Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: lvYuB+zLxXeL58rc3xaZFp/NTfMzA27lpsch7RqxQMU=
Subject key identifier: 90:6A:58:44:B9:81:08:A6:04:0B:A1:8D:7E:38:5B:18:C0:1A:B3:AE
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 019D38D3937BAA3B0B3B1E9735F67E5FFEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: CNslXorIhHcxu1ZmEwT8mrYvs6k.roa (hash: s1ROfgQwLlFxkAsbeS9eF9uhXnn1miGuc5wD3r3iLCo=)
2: ie_Pu7uiMx8GOXLlSXzf2113uw4.roa (hash: 0qiWVLbjFxTIJ5VjDihdh12+Gr4lOgtQTqIJcLMq4Wc=)
3: o4zZlyS221abBwGOsgbFYOgvgMI.roa (hash: TiMn5uiz7jjx9HbjbyRUh6Tq/Z12nqOsqsCynyTQnIw=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: hrGHYPFWk7DGriDYrk+69jGaB9azIi30CXAMlOhvUAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:93:7b:aa:3b:0b:3b:1e:97:35:f6:7e:5f:fe:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=906a5844b98108a6040ba18d7e385b18c01ab3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:1f:d7:50:e7:24:8d:9e:4e:37:0b:00:f9:
82:bf:e7:5b:ec:8b:88:5e:f4:3a:26:09:17:62:8c:
9a:2f:68:85:53:52:d4:fb:1c:c8:1f:c5:e6:f9:e5:
88:92:2f:74:8d:2b:93:e5:40:cd:6f:d9:08:06:17:
83:23:20:a1:44:f1:24:2a:aa:1f:e0:eb:6e:4c:2e:
68:83:ea:1e:3b:33:55:19:c6:d0:7b:61:90:ef:c5:
d8:f8:a4:ae:d4:f6:5e:88:44:ce:a5:13:40:c5:ce:
2e:a9:66:0f:89:5d:18:1b:09:95:35:66:82:3c:f1:
7f:20:70:52:79:8d:41:fa:3d:2d:cf:48:6e:f1:db:
bd:34:b8:74:ab:b0:8f:6e:fb:3b:e1:d7:85:de:18:
5d:af:03:91:79:09:f5:88:ff:9a:43:bd:9f:a3:5a:
b6:b6:96:c4:c7:f3:cb:13:33:73:85:dd:00:1d:d7:
3c:71:86:d6:ea:42:9e:3b:f9:b9:c9:b3:f7:89:e6:
74:1b:6c:ed:38:ab:4d:84:3a:be:00:5b:1e:e6:53:
b7:16:13:6b:7b:83:e5:fc:5e:d0:cd:cf:ff:3e:fd:
fd:ac:54:9b:51:6d:ce:df:34:44:cd:8b:68:1c:95:
55:6e:94:e0:bd:6d:25:34:24:59:7b:55:7f:44:92:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6A:58:44:B9:81:08:A6:04:0B:A1:8D:7E:38:5B:18:C0:1A:B3:AE
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:42:2a:41:0d:8c:d2:bd:5c:79:0a:8a:ba:45:92:97:9a:a4:
d7:f7:a3:3b:55:12:0c:e5:03:b0:4c:12:d3:80:1c:24:8b:8e:
5e:51:0c:0d:00:9a:f3:ee:b6:15:2e:27:66:bd:f0:b4:d4:a1:
cd:4a:9e:d5:5a:71:c1:3d:e0:a1:32:1f:c2:7e:30:4a:30:0f:
01:da:ce:ea:8f:e7:64:06:2c:c3:68:be:eb:a6:a8:a8:32:09:
73:b2:f7:05:78:f7:2f:dd:49:9e:37:c6:ee:0c:8f:fa:03:2e:
35:31:28:b7:5f:43:0d:83:ea:61:0c:f3:f0:3c:db:79:34:19:
f9:08:ac:19:e6:6e:71:b0:3a:d4:1c:14:e2:3c:94:51:67:aa:
77:fb:41:b6:63:82:a8:e7:19:4f:a8:b7:cf:6e:66:f4:6f:6c:
12:76:4d:0f:d2:90:0c:07:a7:fc:f5:0d:15:63:e8:b8:38:9d:
de:66:ab:70:0d:a8:2e:eb:77:50:41:33:10:63:51:26:9d:e9:
82:e0:02:ae:5a:61:9b:1b:b1:7f:06:2f:72:92:20:70:9a:c9:
91:9b:49:df:16:2f:e2:9f:05:e7:53:c2:d6:73:94:0a:17:50:
ee:eb:11:a7:fa:d5:52:05:a8:56:c6:dd:fb:d5:eb:55:cb:b2:
05:4f:5e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:08 2026 by rpki-client