Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
File: qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft (raw, json)
Hash identifier: j2wo/JoqmLGqL9bXSxyXOdV56uEqDZYqGEuo2BKuBME=
Subject key identifier: 08:62:FA:96:63:14:A0:D9:90:AE:FD:68:7D:83:38:03:4B:A1:C4:CA
Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Certificate issuer: /CN=a9a073b31d888e4439e272e007c9532fc305c80d
Certificate serial: 019D38D2C0E943B7BA00930FF64119E5DCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
Manifest number: 0F52
Signing time: Sun 29 Mar 2026 09:00:29 +0000
Manifest this update: Sun 29 Mar 2026 09:00:29 +0000
Manifest next update: Mon 30 Mar 2026 09:00:29 +0000
Files and hashes: 1: fVTksWbnATqXaCHSg3-Hyam5vM4.roa (hash: aKoDF8WcVN36RBOxnQH2HKKv2Xv+gPNSTtzRz6i4sY8=)
2: qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl (hash: l605RVIl2TRGes8b4FaqKJrqPNABtAXpxKyIKmxiN6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c0:e9:43:b7:ba:00:93:0f:f6:41:19:e5:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d
Validity
Not Before: Mar 29 09:00:29 2026 GMT
Not After : Mar 30 09:00:29 2026 GMT
Subject: CN=0862fa966314a0d990aefd687d8338034ba1c4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:17:00:0a:3c:f1:33:18:89:70:ac:42:4f:1a:
70:1a:0f:b0:4e:b1:28:56:7d:ec:a4:ed:7c:20:4f:
01:76:85:bd:88:24:91:0a:21:e5:99:ba:77:aa:71:
3f:be:08:4d:1d:7b:42:62:ea:d1:ce:d3:ef:07:1a:
c5:70:77:e6:cf:07:c6:74:bf:75:76:e1:9a:04:46:
f4:e7:0b:d8:4f:d9:44:4f:02:3c:f3:22:ae:80:6a:
70:d9:49:2b:a8:69:70:da:d3:3f:dc:65:69:63:ea:
47:5f:0d:41:c5:61:e8:9d:ae:0d:44:c6:79:12:7f:
e2:65:84:e4:0f:97:4c:5d:e4:8a:e6:25:ea:61:5b:
69:e2:c6:24:e3:c6:cd:30:27:20:ad:0a:af:fb:b6:
c9:0e:4c:7d:8f:c6:3e:47:a1:e3:96:28:99:bc:28:
bc:03:6d:eb:02:12:41:7a:67:85:6b:0b:36:55:17:
51:4e:09:59:dc:d3:15:91:57:b7:78:2f:c7:d5:3a:
d1:ed:76:33:b8:34:96:92:0a:21:47:78:39:f8:9f:
b2:07:2b:1d:80:5a:db:37:9c:c1:ce:6c:67:e6:74:
68:a7:29:e7:96:5d:ba:78:c0:c6:21:27:3a:87:33:
f7:6f:c9:29:1a:f9:28:f3:92:be:81:51:41:46:77:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:62:FA:96:63:14:A0:D9:90:AE:FD:68:7D:83:38:03:4B:A1:C4:CA
X509v3 Authority Key Identifier:
keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:46:8c:b8:a0:38:7e:69:fa:04:90:98:3b:21:90:1c:4c:94:
32:58:3e:53:4a:2f:23:9a:70:e1:b7:d4:80:ac:da:46:cc:56:
31:78:fa:c1:07:13:c7:52:a3:0f:41:a4:70:15:56:1e:45:ac:
10:83:5a:44:91:5d:f7:25:02:3b:a9:af:4a:7b:e6:c9:ba:15:
ec:1a:7a:a1:ed:e4:de:f1:a0:26:dc:a0:36:32:30:1c:ec:2c:
ce:3e:ac:bc:ee:3a:e9:6f:57:5a:51:c5:fd:14:ec:57:75:59:
b3:db:85:14:df:5d:db:4e:82:06:82:b9:87:1f:e6:53:88:52:
48:1d:d6:f7:b5:7b:63:4e:c8:05:86:06:dc:18:78:2a:06:54:
20:3d:74:be:ee:b0:56:90:42:cc:c6:39:7c:99:3f:83:63:d2:
93:bf:04:68:74:bd:5a:47:93:e4:58:35:9d:89:e2:10:e7:c1:
8b:17:85:c3:49:c6:c5:1e:b8:28:c7:8e:87:7a:eb:8f:11:eb:
5d:4a:3c:16:c1:79:6e:b2:a7:a9:64:5f:ec:61:76:c3:c3:ce:
50:d4:16:c5:b5:fd:65:f2:f0:7a:14:4f:23:06:a5:c0:4e:ac:
ca:fc:5a:f4:4d:1c:a7:35:54:be:62:55:2e:3c:96:f1:93:77:
0d:66:d7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:51 2026 by rpki-client