Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File: qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier: VbRMpNYouBNUb4pFTKlsBo8GUjQqeb7NWWdhHE3/nNU=
Subject key identifier: 84:A2:4B:A1:23:DC:BE:50:33:4E:7F:0D:85:FD:96:1E:60:00:4B:E3
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 019D3909D051ACF4331EB6555F9E44EC16BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number: 0F85
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: pJy_J4dH-nPKCXyAdCdJtDsMxrU.roa (hash: uOd0xGswmdF48/9jkoke/SyXvT+SzaX6MAmlYWoqoHE=)
2: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: sIh6YMYRlf9ey3UIpJtIblXzo+mJWfkPnMvJfBNari4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d0:51:ac:f4:33:1e:b6:55:5f:9e:44:ec:16:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=84a24ba123dcbe50334e7f0d85fd961e60004be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:d6:0d:64:98:66:fb:07:42:1f:87:a8:12:
ca:f1:3a:a6:1b:63:62:d1:47:5f:fc:51:73:24:74:
c7:ad:93:3a:44:e4:e7:9d:ed:6e:0a:82:c4:08:94:
8f:d3:a5:4e:d3:c8:02:26:f3:8a:dd:eb:8b:fa:d4:
7b:5e:e9:2b:1f:49:30:68:28:32:79:96:11:b6:26:
f9:71:ed:9f:50:e2:22:84:3d:1e:8e:60:bc:44:98:
d0:88:03:c6:47:9d:59:9d:b8:1f:66:73:05:00:28:
27:7e:14:04:78:42:d4:80:e6:50:25:85:6e:f1:8e:
ad:b1:6d:a5:bc:35:5d:bc:eb:5c:ce:fa:0b:2d:8f:
d3:6f:53:a9:f7:02:39:a4:b6:b9:84:6d:27:56:e8:
07:14:4d:71:3b:a5:1c:f3:c1:a8:05:a1:ce:12:56:
d8:d9:fd:fb:90:4c:5d:02:ac:78:9f:0c:59:81:82:
a1:2b:e6:6a:65:78:38:69:50:de:7d:3a:44:2a:3f:
ba:b5:31:29:86:fc:80:dd:6b:c7:08:14:03:f4:50:
56:d0:81:6b:01:23:c4:91:41:f0:b8:11:b2:38:8a:
e8:e1:ec:d2:8c:f5:fb:60:a8:f2:d1:0f:38:2e:64:
a8:cb:f8:67:5b:41:7d:f8:1d:d4:4e:d3:06:0b:34:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:4B:A1:23:DC:BE:50:33:4E:7F:0D:85:FD:96:1E:60:00:4B:E3
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:51:2f:22:cd:f2:e2:7f:ea:30:18:56:dc:83:36:bf:c8:2d:
14:da:56:c2:08:75:33:d0:02:f1:56:d4:ab:be:1e:45:53:02:
82:f8:4b:82:cb:92:f4:b4:50:ac:f3:b9:7c:b6:56:95:02:75:
c9:d8:06:13:b4:57:33:1b:a1:71:dc:5a:d9:c8:44:b0:c4:90:
fc:f6:90:95:53:36:61:9d:7e:9c:8a:5a:23:e4:36:b3:42:4a:
c4:06:ad:c1:16:4f:cb:4b:8f:83:67:fa:8e:a6:46:61:b1:59:
94:50:26:ac:7a:e6:63:95:0a:5b:be:6c:d6:39:68:3a:83:f0:
ce:d7:20:e1:79:c7:a5:83:64:f3:80:83:d9:84:dc:c9:45:ff:
6d:5d:6e:72:49:32:25:f4:f3:d3:f2:fe:98:f4:31:eb:76:86:
c0:b0:27:e6:6f:5c:e2:07:a6:71:d2:e8:34:ab:10:c1:9b:ad:
71:8f:67:b0:a1:cf:ae:c3:77:2b:6b:00:0e:2a:62:d9:2a:41:
a2:f1:85:2e:a1:56:6f:09:33:78:74:1d:36:ad:31:28:13:d8:
1a:51:7d:7c:46:ab:6a:73:cf:47:f7:16:08:fe:41:ef:ca:09:
c1:7f:9f:24:c7:83:e8:df:93:e7:2e:46:12:f3:1c:75:62:b3:
be:8f:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:35 2026 by rpki-client