
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
File: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft (raw, json)
Hash identifier: aAPZrHazwEcyEhroLKBzlb9FPYP6zTTI9/qy0eW6zeQ=
Subject key identifier: FB:4D:73:CC:9E:B2:F0:43:0E:60:9F:33:DB:01:30:99:92:23:C1:30
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 019D341A83DF31AF4A4D36D237E8710F6A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
Manifest number: 1892
Signing time: Sat 28 Mar 2026 11:00:45 +0000
Manifest this update: Sat 28 Mar 2026 11:00:45 +0000
Manifest next update: Sun 29 Mar 2026 11:00:45 +0000
Files and hashes: 1: fsorRjNLpV567Bfhzvrah76aFJM.roa (hash: j4qP9CY0ItXZav1pWfPGEd7YIBpId1LZ5wWL7A5xDlc=)
2: hMWRlyBu_98qhrvASUIfs50ilt4.roa (hash: IGWE5HJqvsWQ/JQ2ivM4pc0kcFg9yZY3dxE1FGpgh1g=)
3: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl (hash: uM7UNg6nyX1wwxexrXkZniv20bzerc8VRnsSIHwxDG4=)
4: yeLJIzyENF-xSwUvcw-83vXbHV0.roa (hash: /maHsTe7P80FB56mfWTMzRdcMrW1yJ3jN8SeCvnlqtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:83:df:31:af:4a:4d:36:d2:37:e8:71:0f:6a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Mar 28 11:00:45 2026 GMT
Not After : Mar 29 11:00:45 2026 GMT
Subject: CN=fb4d73cc9eb2f0430e609f33db0130999223c130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:fd:78:1f:dc:4e:de:ff:98:5c:14:84:a0:
be:5d:5a:7b:d3:78:03:70:ef:b9:4b:11:6c:b5:4b:
09:c1:b3:94:85:4d:0c:82:d3:90:7b:0b:19:96:0b:
84:f1:31:78:3b:82:2b:37:6b:b5:8c:6f:47:ff:32:
44:c3:72:f6:f2:be:3b:db:e9:70:89:2c:19:7b:1d:
02:2c:7c:55:2a:c6:52:70:db:ef:25:b8:9a:0b:dd:
54:5a:c5:47:52:ab:41:16:4d:6c:d0:3e:19:65:47:
78:a4:47:8b:6a:d3:b9:0a:ba:ae:09:7d:f8:5b:af:
49:9d:f9:66:8b:ac:e5:3f:93:3c:08:a3:15:79:69:
87:c7:43:7f:11:3c:5e:f1:3c:79:e4:60:38:d9:a7:
de:2c:5e:e3:66:b6:1b:35:dc:33:99:cf:7e:8e:de:
d9:ce:89:69:5c:76:25:53:84:c6:27:a4:c0:b4:27:
6c:5f:96:b1:d2:d8:f1:65:e3:36:a2:c2:4d:4e:74:
c2:a1:1c:20:56:a2:b8:fa:eb:af:1d:9a:eb:6c:bc:
a5:fd:13:76:22:cc:5e:e0:a3:48:61:7c:4b:73:9e:
7e:b2:c0:60:c6:10:07:16:01:71:e2:48:c2:7f:a3:
fe:3b:1b:ad:33:01:ba:23:e1:e4:bc:6e:ce:ee:89:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:73:CC:9E:B2:F0:43:0E:60:9F:33:DB:01:30:99:92:23:C1:30
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bf:aa:00:1f:94:04:2b:b2:46:ac:61:73:20:0a:a5:15:50:
42:c4:78:23:fc:c3:cb:d5:80:2b:0f:65:a2:37:ea:44:98:68:
96:0e:48:85:95:97:94:4e:b0:83:37:3c:78:6d:fd:d3:22:36:
04:bb:44:56:a9:a2:4f:b4:da:5c:1b:29:bc:49:d0:83:f1:c4:
80:7b:6c:e3:f3:7f:98:43:fd:bf:a0:f9:91:c1:bb:c5:11:83:
33:86:90:cc:57:1d:3b:87:20:b1:f9:d0:bf:b9:fd:b5:5b:49:
04:c2:d3:ec:74:45:41:9b:1c:20:f5:20:84:22:a9:05:ae:a0:
42:1c:9f:b1:15:bf:8d:52:40:0c:3b:1f:29:4f:74:3d:38:09:
52:d5:82:80:26:3f:c3:9f:4e:cb:9f:05:40:a8:06:e4:57:53:
0f:83:f0:76:eb:d6:6a:1d:4b:d5:9e:f2:1d:a4:c8:f4:f0:db:
ba:7e:09:28:40:31:93:bc:48:55:38:a5:8c:a9:3d:cd:68:83:
dc:2f:f0:de:7b:04:a0:e9:75:78:50:78:56:0e:91:0e:4a:97:
80:24:a8:60:8e:25:0c:52:ba:00:34:30:ae:96:6a:c1:9f:1f:
05:ca:18:49:2b:e2:17:60:5e:d4:a0:9d:b4:b5:c2:e5:2a:18:
99:4f:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:46:27 2026 by rpki-client