Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft
File: qqzbVOF2f1uOzsxeM4LWYR5cjII.mft (raw, json)
Hash identifier: C5GnZVsTifdzCB8F51fH7Xonk0fMiB3Hr9sIy59hODo=
Subject key identifier: AB:BB:39:5B:12:DD:B6:2C:54:CF:E4:87:CB:E5:B1:44:DB:E3:67:03
Authority key identifier: AA:AC:DB:54:E1:76:7F:5B:8E:CE:CC:5E:33:82:D6:61:1E:5C:8C:82
Certificate issuer: /CN=aaacdb54e1767f5b8ececc5e3382d6611e5c8c82
Certificate serial: 019D39407950EC8C661431E4745F5CB39229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft
Manifest number: DD
Signing time: Sun 29 Mar 2026 11:00:19 +0000
Manifest this update: Sun 29 Mar 2026 11:00:19 +0000
Manifest next update: Mon 30 Mar 2026 11:00:19 +0000
Files and hashes: 1: BecW4Z3OJKE8mPGOXG-xMCZNoR4.roa (hash: i81QYZ9angiETwhsEQKAuuK5FXt4MFlFdqt+7+uo7Wo=)
2: qqzbVOF2f1uOzsxeM4LWYR5cjII.crl (hash: bgLos1d9CQKyMN1L8bJiC+i0ZQVGblEzJjthPaP65gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:79:50:ec:8c:66:14:31:e4:74:5f:5c:b3:92:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaacdb54e1767f5b8ececc5e3382d6611e5c8c82
Validity
Not Before: Mar 29 11:00:19 2026 GMT
Not After : Mar 30 11:00:19 2026 GMT
Subject: CN=abbb395b12ddb62c54cfe487cbe5b144dbe36703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:86:bd:2f:db:65:b9:cd:3e:1e:dc:ff:a9:
d2:4c:7d:51:39:4c:21:b1:1e:ab:3d:7d:2a:3a:88:
46:7f:78:77:2e:df:a5:52:a6:4d:28:a4:7c:98:8d:
bd:ea:ff:89:94:fd:b0:62:70:f7:08:f7:16:29:17:
16:3c:e1:c5:97:90:37:0d:1a:a7:c1:32:db:f7:f0:
49:f1:81:33:47:86:6b:56:f9:3d:98:a4:61:9c:91:
c2:87:af:3e:0a:b2:c6:0b:43:00:b9:57:b4:d5:a8:
b1:90:d2:d5:90:c0:bf:47:80:8e:19:0a:30:2f:92:
a6:3b:34:0e:40:a2:d6:8f:28:e8:cb:7a:8d:82:c0:
19:43:c1:ea:9c:f8:bd:99:9f:23:b7:a6:0d:20:c0:
98:d3:ea:af:dd:55:43:7a:8b:9f:2e:f4:7a:60:43:
ec:8f:0f:34:8c:3a:4d:2b:13:78:e6:41:b7:51:7b:
45:6f:44:f7:b9:b0:e6:bf:d5:3a:e0:94:75:ec:9d:
e5:f0:7a:14:54:14:3d:e7:e0:fb:67:c6:57:20:9a:
0c:97:12:12:45:db:a1:db:66:f6:ed:d2:1c:97:9b:
df:5e:68:4f:32:6d:fd:3e:85:ef:5e:b6:85:6c:17:
2b:0d:9d:47:e2:c6:82:b8:6a:70:4f:e1:05:5c:e7:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:39:5B:12:DD:B6:2C:54:CF:E4:87:CB:E5:B1:44:DB:E3:67:03
X509v3 Authority Key Identifier:
keyid:AA:AC:DB:54:E1:76:7F:5B:8E:CE:CC:5E:33:82:D6:61:1E:5C:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2b:56:9c:45:9e:be:4c:ff:22:d3:63:17:bb:d7:bb:51:45:
53:96:43:8b:ea:60:58:c3:51:4e:82:20:59:e3:ce:9f:9d:9e:
41:16:97:f4:6e:ca:c4:1f:68:48:eb:ad:39:85:b9:81:49:1f:
1b:48:d6:46:b3:10:ea:59:14:c4:ad:8b:36:26:0d:c3:d7:00:
6c:fb:d6:32:8d:16:4d:12:16:d2:85:e2:e9:6e:f1:11:40:a9:
88:a0:02:eb:61:d3:6a:d7:1c:a3:9d:df:c2:ac:f7:ed:bd:0d:
53:23:66:17:9f:81:26:14:e8:b4:e6:20:8b:23:ef:82:53:9a:
f0:0d:6a:c1:49:9a:07:01:f2:2a:cc:19:10:17:bf:41:5f:b5:
c8:4d:25:ba:0c:b9:e5:0c:6c:9e:4e:0e:91:61:c8:5d:fd:25:
58:f0:11:2d:55:ca:ea:f0:7f:18:08:1d:b0:8c:9d:e5:5f:45:
99:ef:cf:fb:e1:de:85:c3:34:d5:23:81:b6:95:10:77:6d:b0:
94:da:3c:29:cc:fa:6f:e3:48:bb:e8:3f:bb:58:67:85:4d:a4:
bc:17:7a:5d:10:18:a5:91:f7:13:76:e2:59:1f:40:4d:a6:fa:
f8:6c:ad:9c:50:ef:ff:e9:05:a7:95:60:17:9e:46:c2:28:c0:
62:5a:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:16:26 2026 by rpki-client