Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: VQ+TfIzC43g0R7Tps0a6EJqur+bcq7yigKrQr2PdLeU=
Subject key identifier: 30:E9:26:DB:37:C8:C2:44:1E:B3:81:A9:3F:96:F5:D9:14:FA:11:ED
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 019D375217F974555D8AE13B93739CAC662A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:19 +0000
Manifest this update: Sun 29 Mar 2026 02:00:19 +0000
Manifest next update: Mon 30 Mar 2026 02:00:19 +0000
Files and hashes: 1: 3qtjPVhy36B112_T9YD_k1D7PrQ.roa (hash: TnLbrW8cdvU0sgFs8JL8GKZ+s8BUvq1O8YCehip/3/4=)
2: b-_QLOAaiTLnrdshp-MjmUbpJAQ.asa (hash: zE9zRSorao8ZT6ov8SMASzQ+KxaurOF00HS44oG3cE8=)
3: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: lYXER2TDTWa9r9i2lNAaBNf8fOOMuIGWMbUNBwhYXUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:17:f9:74:55:5d:8a:e1:3b:93:73:9c:ac:66:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Mar 29 02:00:19 2026 GMT
Not After : Mar 30 02:00:19 2026 GMT
Subject: CN=30e926db37c8c2441eb381a93f96f5d914fa11ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:c5:cd:39:f1:c8:53:57:39:36:c0:ee:a0:
23:65:35:73:eb:4b:d2:20:87:d1:b8:4b:b3:83:9a:
f0:82:e7:3b:94:39:4e:30:b2:f3:2d:f6:2f:39:de:
18:d4:d3:75:17:6f:bf:67:e4:0e:bb:fa:f1:43:be:
d4:52:50:1f:03:ac:cb:ea:2d:60:8b:5f:e4:91:eb:
24:c9:29:fc:f6:4e:ca:53:18:ec:e2:ab:10:ea:6e:
f4:60:e4:8a:10:76:b2:1e:cc:5e:23:02:31:a5:8d:
f5:00:d9:ba:07:f8:18:e9:67:f7:69:58:03:60:c4:
0c:a6:45:27:ab:7c:f7:fd:a1:9e:0f:8e:32:5d:d3:
bd:69:82:ed:c6:bf:ea:f2:ef:a8:42:44:3b:97:96:
1e:ef:49:c1:fa:a7:76:a5:05:dd:d3:64:80:43:99:
d8:c9:2b:30:03:64:4a:da:38:b2:de:46:f4:b6:38:
f4:a7:f8:08:16:3b:44:d5:cd:27:97:d4:b0:e9:11:
2d:99:68:42:a0:d1:8b:2e:d3:e9:8b:d8:ea:f9:a1:
bd:f1:ab:69:f8:ce:1e:6c:4d:f0:13:90:6c:8f:4d:
98:bc:fb:5f:2b:6a:67:d3:8d:a8:3a:ec:9e:32:06:
13:de:07:6a:42:7c:81:90:18:72:e2:f7:5b:cf:85:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E9:26:DB:37:C8:C2:44:1E:B3:81:A9:3F:96:F5:D9:14:FA:11:ED
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fb:1d:63:41:05:56:9d:e3:0c:4e:f5:9f:e3:8b:66:c8:be:
62:02:6d:93:f0:35:d9:a0:90:74:df:97:3c:95:07:a9:d3:68:
31:ee:fa:ac:c0:68:c3:78:e3:a0:9e:e8:ca:b2:0e:95:5c:34:
1f:bc:f3:9a:d8:e6:ed:fe:c1:39:09:b2:ed:5b:d4:b8:41:9a:
4b:c0:87:f4:16:74:8f:6c:70:d9:9f:9f:2a:ae:e7:6c:d8:76:
fd:ae:97:5a:cf:a0:6e:10:94:ca:70:70:85:f4:a1:85:fe:d2:
60:9c:bf:19:ab:c9:85:3f:6a:1d:56:f4:57:da:11:43:ff:33:
2e:e9:c8:f0:6e:0e:fc:2d:75:1b:14:34:21:79:62:79:51:71:
b8:ba:de:ba:2d:83:25:46:cb:24:2a:28:5e:af:77:3a:77:ef:
f1:89:b1:a3:6b:dd:24:2e:1b:8d:49:a2:87:f4:00:72:02:06:
12:28:a6:12:36:8a:dc:d0:05:0a:a4:80:cf:92:54:70:39:2d:
3f:3e:d1:3b:4b:5b:24:54:be:9b:56:66:73:da:0d:92:dd:b2:
f0:6d:97:6c:3e:e6:25:d9:07:54:97:86:d1:45:e1:9a:7b:ce:
fb:d7:a1:e1:ff:27:96:bf:d0:6a:6f:46:61:62:f9:a8:47:5d:
b7:6b:56:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:41 2026 by rpki-client