Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
File: qreGFvOzntSCDQTOCY6nwgZVMUs.mft (raw, json)
Hash identifier: iJ8BV6bCHaUGG4iWLr1M03rVymRLYOsoFy5HZrCW0/0=
Subject key identifier: 1A:7C:2D:D8:14:10:1D:9B:06:89:A9:8F:CC:FD:17:6E:13:1A:14:47
Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
Certificate issuer: /CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Certificate serial: 019D38D2961DE9CBC695DA1E162464B8BC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: qreGFvOzntSCDQTOCY6nwgZVMUs.crl (hash: zq0R3/pzKVhXBWdjhpRxGE4QcNFeUaXKyCJ/pzyccFc=)
2: zEwISNAn9YCW0Wsdm5RUCpSTUKM.roa (hash: pK2Nt8VgUMcXHhwtUp37qnY4MdMfrXTVdUqLGk4kB7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:96:1d:e9:cb:c6:95:da:1e:16:24:64:b8:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=1a7c2dd814101d9b0689a98fccfd176e131a1447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:ac:82:61:d7:95:d6:3f:63:db:37:21:8c:
d5:b2:81:9c:10:7e:fa:fc:b1:9d:41:25:b7:54:0c:
64:11:2a:87:ca:74:b5:e0:7e:9b:e7:ec:9d:8f:7d:
09:c2:b9:2c:7c:28:4b:60:f8:b1:a1:68:b1:8f:a0:
20:31:52:f1:bb:36:5f:da:c6:36:1e:02:33:62:d3:
04:a2:f2:22:d8:04:90:13:47:2c:6b:e3:bb:80:4f:
01:12:21:3e:22:32:fd:f1:4a:0a:fd:88:4d:60:c6:
4b:14:83:35:91:a6:2a:1f:00:33:be:94:69:26:bf:
71:5b:ea:28:35:be:47:7d:b7:65:97:fe:a1:dd:1c:
d7:72:b7:76:7f:7b:b9:81:e1:fa:f8:11:44:c8:9c:
2f:d0:86:94:a5:4c:db:81:08:91:83:e5:7b:49:7f:
c1:1c:c2:af:2b:ad:09:38:22:39:9f:03:01:5e:1c:
98:04:07:f7:62:61:36:c3:0a:1e:a7:05:6a:a9:bd:
4e:83:b7:94:46:7b:9b:87:d8:56:e2:ad:d0:51:b4:
18:47:ea:d7:a7:11:34:f8:e5:67:ba:af:e1:03:fe:
05:4e:c2:3c:6e:a2:d2:61:13:63:d4:b4:69:e5:1c:
40:d9:b4:0d:8b:57:41:6b:d5:68:bf:5a:d0:8f:55:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:2D:D8:14:10:1D:9B:06:89:A9:8F:CC:FD:17:6E:13:1A:14:47
X509v3 Authority Key Identifier:
keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:63:5f:ac:bb:04:08:9c:04:fb:3b:ad:ce:6d:d0:9c:ff:c7:
d2:0f:4e:49:5f:a6:73:2b:98:5c:80:c6:b2:df:07:09:bb:aa:
1e:49:49:d4:58:70:fe:4f:2e:9e:6f:88:26:c6:ff:a4:81:37:
10:a9:c2:bb:0a:3d:8d:e5:c1:2d:6d:78:09:c5:a5:07:63:d6:
af:82:a6:48:f4:67:d2:96:f0:ea:b3:9a:fe:d8:2d:2b:59:d6:
36:d4:db:27:6c:49:a2:d5:f2:b6:42:f0:d0:0b:26:b5:f7:6b:
bf:8f:8e:5e:f8:aa:29:6d:3b:16:6f:55:c2:d1:27:83:36:9b:
a1:d2:5d:ae:46:21:d1:32:ec:eb:53:5c:6f:2d:4f:28:f7:d8:
b4:b1:69:b8:ca:de:12:1a:0a:7c:c7:ca:8d:db:d1:92:fc:de:
ab:b9:40:b9:3c:39:f0:e6:75:0e:ef:ce:f7:78:4a:b8:35:38:
7d:43:bf:50:98:37:98:85:9d:23:95:fa:a7:83:76:c2:1a:0a:
8c:60:f8:82:d3:ad:6f:99:07:53:43:ee:23:5e:13:07:21:38:
e8:9b:a9:64:5a:30:26:b2:d1:2c:7a:75:57:60:b3:bd:a7:74:
8c:38:b7:66:09:99:34:ae:86:92:12:5d:b1:45:4e:a2:47:fc:
83:51:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:58 2026 by rpki-client