Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: vMUv4NtheH94N++vtTWBCBXJ9eMmG5AeoJ+ZumpoYmU=
Subject key identifier: F4:56:42:95:00:AB:AD:F5:EE:47:BF:96:A7:7D:A0:35:42:B3:33:CC
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 019D38D2A04D8C1F7D875A18CB9E4868CA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 169A
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: OFCs67DffEHin03fXSzbafPRilM.roa (hash: 6ap5zRRwDa5G9tEhkbImTGroNfBqTJcGLaIQpF4U370=)
2: ev65uGpdeskGU8rxMwP9DGzY7yo.roa (hash: mm84YFZH+EnFHVYRA5O2XqnvCrusjCtnVPoVlpbhPxc=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: xgA9UAMIsM2ActMke1iLb8M3MGlcUkHZ3ZiDmGseTz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a0:4d:8c:1f:7d:87:5a:18:cb:9e:48:68:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=f456429500abadf5ee47bf96a77da03542b333cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:1f:36:b0:0e:fe:6c:c5:c1:49:ab:d1:95:
9f:06:69:58:67:c6:77:30:30:b5:cb:79:12:0e:ea:
8c:1d:d6:04:a6:a5:41:7f:0d:98:f0:bd:bc:02:b2:
45:1a:69:20:f2:25:ce:8f:8d:55:73:89:9a:d9:62:
56:4f:a2:46:ee:06:c5:d0:f7:29:84:f6:1e:aa:c1:
13:3c:00:ad:4f:a1:00:f7:8d:7f:ea:73:56:46:0a:
7d:57:db:60:0c:6b:75:38:d0:42:07:e1:2c:55:e5:
4e:a5:ac:26:04:62:39:02:ec:3e:c7:ea:f1:4e:cc:
d7:fc:22:bc:8b:d7:a2:84:50:2b:c1:c1:1f:84:cc:
8f:a1:be:3c:8c:fd:3a:c1:70:5d:5f:b9:d3:17:e5:
58:e5:0c:48:9f:7a:45:0c:fc:a3:59:8c:a6:45:b8:
53:e5:be:ec:7e:c1:3c:ed:f6:5d:b7:84:fe:88:e0:
6d:30:13:5f:ce:8d:b0:9c:49:65:2e:8d:37:53:66:
d5:b4:5a:7e:29:1a:49:12:c9:3c:2a:83:0d:8f:c3:
4a:eb:4f:88:d3:54:32:54:c9:e7:af:8e:ca:d0:bb:
6f:4d:d6:f0:d8:ea:29:a1:11:5d:f4:f0:54:8a:c1:
bf:dc:61:78:16:3d:25:2d:6b:9f:9c:68:a2:33:64:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:42:95:00:AB:AD:F5:EE:47:BF:96:A7:7D:A0:35:42:B3:33:CC
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0c:b8:86:73:77:cd:c9:4b:1e:7f:1d:3c:c9:40:b5:62:a1:
b5:1d:63:97:75:0a:2e:f5:94:f0:8d:f3:f4:9d:27:0b:29:36:
5b:90:7d:01:81:3d:54:7c:26:3a:59:47:22:08:78:04:07:7e:
3f:23:33:cc:46:56:6a:b8:b9:19:83:ae:42:6b:bd:07:f9:de:
93:dc:94:3c:51:ed:6c:e8:6c:fe:d5:77:f8:04:a0:2a:21:f2:
2d:9d:6a:dc:f8:89:62:86:5c:b4:d7:1b:64:46:01:de:4e:fb:
37:a6:7f:ee:a1:bc:69:35:fc:fd:19:a3:72:09:ce:92:77:71:
27:09:07:80:07:8e:95:16:03:bb:65:11:3e:f1:0a:0e:c0:db:
e4:62:05:dd:0f:4d:5f:8c:e9:36:35:ee:06:f1:ea:a7:c1:5b:
3a:52:8d:5e:4d:34:3a:fc:ac:cd:3a:2b:94:1b:fd:3d:72:9a:
db:29:bc:1b:bb:8d:ea:a6:fe:42:b4:e4:a3:60:ab:cc:ef:11:
7b:97:48:e9:c0:42:37:f9:de:a7:64:f2:f3:02:da:22:bf:96:
ff:d0:8a:dd:2a:b4:47:5e:f7:17:a3:04:2c:97:a3:ee:7c:17:
ef:d8:dd:82:e5:87:2e:81:60:d5:69:85:13:7a:60:54:79:ed:
5c:5c:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:55 2026 by rpki-client