Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: 4EvW27LOvdrswERAh7r17Uu093NmsKhe4pp2fVkKJEg=
Subject key identifier: B3:D3:24:E8:66:06:62:29:65:C6:55:6D:DF:23:BD:D9:60:7E:4C:62
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 019D37C073D056507116044A28F80D04613E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 0595
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: 2AIE+pgKvZfcyrM3x8hwdqRK0Do5Gx4nWbnqMIa6OuI=)
2: xQVJZ8XeKi_qZ897AqedzU_uyhs.roa (hash: XTuOm3CC6G0L/jW20RlJG4su70zRym46AnwfyGu3Vek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:73:d0:56:50:71:16:04:4a:28:f8:0d:04:61:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=b3d324e86606622965c6556ddf23bdd9607e4c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:c2:9d:85:0a:a7:27:37:be:8c:3e:55:65:
fb:fa:c5:2d:96:b9:c5:56:d8:8f:0a:3f:74:6c:49:
4b:b0:6f:f5:60:e9:22:b7:4b:89:05:3f:2b:f6:24:
3d:db:ee:93:82:51:61:28:82:34:aa:04:c5:c4:d1:
6b:32:56:1a:6c:38:35:f6:19:56:6c:72:c6:95:a0:
11:53:97:c9:d6:fd:9a:c4:f6:54:5c:60:e6:5a:a6:
ae:a8:b4:90:39:21:f9:8e:ec:34:c8:30:9e:f9:84:
59:17:77:2c:54:54:1b:56:9a:58:81:77:52:4f:a1:
62:2c:78:e9:7f:06:9f:dd:2b:7e:b5:1b:5d:be:06:
25:ba:5e:82:21:60:2c:d4:54:0f:ee:48:61:06:b2:
21:8c:ae:02:ee:02:5c:d4:9f:01:26:a8:3a:a6:88:
eb:c5:8f:45:63:74:f3:b6:27:44:2d:0a:80:a4:f4:
a5:15:2b:ce:d8:0b:8e:69:31:11:ea:7a:e5:f0:bd:
6e:19:27:d5:2e:41:ba:bb:cf:4e:b6:37:da:d5:dc:
a3:de:aa:9b:00:09:8e:d6:18:fa:29:46:a2:49:4e:
f2:1d:63:ff:68:14:2f:9b:b0:3b:ee:c2:73:da:0b:
43:1c:8f:3a:82:48:07:cf:89:9d:29:6d:15:c4:da:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:24:E8:66:06:62:29:65:C6:55:6D:DF:23:BD:D9:60:7E:4C:62
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ad:31:e8:f7:f0:17:e7:86:5a:d7:6f:92:25:cb:be:03:a1:
ef:a9:25:a3:28:22:96:f6:7d:38:90:39:b2:02:c3:3f:84:9e:
19:d7:ac:8d:57:aa:cb:12:09:a6:f0:5b:df:44:1d:79:d9:14:
77:b8:39:1c:a3:31:cf:94:48:8e:e8:0e:b6:5b:1b:0f:c6:52:
12:ff:c7:55:7c:72:cd:2f:fa:e4:01:70:29:9d:85:ef:eb:7e:
ed:9b:3d:41:ec:2d:97:f1:e2:93:43:9a:20:7c:68:db:9c:99:
7d:99:64:3e:34:cf:28:fe:f5:c5:13:0f:f3:45:2b:60:76:f9:
98:95:2c:05:b4:11:65:f4:59:f5:be:0a:52:23:b3:74:d6:fa:
20:74:8a:d0:48:c7:77:05:75:1d:80:bc:c4:43:2d:1c:7b:8b:
cf:0b:1d:a0:a0:25:46:81:58:59:11:93:ce:d6:9c:4e:34:02:
3e:31:df:7b:91:48:9c:60:d7:59:28:2a:72:fe:67:bc:73:ed:
48:e9:50:f1:76:24:b9:29:24:b5:f0:4b:0d:25:c7:05:2d:49:
21:66:b0:67:38:52:7f:87:5c:ae:ed:e3:93:36:2e:37:13:ff:
5e:f5:89:c9:c9:af:80:ba:4f:3f:e2:e9:20:6b:fc:40:3b:5f:
f7:24:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:41 2026 by rpki-client