Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: R/jULbV47uSTIbASygyZeuo1t4HBxaA0Hktlj2kAGUU=
Subject key identifier: 14:C2:65:01:3A:50:A2:F4:32:D8:3B:F9:54:83:DC:E3:57:41:32:D5
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 019D38656CD45FBC41E691C4FEF47507B8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: 33AkLs4T5_ew6mnnyWq5Pd5URH0.roa (hash: D7jZ0XkJNtIAmG30h9W8QSsDeq/g0BH6iSc+/oPyUco=)
2: HnCge9v0VMFv4p4n7gbHmPrHGJY.roa (hash: d62k4x4IFTUWXOO9eicQRIOUN/u5FXiup6Gnw1Q4kpc=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: cc1W4ZGhNv9Z6SqNixKMyZ68nkhBZXK84QV6GmgMaow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6c:d4:5f:bc:41:e6:91:c4:fe:f4:75:07:b8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=14c265013a50a2f432d83bf95483dce3574132d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:f0:71:d4:21:80:f0:dc:f6:60:b7:bd:bf:
c3:3f:5b:8e:75:aa:05:b6:73:26:43:bc:18:be:9f:
85:49:df:49:3a:f3:f7:16:51:f0:25:12:a2:77:b7:
01:93:72:90:5d:f8:79:5c:fd:95:bc:67:68:26:1a:
8a:7a:68:60:77:06:26:b9:23:4a:3a:fa:fb:d3:95:
a1:2b:75:a7:cd:cf:d5:87:0d:d2:a0:8a:f9:55:af:
9c:92:10:b3:bc:38:78:ce:af:b7:91:5d:ee:75:2e:
8b:b0:3a:8b:f1:11:41:8e:75:35:9f:e0:6e:29:3b:
ff:10:79:1e:59:2e:34:25:b6:dd:5b:a8:a0:66:cd:
0d:9a:1a:f5:78:55:c0:d7:c7:ca:fa:98:d3:c5:cb:
13:e2:53:f9:7d:09:3a:e4:f3:78:8a:19:64:f4:5a:
d0:9a:fb:60:43:55:3b:98:c3:a0:2b:a1:91:06:e8:
a9:bd:8b:e3:da:16:1c:86:66:cc:64:67:c4:ff:4e:
5c:93:e7:21:f6:fc:5e:26:58:04:07:4a:51:cb:e9:
9a:63:56:a9:57:a7:fe:4f:db:74:4d:44:ea:1e:dd:
d8:c7:d0:f3:58:9b:b7:39:96:16:de:bd:51:c1:54:
fd:d1:88:34:ae:f8:55:55:10:89:af:e1:3c:bc:3f:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C2:65:01:3A:50:A2:F4:32:D8:3B:F9:54:83:DC:E3:57:41:32:D5
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:df:98:72:0c:5c:5a:f0:a8:6b:b8:f2:14:bb:d2:d1:e1:d1:
86:89:f0:20:40:8d:4c:d7:8e:42:b9:49:bc:d2:43:77:ee:a7:
67:d2:5d:97:52:4e:2a:4c:4b:ad:30:39:2f:67:be:57:4f:71:
2e:fb:90:69:b8:a2:4b:c7:fb:a6:27:fa:af:36:d3:6c:3c:ae:
a6:b3:53:b5:a6:e4:de:ce:5f:47:68:4b:39:25:7f:26:4b:de:
57:99:f7:25:2e:de:5d:12:49:d5:a8:34:4d:1e:a2:49:50:42:
dc:7f:46:15:3e:bc:34:31:01:40:ad:b8:1d:fa:49:25:ab:31:
72:34:32:3c:bb:91:16:70:0a:90:5f:2b:12:3f:d9:ad:6e:ae:
ac:65:92:74:d6:b6:f5:fa:0e:4a:5c:47:15:bb:c7:0d:52:7a:
0f:2a:76:9f:b1:46:ea:14:60:f1:ea:e6:88:1b:90:19:34:0e:
37:eb:88:e3:a4:ac:fa:2f:7a:e8:c6:ad:df:25:5f:45:a8:56:
e1:ed:95:fb:f3:24:70:62:ad:3e:20:8c:83:b1:94:34:8f:7f:
3f:62:16:1f:f8:dd:74:72:15:a0:d1:ea:67:4c:d4:36:c4:0b:
02:5c:6d:1a:29:12:4e:b6:82:b1:ea:1e:76:34:6c:16:42:87:
21:86:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:08 2026 by rpki-client