Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: OyQ+1jDGqzHc2ZEZtVTAR5+5ECHyVLyhUYBKbxVZZHM=
Subject key identifier: B3:46:AE:7C:D5:4B:0E:E7:A8:96:E4:17:97:D2:37:1C:BB:D8:6A:78
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 019D3789623F8B37B2A514D68DBB9BE422CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: fG6maQIYPuiZbXuoPZY5KDKmziI.roa (hash: 86O5JcN57k2/HbjQtBdb8xSuus/b5Khba3p8Ebd34wc=)
2: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: VUmwX/SbFlKDoUJ/4TKRVamBhGJuZkPWZML7uQwd1Pk=)
3: upo56Z93ZuxfUzsBXT8Mop0ljfI.roa (hash: YhDFF8pQFZdnO5Ubp8t393cVmTF+JmT/Dc4jBewkDSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:62:3f:8b:37:b2:a5:14:d6:8d:bb:9b:e4:22:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=b346ae7cd54b0ee7a896e41797d2371cbbd86a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:ce:ac:bb:16:6a:ff:70:bc:54:0a:ee:9b:
f3:9b:ef:3d:c3:7c:ca:b9:53:7e:43:e5:12:93:7f:
25:a3:af:dd:59:c5:57:69:b8:c5:ba:59:56:92:f1:
fb:79:5a:0e:43:74:dd:89:d8:fb:74:78:41:b7:ab:
0d:18:15:68:c8:f3:af:34:a5:a8:77:89:b9:bb:eb:
43:da:45:38:42:d0:c9:c3:15:68:25:e8:27:ae:04:
5c:ef:b7:87:bb:c8:af:73:cd:33:26:55:4a:d6:59:
7d:54:25:2b:50:5a:64:c7:f1:68:49:2c:45:f9:9e:
73:27:c4:ed:36:13:5a:37:a1:32:e8:2a:ca:71:5f:
91:39:ba:5f:d5:2d:65:73:81:46:6c:8d:77:fa:63:
76:9d:08:4d:c0:db:4a:20:42:a2:62:a1:e8:77:82:
40:a5:dc:b6:0c:18:b1:ce:f4:0a:61:09:57:43:a6:
13:5e:7a:19:e3:30:de:d5:8a:69:31:57:49:f3:b9:
04:9e:38:b5:13:6d:04:be:5d:77:d2:d2:bd:08:55:
61:0a:19:f7:c8:40:77:f5:21:91:26:b8:28:14:f7:
a0:0f:88:5b:0b:3d:a5:e6:93:08:4b:3f:34:f7:a2:
0c:20:ce:f7:c6:4f:ed:20:93:0e:06:90:f8:09:85:
94:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:AE:7C:D5:4B:0E:E7:A8:96:E4:17:97:D2:37:1C:BB:D8:6A:78
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:47:23:b3:08:c9:05:39:42:d0:13:b0:6d:52:e6:89:e0:ad:
99:b7:39:6f:2a:b0:ad:6f:1d:93:d0:14:88:67:23:28:fa:91:
54:49:0f:73:16:e8:e1:7b:bb:6b:b8:df:e1:d4:7d:46:d4:b0:
4d:ef:a7:75:5e:67:39:a0:f9:24:72:58:a8:97:ec:55:06:33:
05:17:6b:f8:2d:95:8f:a7:a1:77:87:b6:7a:08:3f:63:6d:0b:
02:28:00:00:5f:30:25:31:a2:1b:fb:c7:fe:a7:12:c4:7b:38:
b1:c5:51:6d:8b:a7:a1:e9:b1:05:51:87:04:0b:c3:41:0a:f4:
1f:4e:c3:78:75:35:28:cb:dc:3b:9c:d6:71:1e:68:1b:61:00:
36:d8:13:c3:8e:45:c0:ca:34:35:ec:85:bf:9e:f4:bb:48:8f:
33:9a:71:3d:c7:8e:5e:a3:3c:f4:b5:26:41:fb:3d:42:9c:e4:
21:aa:b5:95:c0:ea:a7:7b:9e:fa:e7:38:38:dd:cf:c6:72:1f:
e6:64:ba:0a:c5:5e:dc:d0:1a:76:e2:d8:01:d7:70:37:43:d5:
3b:00:33:f9:16:aa:c6:ae:3e:5f:86:14:15:24:84:40:02:79:
cb:70:ff:fe:6a:62:e4:45:0b:6e:dd:25:43:4a:72:35:27:79:
c1:98:26:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:50 2026 by rpki-client