Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json)
Hash identifier: ocflvzjIJHeT99c9JdWO4WjwvKvMrjbKKz0wl1kPHmo=
Subject key identifier: B8:87:19:B3:AA:4E:E8:12:89:0D:39:FB:06:F1:F3:D0:75:22:E4:FD
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial: 019D3940DD242DD9F0B38D9F42E277A1AAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
Manifest number: 06D5
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: arEWxGjVNSq334y6Ktt8aDjalyE.roa (hash: TaWGOyG5nBxY0egiO8Xs2dGnWrPRgWPcphWefnhZTWM=)
2: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: T05FLc3n4cNuQzy+Q3/f/a53EuEhUjxEVMdK+nFETi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:dd:24:2d:d9:f0:b3:8d:9f:42:e2:77:a1:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=b88719b3aa4ee812890d39fb06f1f3d07522e4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:15:dc:fa:68:83:4b:ca:9c:32:1e:fd:cb:
b7:83:f6:50:a1:6a:d1:49:54:bc:74:83:ba:89:01:
69:c1:83:c4:79:d8:81:b9:28:fd:9c:a7:db:8a:cb:
2a:52:c3:b7:fb:57:e5:ed:c3:90:34:8d:b4:20:e6:
2f:ef:ab:1a:3d:fb:de:e7:e7:2a:0d:3b:e8:ec:66:
c8:64:cc:69:3a:43:66:ba:cb:46:c1:f5:7b:b1:91:
7f:f9:c4:79:60:8f:d0:ef:24:7a:a2:f1:80:df:46:
3a:cd:38:c8:47:c2:7d:b9:3e:5b:e9:8a:fd:2c:b3:
42:74:3a:de:81:97:6b:76:d5:a3:bd:bc:fa:24:4b:
88:34:fe:36:08:17:46:3e:64:6e:44:0a:3a:b9:6c:
53:d8:56:4e:0a:64:1e:0b:0c:b0:79:d2:cb:e6:57:
2a:85:9d:b9:e1:a7:d7:a2:63:39:b5:3f:61:bc:84:
53:40:7c:d0:55:44:d6:db:44:e9:da:a1:84:62:e1:
b6:70:a5:04:76:8a:53:e6:5e:1d:40:ec:73:50:9e:
ab:3a:f0:b9:51:f1:91:2e:aa:34:bb:9b:27:7e:b0:
85:d0:ae:f6:59:69:f3:1e:6b:f3:20:64:4a:ff:50:
cb:33:1d:ff:17:dd:c2:85:8e:5b:50:41:aa:92:7d:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:19:B3:AA:4E:E8:12:89:0D:39:FB:06:F1:F3:D0:75:22:E4:FD
X509v3 Authority Key Identifier:
keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:47:25:eb:ac:45:fa:7d:d6:42:a2:40:6c:7e:92:76:82:1c:
cc:b2:52:b9:dd:1c:0c:42:6d:d7:c8:d4:7a:c5:aa:b0:8b:ed:
8e:c2:1b:7a:cd:9d:ca:ad:52:23:79:8c:84:9f:04:46:ca:be:
ee:ad:5e:e9:97:c3:b1:0f:31:75:81:a3:53:58:29:47:3d:ec:
d2:50:3a:c3:7c:1d:bf:14:68:21:67:68:32:9f:28:a1:c0:31:
29:7b:4d:7b:87:85:64:2b:42:cf:4d:31:61:82:4f:d3:0d:53:
d9:80:78:89:ea:0d:17:58:75:60:e0:cf:b1:cd:96:ff:9c:b2:
bb:e0:b9:2a:96:ff:84:a8:d4:c9:84:37:19:77:9f:c3:4c:52:
ce:7c:3f:14:96:dd:d5:28:4e:c3:40:3a:c6:bf:fc:a5:c2:4f:
97:49:16:97:47:ef:14:1f:c9:1a:c9:f0:5a:f3:16:5a:ad:a5:
16:1c:f1:9a:fb:f6:ef:2a:52:d4:c9:3b:2f:d5:f8:c8:bc:c8:
64:b0:4a:e4:e5:95:1e:a2:fa:2a:69:20:af:69:fd:f6:8e:ca:
63:12:ff:f7:57:10:4b:9e:b2:94:c6:c3:09:9b:f3:54:56:cc:
bb:8a:38:4d:0c:ce:93:9f:e1:00:11:bd:a7:4b:6c:4b:f4:6d:
76:56:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:52 2026 by rpki-client