Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
File: _QB9d6vr_l2GsInvuT4C3NMASsY.mft (raw, json)
Hash identifier: RqqrG+8ZHJsTp6ZzCBaJ8tzUuleT+1HXk4MfpK13Ne0=
Subject key identifier: 0C:92:B0:32:8A:68:7F:C5:5A:62:FB:27:AA:32:58:B9:63:DE:8A:15
Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
Certificate issuer: /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Certificate serial: 019D39E5DF1AB36186AF11DAEF75B0FBB009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
Manifest number: 0346
Signing time: Sun 29 Mar 2026 14:00:59 +0000
Manifest this update: Sun 29 Mar 2026 14:00:59 +0000
Manifest next update: Mon 30 Mar 2026 14:00:59 +0000
Files and hashes: 1: 1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa (hash: dnBqijSF+YPKk6kM0CwG5Q01pI1bTPaR1o5KUYqbpck=)
2: _QB9d6vr_l2GsInvuT4C3NMASsY.crl (hash: LNa22Rvv/XU3xYTuSfMtFVhIqQnyohyLi11Bc15xTn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:df:1a:b3:61:86:af:11:da:ef:75:b0:fb:b0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Validity
Not Before: Mar 29 14:00:59 2026 GMT
Not After : Mar 30 14:00:59 2026 GMT
Subject: CN=0c92b0328a687fc55a62fb27aa3258b963de8a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:c3:85:8d:79:d9:81:fb:87:5f:e9:41:1c:
38:67:e4:f1:77:91:ef:39:9a:fa:ec:d3:5c:4d:93:
ca:b0:7e:13:c2:8c:23:03:e8:d8:8c:73:9a:49:83:
45:15:44:4b:b3:9b:51:be:f2:2c:12:01:e3:c6:a9:
b1:4a:b2:30:45:04:b9:e3:8f:63:5f:62:cc:4d:25:
fb:32:b7:90:8b:04:79:bd:0d:12:c9:78:a9:27:6e:
fb:dc:2f:96:70:87:f6:50:31:1b:83:5d:5f:2a:48:
3a:eb:2b:60:3e:ae:7f:3d:05:75:df:c9:a1:8a:9c:
dc:12:26:4c:f2:d4:c9:e2:5e:cf:ea:05:6a:f9:61:
90:0b:7c:3a:d2:77:a9:5c:44:70:0d:7d:71:be:c3:
fa:3a:35:aa:05:0a:3f:07:4c:d0:2c:89:5b:f0:4c:
6c:0d:4e:96:02:21:37:e8:93:8f:65:d7:a2:76:ec:
fb:e7:2c:04:62:79:e9:e6:90:56:0e:a5:3a:3f:1d:
61:2a:b9:8c:44:45:a2:54:2d:57:cb:61:f9:d9:b7:
56:02:f2:53:07:10:5d:62:cc:83:a1:4c:35:ca:82:
b1:3c:f9:5f:93:5e:72:bb:f6:8e:b1:0f:95:46:4a:
0c:04:49:c4:3e:07:83:f3:0e:58:58:fb:9a:0f:b4:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:92:B0:32:8A:68:7F:C5:5A:62:FB:27:AA:32:58:B9:63:DE:8A:15
X509v3 Authority Key Identifier:
keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:46:02:aa:47:8b:66:9f:d1:77:0c:b0:de:b4:9b:07:e1:e3:
1a:bc:ed:26:aa:f3:6c:e4:85:19:a2:43:a2:54:74:b6:6f:b6:
68:90:b3:36:aa:61:84:b5:67:bc:b9:3e:af:c0:7f:02:75:00:
af:3f:c0:13:fe:4a:be:d5:d0:9b:58:d1:0a:67:75:b1:06:51:
95:02:fe:31:a2:00:92:06:38:fb:d8:98:2e:11:15:20:8d:30:
19:1f:ac:93:cb:ae:2e:75:4a:b9:92:08:dc:8a:a5:a9:f4:d5:
60:e1:f3:22:0a:12:c1:b0:9a:08:f8:05:6d:b1:3f:cf:44:14:
8f:ab:37:da:c9:46:20:ba:b3:01:58:9b:df:cf:36:32:8b:c7:
07:73:5c:0a:a0:d2:26:b4:06:e4:71:4f:5b:98:d4:c2:e5:27:
14:dd:ca:75:a7:d8:be:6d:6a:de:5c:61:59:c7:67:25:d5:1d:
f6:87:96:6d:82:ab:c2:b4:3f:ce:4d:f7:8e:f2:9c:e3:7b:a5:
e6:9b:47:ca:a7:05:8d:80:3b:ea:19:19:21:fe:64:26:c8:b8:
39:70:99:55:8a:fe:40:cc:dc:75:7c:0f:73:10:e8:c9:de:5a:
cb:a6:7b:a7:0c:db:2c:65:9c:24:c3:fc:23:d0:9f:60:1d:b7:
5a:a8:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:58 2026 by rpki-client