Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier: 6axbJa/Rk+mX/S0QveC8mLXI2/tCxrpyX9+U60ghf0s=
Subject key identifier: 9A:88:CA:B1:8B:B1:F1:0A:09:1B:12:E0:D4:0B:60:3E:86:A3:BC:CE
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 019D390A016BAF1A76F4E598D0132A81448F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number: 17F7
Signing time: Sun 29 Mar 2026 10:00:50 +0000
Manifest this update: Sun 29 Mar 2026 10:00:50 +0000
Manifest next update: Mon 30 Mar 2026 10:00:50 +0000
Files and hashes: 1: BvtEp7ZykJYdaMqo7blsUuKtvPY.roa (hash: JWrGFKwI8ZmYJkc5AseOHeCw/Nb3xRt6/+xGW3jCg44=)
2: d9IYgCb4O0zZISXP4tK4QuK4cvs.roa (hash: jBG8EC6qVRrjvDS0o4yvkb3drCofFVHmM9LgSbzRM0s=)
3: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: ggKnw3ul2H19E5ydVc8MhQ09OwLn+2Y5Ol3weOeBAGQ=)
4: zKQ09Wpk_sKjI1YhqBd22SglJPI.roa (hash: sGEPj5oiG+Z1hsWttL/M7GZNmLLDhgxlhH4HT0fE8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:01:6b:af:1a:76:f4:e5:98:d0:13:2a:81:44:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Mar 29 10:00:50 2026 GMT
Not After : Mar 30 10:00:50 2026 GMT
Subject: CN=9a88cab18bb1f10a091b12e0d40b603e86a3bcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:09:d5:7c:70:99:65:47:9a:eb:73:24:10:
50:54:88:fc:da:b4:a3:26:07:5e:76:04:52:c0:37:
a1:8e:0d:92:22:74:36:51:11:25:38:50:a9:e0:78:
a3:72:2d:b7:bd:38:c1:fb:c8:dd:88:10:86:56:11:
d2:75:c9:fa:db:8f:60:7a:ab:a0:a5:86:bd:1a:04:
f4:84:31:c8:cf:cf:d9:70:9b:a4:a7:b2:2a:cb:f9:
01:8b:10:a8:8a:99:33:10:77:de:97:70:b4:f4:a3:
2e:62:48:a7:37:75:df:33:0b:7d:04:c7:d0:60:57:
9e:08:48:e3:4a:34:55:0d:71:f4:76:90:e4:90:76:
62:09:5b:96:ca:c4:f0:b2:f0:22:1c:e1:93:28:17:
7a:3a:37:aa:a9:29:c9:eb:ae:1d:7b:8c:3c:7d:0a:
6e:bd:1d:85:fd:18:be:47:d2:bb:9c:4e:02:14:6e:
98:01:8e:09:0f:15:fd:9c:ad:f3:77:34:22:70:b6:
d7:cb:71:c3:2e:cb:ab:e4:7e:44:4d:f3:0f:11:59:
96:f0:5c:e1:8e:ab:b7:ea:b0:50:29:53:ae:5b:db:
be:3e:83:72:29:ec:55:84:75:7a:cb:83:e5:50:23:
cd:42:0c:ef:8d:59:0c:35:bc:65:7b:d6:2f:00:8e:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:CA:B1:8B:B1:F1:0A:09:1B:12:E0:D4:0B:60:3E:86:A3:BC:CE
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6e:35:39:b3:ed:40:17:be:5d:a4:84:46:35:ac:a3:2b:65:
48:9f:4c:41:d4:78:1a:a8:d1:49:8b:86:0d:9f:60:11:db:db:
12:b7:08:9b:6a:29:8f:14:d1:5b:dc:21:3c:59:96:09:00:d6:
55:59:89:30:00:de:07:a3:78:80:09:9a:e4:44:7f:ab:5a:23:
e7:f5:ab:a5:d5:83:cb:4c:5e:30:96:6f:a6:bb:43:d8:d9:2e:
ef:dc:10:d4:59:83:f3:c4:95:57:52:11:b5:6e:f0:67:d9:df:
e2:30:78:f2:8f:2e:16:5c:f6:09:13:f4:fe:6c:91:94:c8:f5:
41:17:92:83:88:e3:8c:53:8c:94:a9:98:61:c8:59:10:2a:39:
74:a5:a4:1a:ea:c3:bc:79:73:b5:cf:f4:4b:f5:e9:2b:cb:b9:
00:47:f9:9b:0b:e6:ee:b4:ca:17:b6:2b:f3:f3:6a:97:08:fa:
26:63:79:3a:90:f1:44:af:14:fc:d7:b7:c8:85:2f:3f:30:7d:
fa:c4:1b:2b:ec:eb:21:ff:a3:a4:82:aa:cc:9a:a5:e7:2d:6a:
a8:2c:23:e0:94:df:62:cc:48:1e:c7:57:a2:50:17:99:ea:3e:
ba:5d:1c:b3:d2:eb:78:0c:99:d9:0f:ef:2f:4b:91:e4:33:c8:
3b:da:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:54 2026 by rpki-client