
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File: qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier: ZS9L0026g2Avg1RXoAbC0rsbWARZ5I+UkkfPrhu/Law=
Subject key identifier: AD:68:53:4E:60:81:E4:F3:A1:80:43:07:28:3C:6B:A7:B5:8E:AE:5A
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 019D37527E85325D489A2DB2F58F7DF59EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number: 1308
Signing time: Sun 29 Mar 2026 02:00:46 +0000
Manifest this update: Sun 29 Mar 2026 02:00:46 +0000
Manifest next update: Mon 30 Mar 2026 02:00:46 +0000
Files and hashes: 1: W7Nqc3czjNAYZf0VQNvsKz30Xk0.roa (hash: hAWsOVPPXMqcq+BZ016Ik0VLGyZQz9IjdlVeqa+qtVI=)
2: mm9YPqzrw5zY5U3H2B6nLzTqSrA.roa (hash: g53CFeW1Ry00+6lkqgMlD1le2EyIkmKgf8pBvIsao8s=)
3: oph9L7tpSPraSSHMUNSUUs7Z0mY.roa (hash: R5tBSkoJyz/MYZ9TPqFABtYqxYHhHi1mRxsNEGxKEp4=)
4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: Gxwa4Al+Fi/nkPJ1S1Ps08D2tKKB7jyedIQsCD58KsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7e:85:32:5d:48:9a:2d:b2:f5:8f:7d:f5:9e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Mar 29 02:00:46 2026 GMT
Not After : Mar 30 02:00:46 2026 GMT
Subject: CN=ad68534e6081e4f3a1804307283c6ba7b58eae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:10:97:40:9b:91:0e:97:bf:da:2c:dc:2e:90:
cf:08:0d:87:68:34:b9:4b:40:42:93:79:d5:6c:cb:
85:8b:52:10:39:17:bb:0a:6b:88:9d:0e:0c:b4:77:
12:9a:6b:f2:8e:8f:6c:c0:a8:3c:a9:ae:bd:a2:98:
e4:16:e9:07:04:45:dd:b6:56:e7:36:8f:cd:6a:e4:
21:30:2b:4a:ab:7e:a2:43:f9:b8:60:e0:a9:ff:b1:
bd:d6:b6:47:67:69:cd:f5:7f:3b:84:40:51:92:a6:
e2:25:db:19:4f:58:d8:dc:85:75:62:56:79:46:a2:
cf:87:49:cc:f8:be:c7:0c:03:00:b6:c6:10:06:8f:
e6:32:4f:8a:2b:a7:ef:44:92:cb:61:11:48:8f:f7:
31:de:f9:03:8e:df:b2:bf:5a:ed:2b:ab:54:93:76:
d5:56:32:94:6d:6f:a2:b7:40:89:15:b3:da:cf:c2:
1d:9d:80:dd:ea:b5:dd:1c:b5:69:96:04:86:4b:65:
36:ea:63:90:ca:62:53:52:54:98:da:c7:ce:7b:a9:
17:8a:84:bf:2b:49:cb:83:bc:42:b4:f2:eb:b2:3f:
c9:31:37:1a:a9:a6:d9:e7:bd:b5:f3:cd:46:53:e7:
61:db:f7:1c:cb:3d:e6:34:f0:cc:5f:b0:1c:28:1c:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:53:4E:60:81:E4:F3:A1:80:43:07:28:3C:6B:A7:B5:8E:AE:5A
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:47:b0:ad:f1:e6:8f:dc:04:6e:0c:3f:25:a6:17:93:4c:ac:
f8:f4:87:27:be:be:18:6b:a2:3d:8b:a5:3c:ce:91:04:19:49:
47:d4:64:94:51:06:2b:14:1a:1e:35:7b:c2:b8:87:c9:dc:5a:
86:66:32:35:f3:a2:d6:76:4b:7d:7a:56:4b:ad:32:c4:19:db:
da:5e:43:10:a0:06:2a:2d:60:f3:6b:cd:2c:a4:9c:fe:c8:25:
f7:92:07:fa:ed:fe:64:b6:36:dd:2f:d3:ed:c8:d6:44:d3:40:
d9:ee:32:19:c4:45:b9:ec:fa:58:d9:1a:3d:09:fd:5f:3b:f0:
b3:76:79:9e:7e:23:73:74:c2:e8:15:76:36:f0:88:e6:06:92:
f3:e8:ea:74:ce:8d:dc:fd:2d:96:ee:b2:fd:15:2a:58:c3:f1:
9c:d6:5d:7a:ca:66:96:20:2f:6c:7c:a2:d3:29:f7:1c:2d:4e:
fa:76:69:9f:06:9a:5d:65:24:dd:72:34:2c:a3:b8:22:f1:1f:
47:96:a0:97:8e:8e:8e:bc:4c:08:10:9e:8e:e5:60:8e:3e:f5:
f7:4b:c0:c1:0e:ed:47:7b:52:d6:4a:28:4d:15:d1:a8:bd:04:
bb:b8:f5:77:bb:fb:40:7e:da:f4:06:71:0c:84:c5:1f:9c:f3:
ca:1c:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:27 2026 by rpki-client