Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: t4vnADapmTM2rZTMLHRP+Dmfsqh+j8enAXTQk3j7m58=
Subject key identifier: FF:C3:A6:83:BB:C3:F9:9B:1F:78:19:7C:2E:7F:32:D3:D2:96:7B:A8
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 019D39099B7E8499EA07211C401BD63521DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 141A
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
2: ja4HyiBI4KYvnEsTozQU8Mp2lVA.roa (hash: Lay79psaoloZk98TsyG6C83RJH7tMee/A2Y6ldt4Zmk=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: UzQcmCMCD0ffuW3/lm8tSpGZ61sopzMzPZka4YK0FrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9b:7e:84:99:ea:07:21:1c:40:1b:d6:35:21:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=ffc3a683bbc3f99b1f78197c2e7f32d3d2967ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:e8:2a:29:7c:f7:aa:3a:f5:b0:f1:13:c5:
31:c1:8c:88:ae:67:be:4a:a5:d7:c5:60:8f:a2:b0:
c3:00:e5:d1:45:e0:6b:d3:82:21:b0:66:d3:e9:bc:
bc:ec:65:b3:43:46:77:41:9c:9a:10:6b:2e:51:e4:
be:40:60:32:8e:30:4c:a4:1e:a9:44:42:68:0b:af:
1b:b5:f2:d4:3f:7c:14:69:d2:f0:9f:bb:af:af:60:
ea:68:13:7c:45:82:f4:03:28:56:11:13:2a:a8:88:
68:26:73:c8:73:6d:72:59:b4:70:7d:dd:9d:55:b4:
14:67:77:88:2d:58:1e:d4:aa:b5:5f:3c:99:2c:f4:
b5:c7:f0:fe:e5:3e:d8:40:9a:d2:36:ba:d7:9c:8a:
e7:d0:8d:1d:2f:17:57:7d:94:02:71:db:d3:87:c1:
9c:6b:f4:5c:9e:47:91:89:aa:1a:3e:0c:03:81:c3:
92:a1:ed:cc:35:fd:53:d9:c3:3e:a9:07:1e:78:ea:
f1:2d:4f:d3:ec:d0:3e:6a:8e:34:9f:fe:35:32:fb:
83:7d:47:e8:d5:b0:10:71:81:e4:79:a2:6e:4f:d8:
15:d3:70:e8:66:25:9f:90:b2:dd:31:29:cc:b1:dc:
9d:36:85:db:e3:fa:80:53:79:8e:e4:0a:72:54:ce:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:A6:83:BB:C3:F9:9B:1F:78:19:7C:2E:7F:32:D3:D2:96:7B:A8
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:55:ef:82:8d:fb:75:e3:49:27:0c:2c:42:f6:81:fe:f3:14:
7c:d0:0b:69:ef:f7:bb:37:1e:25:2c:91:0b:ad:48:99:8a:58:
60:0a:b3:af:da:77:02:87:7b:dd:d2:b9:f8:f6:dc:0b:1b:f2:
a7:23:35:81:db:89:66:b3:cf:6f:28:2a:65:a2:fc:f2:04:11:
e7:fe:2b:a8:b1:ae:3d:39:71:c4:7d:5e:0f:01:46:76:52:43:
a2:99:e4:ab:b9:76:30:3e:be:5c:55:3b:e2:f9:a3:68:c2:8b:
7b:38:3e:94:6e:d9:47:90:15:52:26:9c:9f:a3:f1:7a:25:23:
14:d7:fa:e1:7c:47:a0:15:40:d1:41:d2:c7:f9:54:9e:e4:9e:
02:f9:c6:fa:68:64:a4:47:57:bc:25:a0:d6:6e:84:ec:df:ef:
8b:e8:2d:c4:cf:e8:34:81:8b:d3:6d:cf:4f:9b:27:4e:da:38:
22:ea:29:42:7c:d0:26:56:eb:cb:bf:62:31:65:07:97:8b:95:
e4:2e:01:4b:5d:4b:84:37:93:85:49:b2:03:20:4d:ca:fe:9f:
84:9b:ba:5c:19:9d:0f:72:7f:b7:5f:4a:31:5a:99:52:17:88:
2e:34:c4:4a:4b:e1:c3:c0:d5:6b:52:6d:41:62:07:7e:62:e5:
84:77:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:32 2026 by rpki-client