Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: 6s/ajt8nVfbAE3Qw/987mL26olcyHFoy9IiuibhpP7U=
Subject key identifier: B6:E1:BF:6F:8D:23:36:C4:54:49:E1:1A:1B:2E:6F:E9:DB:EE:4F:81
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 019D3A1C380F5BC12E7DCE878A63C42CB313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 0C29
Signing time: Sun 29 Mar 2026 15:00:21 +0000
Manifest this update: Sun 29 Mar 2026 15:00:21 +0000
Manifest next update: Mon 30 Mar 2026 15:00:21 +0000
Files and hashes: 1: kUzQjhLo2G6JI_dgKaScwOHdOPY.roa (hash: 5Mxtgv4b+Zf5ryrgeJIOrybvkQo9Xz3usdN2WR4EOAc=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: LU4kogeNAA2HzzwLFApUtXOQfIOsbGs9pyMbmp4kyFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:38:0f:5b:c1:2e:7d:ce:87:8a:63:c4:2c:b3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Mar 29 15:00:21 2026 GMT
Not After : Mar 30 15:00:21 2026 GMT
Subject: CN=b6e1bf6f8d2336c45449e11a1b2e6fe9dbee4f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:e4:29:6a:67:79:df:f1:f4:e3:ad:51:b5:
d3:bc:f4:12:38:d8:2e:28:77:72:28:ea:10:a2:1d:
51:7c:3a:36:d5:d1:e7:c1:d3:6a:3d:01:79:f0:f4:
47:c5:9b:30:dd:e5:a9:d2:79:6e:de:62:86:fa:47:
f1:a3:2d:ee:38:1a:ff:e9:fd:a7:5e:f8:3f:a1:07:
3e:f1:93:e5:63:a5:57:ae:c4:6c:59:3c:74:17:90:
2a:89:cd:d9:31:e2:52:ab:a1:96:90:c1:89:4a:55:
92:3a:ab:fb:5d:c2:90:3a:97:9a:74:ef:96:b8:b8:
bf:cf:8b:87:f0:fc:ff:88:15:91:a9:02:79:65:89:
da:b0:26:d0:7e:d8:1a:b6:bf:fe:ce:43:1e:2c:a8:
de:d6:f8:ad:d6:16:e0:6b:83:0c:be:f4:c7:ee:86:
be:5f:48:99:d3:e5:3c:3b:d6:aa:b7:50:f1:f9:c2:
35:ab:9c:a3:8a:08:f0:a2:68:c7:db:67:01:6b:c0:
41:17:e2:88:ab:16:d4:69:6d:1e:04:5c:4a:74:a9:
c7:4e:a0:f0:08:67:b0:e3:3c:69:5e:a8:1f:16:7d:
30:37:8b:b1:ad:32:db:d2:43:85:0b:cf:bd:be:cd:
54:da:99:fe:09:28:fc:ce:40:55:fd:7c:c5:a2:85:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E1:BF:6F:8D:23:36:C4:54:49:E1:1A:1B:2E:6F:E9:DB:EE:4F:81
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7f:0c:89:c4:1c:2a:0a:90:91:f3:c4:7a:00:d6:bd:86:07:
b9:f2:fd:85:a5:14:1b:cd:a2:02:11:ca:23:ee:6c:7f:41:67:
6a:52:e6:cc:5c:c5:34:0e:2a:64:8c:1c:f4:75:79:bc:0e:8e:
3a:99:bd:04:57:86:06:33:50:35:52:f4:b8:bc:09:e2:11:27:
6c:b3:4a:4d:cf:f5:90:ca:d2:02:88:f1:48:e7:61:21:de:be:
1c:17:c3:62:cb:37:ee:67:08:a1:9b:84:e2:a1:73:bd:c7:7f:
3c:b6:db:91:3a:00:51:1d:4c:fe:7b:29:20:c5:33:6a:bb:86:
8c:67:7d:7a:0a:27:e1:81:3e:1c:01:5f:57:db:b8:b1:79:27:
e6:20:98:97:13:e4:d9:2c:6f:e3:27:6d:cb:be:94:e1:fa:18:
5b:f9:1a:a6:31:15:2c:4e:07:4a:89:37:31:a3:a4:61:49:a8:
45:1c:65:d4:de:f2:56:bf:c1:66:31:eb:1a:79:a1:66:83:4d:
b7:b5:80:03:31:be:c6:1c:04:26:d5:26:72:fe:33:86:89:c8:
f1:ad:52:04:d6:d6:5a:1d:a6:66:be:b4:cb:03:21:36:4b:94:
84:8b:7c:81:4e:47:5b:04:29:15:12:cb:e4:3b:71:6d:5b:32:
9d:ec:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:41 2026 by rpki-client