:e9:cc:
93:6f:24:47:fb:a7:53:11:bc:96:e7:d9:31:33:b9:0f:fa:ec:
00:eb:2b:ee:7d:35:cf:3e:6a:e4:9a:c7:5d:90:39:50:12:99:
5c:19:c9:72:50:f2:80:ed:4e:a3:fd:48:a0:61:25:07:3e:66:
77:3d:57:b4:b2:b8:24:a9:09:57:08:2e:15:b7:47:3e:15:99:
b1:65:0f:69:9c:97:d7:02:8f:88:f8:66:39:e4:84:dd:59:03:
4c:0b:f5:17:92:8e:90:49:2a:09:3f:68:9d:6e:fa:f3:51:41:
03:84:a7:7f:c4:7c:94:e4:f0:ee:68:57:91:76:1d:fb:9e:ee:
20:6a:45:82:1b:8c:fe:2f:b2:58:e8:9e:a3:79:86:e2:e6:14:
c5:d6:6d:55:29:0c:da:8f:b2:50:5a:2a:33:ae:d5:9b:07:21:
e1:bc:02:1c:fd:29:a6:19:79:25:22:0d:55:46:42:75:03:dc:
dc:bc:5a:6d:84:2d:c3:e0:6c:66:42:89:8a:8c:c5:2a:27:09:
6f:f9:29:9d:38:42:b1:01:78:22:f0:a6:cf:5c:40:b0:6b:8d:
a8:c0:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:42 2026 by rpki-client