Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: N2W9LNxYzoRSfPEOhQV2DUZzDZdUKVeIx3Ya8KA0FPI=
Subject key identifier: 48:4A:41:30:D6:85:F5:8E:FD:DC:8C:22:E5:07:E7:63:AB:9C:4E:7C
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019D382E34D9832BB891F753B41A0376600D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1868
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: ht2qM7zv2TNCNe1/yJU7kRLAKb+AVPmkLRf0g2ZjCP4=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:34:d9:83:2b:b8:91:f7:53:b4:1a:03:76:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=484a4130d685f58efddc8c22e507e763ab9c4e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:88:4f:e0:65:79:e0:43:15:1c:b0:ad:24:
62:ac:ca:e8:f4:8b:92:82:cf:37:8f:36:f9:8e:78:
03:3c:ae:9e:34:65:2e:b7:50:0a:c4:f7:26:ba:34:
ca:af:a9:a8:eb:62:9f:26:a0:c1:08:a8:e4:35:c9:
ae:e0:8d:8c:73:4a:58:38:a3:de:b8:c2:85:2a:66:
77:8a:48:be:ef:c8:15:3a:9a:7c:8f:ba:9e:dd:3f:
a7:10:44:56:51:87:93:90:0e:95:bf:f8:6a:f2:55:
90:5b:f5:bd:bf:1a:d2:c9:7f:69:2e:d1:b7:e0:ab:
9c:eb:82:ec:9c:36:84:55:12:5c:c1:3f:6d:85:f9:
f3:72:13:42:78:2d:fc:38:ba:03:05:50:74:9f:9f:
f8:9c:80:05:f7:c0:1d:b4:ae:65:5a:4c:b4:33:b5:
d3:ff:59:6d:22:02:05:1c:2e:31:4e:0d:7b:ff:7f:
65:6a:5e:24:00:7e:35:9f:37:82:45:09:cc:48:6d:
61:e6:3a:b4:f1:ec:92:13:31:36:37:42:04:9f:13:
9d:54:cd:4c:f8:ad:12:39:64:26:c9:d0:d5:e3:95:
7e:c8:7e:a3:84:b7:30:52:ca:d2:f0:de:8a:17:39:
e0:e4:d8:2d:85:1d:4d:49:04:ba:a8:4c:f7:33:22:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4A:41:30:D6:85:F5:8E:FD:DC:8C:22:E5:07:E7:63:AB:9C:4E:7C
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a1:f4:5c:47:c0:ef:e8:95:34:2d:ac:1e:fd:35:08:be:86:
6e:02:9e:ac:79:dc:5a:7a:37:af:64:56:94:3c:c4:ba:33:53:
67:3a:e5:5c:6c:17:87:d1:ec:8e:10:4b:35:9a:a9:43:d0:25:
24:09:25:c9:06:5b:ec:8e:ad:71:57:f1:7c:77:48:46:e4:fc:
66:66:f0:93:5f:3b:e6:4f:83:a0:5e:4a:81:b0:05:2b:1c:70:
ed:b4:88:c7:c1:0f:3b:5f:d1:28:c8:76:b5:51:53:b4:ea:5b:
5c:ff:9f:06:6b:aa:de:7f:49:64:d4:78:29:d2:74:64:f9:39:
5f:a2:2d:81:26:92:8e:9a:12:d1:b4:16:9c:c5:4e:55:db:ac:
05:30:2a:4a:42:4b:25:a0:5d:3a:7e:6c:62:20:0d:ea:ee:e2:
e6:3c:8f:28:81:dd:34:e9:96:87:e6:85:51:da:ae:b4:09:41:
05:d9:ad:8a:5f:82:02:52:34:d6:39:08:aa:35:06:f4:b0:6c:
9b:ae:ac:8d:b9:da:0f:6a:33:d6:e4:6d:9c:15:e7:97:63:b6:
4e:7c:77:97:42:10:b4:e1:c0:b6:7c:f3:89:01:05:51:f7:73:
64:66:41:e2:09:f8:29:5b:46:af:f4:bf:5f:29:d6:1e:9e:a8:
77:95:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:10 2026 by rpki-client