Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: TFjnTeQc6eGlwtocIxg5CWSyRM0F/CetlRB16xaXIn0=
Subject key identifier: 65:10:FC:9A:0A:76:05:91:62:52:57:98:90:40:41:85:D5:DD:F1:C4
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 019D394104789C3E07C06C79E8D99D8D02E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 0A42
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: Nd2VWji2-npmv2b1apqFNWYSkaY.roa (hash: BWQO3/ctGckcd4Dl6OgXbOo4/UEjPFHnSYCpr3sCzaU=)
2: dKP6zKEOjA35eNWIADhSGj3djko.roa (hash: 2Lz2j2XDdHTzfHzI32dG004beOMGbTVI9KUsaPstIRU=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: Z0UUXW9sXCVW84YrIPd3HizR88+tBaBDBa40bshxCHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:04:78:9c:3e:07:c0:6c:79:e8:d9:9d:8d:02:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=6510fc9a0a7605916252579890404185d5ddf1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f3:a3:d9:96:2f:48:54:54:b8:3a:b4:4b:7a:
65:ac:d4:70:f4:59:1e:29:de:92:08:44:df:22:b2:
0c:3b:fd:1f:a5:15:09:c4:d3:ab:8f:5e:29:6b:dc:
8d:32:c9:3b:f2:86:fa:ab:43:6a:97:81:3d:16:3c:
07:6c:82:5b:4f:3a:a2:84:76:90:40:5e:ce:63:83:
42:b3:4b:70:98:ae:88:48:96:96:5b:91:7e:66:09:
1c:26:71:63:5c:11:fd:87:aa:ba:2e:91:2a:5a:d8:
ea:64:44:a3:95:e2:a2:54:d2:f0:46:81:7f:6e:ef:
f9:58:32:02:64:79:0f:f4:32:06:6d:33:39:87:23:
50:0a:83:96:4e:92:2c:82:af:4c:ac:e1:46:05:46:
e0:ae:61:d2:f7:9d:e5:d6:8a:06:d4:a0:d3:a4:c0:
5a:97:85:30:9e:68:79:4b:52:71:c7:ae:62:aa:94:
ce:b4:b6:fb:af:20:c7:f8:93:2c:c5:a0:35:78:a1:
db:73:64:6a:65:a8:32:f2:4a:99:13:c9:25:c8:b0:
39:58:48:67:88:59:21:21:e9:95:c9:9b:d3:06:0f:
90:28:2f:07:a8:61:79:f7:f8:dd:55:04:7a:a5:ac:
69:98:77:fd:1a:d4:1c:52:83:2c:d9:fb:f0:65:67:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:10:FC:9A:0A:76:05:91:62:52:57:98:90:40:41:85:D5:DD:F1:C4
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d4:a1:70:3e:a6:45:13:24:27:ca:6c:48:d4:96:18:ed:5d:
b8:c2:d1:a3:7d:5d:cf:0a:25:ef:ad:05:c9:6d:59:64:93:74:
41:96:df:ac:d2:69:93:9a:4b:f0:ea:d2:27:9a:e4:04:29:6c:
87:d5:b9:f3:1e:29:e7:20:86:4f:1a:3c:25:cf:ae:3a:63:33:
e5:ed:9b:4f:8a:cc:72:22:9c:b0:c5:5c:ae:d5:3c:f9:dc:44:
ed:de:d9:0f:7f:3a:4a:70:ce:84:26:24:62:91:04:f0:50:ce:
ac:91:35:65:d2:d8:05:ec:bb:ae:f5:4c:82:88:47:74:21:49:
24:b5:9b:85:f4:aa:e6:d0:d2:c5:73:5f:fd:8e:7e:7e:f7:95:
73:5b:94:4a:f1:50:f3:5b:93:3d:bf:5a:ba:09:d4:8a:99:79:
08:43:f3:72:fd:cc:25:c4:7c:b6:97:37:14:94:b1:fb:a7:2d:
48:c1:72:2a:29:f2:9a:bd:83:d6:5d:a0:8f:a3:79:8e:f5:b6:
47:79:27:82:c5:8f:de:87:28:aa:33:43:c8:ef:dd:c5:03:ef:
69:50:ee:7b:37:65:66:92:16:41:4e:24:52:17:a6:a3:9f:cf:
76:7a:87:88:71:6b:94:6d:88:57:7c:51:e8:20:9d:e4:17:a9:
4c:9c:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:43 2026 by rpki-client