Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: i+JKx2LwQoZHLuKIIgURHZZs7hR6x7VuhL7xturSJhQ=
Subject key identifier: 8E:67:A0:69:D2:4D:9F:B9:32:F8:DE:46:24:BC:FB:50:4D:91:C3:4D
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 019D38D345D0913149D0EB3FB315DEC07517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: 5gvppHvivcscRmJkd_-Ax4ZpaIk.roa (hash: Fv7SxnZFuKOYMVmrqeZiX9L2/02B+Ff1eXNebanWC4I=)
2: q07AwoeAHG6jHueO7q9HXMyxFjs.roa (hash: KbddfU+aGzifwawc6lQ9wXWnokH881+sm51JZkWk/6U=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: LHsbVlbhaNzLj4yQtyNRFkyimk5u/gaYs66ykveTAUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:45:d0:91:31:49:d0:eb:3f:b3:15:de:c0:75:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=8e67a069d24d9fb932f8de4624bcfb504d91c34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:e7:6f:4c:0a:36:28:de:34:b4:4f:64:ca:
3f:f4:64:32:87:c9:31:bd:2d:c4:cb:63:43:09:c5:
a8:34:4f:2d:f5:c2:d8:fc:34:6b:a4:54:af:37:d7:
53:2b:4e:3e:3f:8c:c4:b0:f5:9d:c2:2f:da:f2:4d:
2d:a7:5d:72:09:34:af:87:c0:31:31:1e:2d:da:ae:
85:b6:bb:59:cb:e0:3e:a0:a6:c2:dc:e7:34:84:c4:
5e:1b:e6:16:1e:b3:77:9f:50:60:a8:a4:ec:f8:8d:
c9:a9:16:c6:05:b8:4f:d3:47:48:e8:38:65:86:88:
ef:74:4b:21:58:dd:79:f9:c8:77:47:5e:1e:b5:00:
40:ec:96:14:88:25:29:75:d6:13:c7:a6:41:ae:7d:
3a:49:25:05:64:19:7f:e9:08:e9:b4:39:73:c3:b9:
57:41:8f:52:2c:ee:7e:f1:b6:f4:ac:da:43:d8:2b:
c5:50:14:f6:c3:b3:bb:ce:11:72:e6:db:6c:57:5a:
5f:bd:d2:ca:62:cf:19:8a:53:b1:96:69:13:a2:69:
3f:62:48:d8:66:c5:79:90:f5:e9:f4:4f:b5:2d:43:
0a:d4:e2:f8:b3:7d:3b:c5:c7:8b:53:2a:1a:f0:a1:
eb:19:7c:b1:c2:37:39:10:b1:e1:dd:80:a2:0b:b4:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:67:A0:69:D2:4D:9F:B9:32:F8:DE:46:24:BC:FB:50:4D:91:C3:4D
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:17:7a:41:eb:fd:2b:6d:1a:da:c5:05:e0:5c:75:e6:9b:
59:f6:91:02:a5:90:74:aa:bd:f8:60:35:ad:63:43:10:3e:6b:
7c:c3:fc:51:91:fe:73:22:7c:d2:12:b2:25:7d:c7:b5:ed:41:
90:12:e7:16:89:30:a2:8e:6b:eb:81:e1:b1:8b:49:3e:52:26:
7a:e6:3b:53:a3:c7:80:28:76:b6:c5:9f:92:e0:43:6e:af:02:
ef:e2:91:a9:dd:7a:95:b8:53:ac:63:e8:12:b6:c8:a8:1e:0b:
eb:db:50:62:af:3b:9f:9b:cc:cf:eb:22:99:d1:bd:9c:4f:1a:
d6:1e:d7:a5:23:98:9d:8d:43:89:9b:ec:95:ec:78:d7:96:ec:
5e:50:2e:0a:8c:6e:73:ae:73:68:05:20:39:a7:21:e9:8b:a6:
24:37:18:6f:4c:c7:5e:c2:a6:65:9c:92:f6:08:5a:f4:08:ea:
a2:09:69:14:e1:6a:40:17:bc:19:96:f6:9d:e7:fb:c3:ba:76:
96:08:e9:ab:cc:25:a0:c8:af:e4:15:a8:cb:1e:18:75:a1:22:
7a:8c:66:18:2c:26:cc:38:20:7b:ac:ed:d7:b1:56:69:11:f0:
e0:99:f3:09:52:71:3e:1a:ed:d4:86:d3:a4:44:92:d0:bd:3c:
fd:f3:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:36 2026 by rpki-client