Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: jhDUBuDxJzOrIQJn+3LB/RME2pEZJoTFjfNb5BsRJYY=
Subject key identifier: 24:78:45:58:9D:67:42:9C:2D:AD:69:0E:24:B4:CA:02:36:4D:18:A2
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 019D39413B544F0F5FDCB58639485DB8CE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: Wa2kwNzSv1d9csiW3b9trdwQ7JpVSX1PGyY2g0kijUs=)
2: q1-RUpRuUBWbVUTXhumFkZMtJE0.roa (hash: 3qe5W+9kAiScEd0vW+cxVBghgrjhqeOcbbAjhxWvcx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3b:54:4f:0f:5f:dc:b5:86:39:48:5d:b8:ce:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=247845589d67429c2dad690e24b4ca02364d18a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:9a:bf:fd:ad:22:00:c7:58:38:37:fc:d4:
0a:8c:2e:78:f6:3d:02:07:e1:42:e6:0e:74:06:7d:
b7:91:6c:74:f3:11:7c:ff:78:1e:99:24:30:30:f5:
6a:67:88:a9:14:4d:38:02:10:fa:63:db:67:35:fd:
90:8c:b1:3e:b4:43:15:ba:6f:73:87:86:7b:5f:ab:
81:63:e7:3b:a1:12:bc:2d:61:93:53:c9:37:fa:8f:
42:19:2f:ba:ca:b6:19:20:7f:61:59:6c:fd:c1:52:
59:ba:14:4f:20:9b:cf:5a:f4:78:06:fb:2f:84:ee:
4d:2a:d9:38:77:aa:e8:c1:85:9f:7f:30:aa:4d:81:
0c:a9:72:ca:28:e6:9f:28:d8:e4:a2:7c:92:60:b5:
26:04:36:0a:98:56:5d:5b:e1:11:75:33:99:dd:33:
81:89:d1:26:fe:46:55:7b:c0:55:03:c0:6d:d7:fe:
13:e6:10:39:f7:f7:70:fb:a8:3e:a6:14:07:ec:44:
a4:4d:d9:28:a0:90:d3:f9:b3:ba:2b:a0:cf:12:cf:
7a:38:9e:f6:ca:f8:86:57:9f:d6:1c:45:c7:29:d9:
84:36:2f:3b:6c:20:c1:f9:62:bd:a8:89:3b:74:1a:
6e:86:18:3b:fa:aa:e5:16:e5:0f:32:e4:e6:32:3a:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:78:45:58:9D:67:42:9C:2D:AD:69:0E:24:B4:CA:02:36:4D:18:A2
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:83:7a:37:63:7c:c5:50:aa:ff:d2:c1:13:7b:10:3e:78:19:
b5:1c:c8:71:e2:ee:fe:a0:c2:0b:54:0f:60:02:50:89:a7:ab:
a5:81:9c:f4:11:f8:cc:30:92:7e:82:d2:23:e0:49:1f:a1:0b:
c8:95:c8:c0:df:fe:8b:52:b1:b5:99:86:fa:40:f1:4e:61:4f:
6c:2a:be:77:08:86:02:27:17:30:bf:1a:3f:98:8f:4c:00:8e:
f8:d7:cc:8e:c9:83:04:8b:d5:ad:81:3d:43:7c:49:c1:55:d5:
fc:4e:f5:cc:0f:51:2c:a7:0d:ca:58:8c:67:50:13:d1:a6:41:
52:06:f9:a8:7f:6a:eb:e1:35:78:f9:2f:3c:6a:cb:a4:dc:0d:
27:5d:5a:82:82:ea:d6:0d:5d:dc:bf:2a:e1:dd:05:20:ab:51:
bf:d8:f7:6b:36:f3:a9:f8:59:6a:ad:f1:dd:9f:04:c0:77:88:
16:d6:a4:06:5e:66:4b:96:8b:50:07:f4:17:62:af:32:2c:7d:
36:0a:08:76:6c:77:1c:9f:e7:74:d9:cd:ba:0b:2b:5d:86:8d:
6d:bf:5e:8f:8e:6f:8e:8a:5d:fb:a1:13:f4:74:48:ec:eb:25:
e8:8d:a4:4c:25:68:24:e2:b8:09:1e:01:df:b8:76:4c:b4:96:
93:12:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:23 2026 by rpki-client