Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: 1M0qXiCwoqbdZdFGmbXKAbX3R4se67D/ZLJG+R/eols=
Subject key identifier: 87:77:36:FB:53:60:52:F7:8E:1C:D0:43:9B:FE:73:05:F1:CA:4E:D7
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 019D39AF61014324A3D2417E54F48906F4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 1831
Signing time: Sun 29 Mar 2026 13:01:28 +0000
Manifest this update: Sun 29 Mar 2026 13:01:28 +0000
Manifest next update: Mon 30 Mar 2026 13:01:28 +0000
Files and hashes: 1: HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa (hash: nQkhhNw6S8PZEQHevPsGMLpoMsMwEk7juRVeNkbr0JM=)
2: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: j2ykZuvsaG5NgNpw3t7QBrk4weMG4R4hmwmTH44y1MU=)
3: wA3yzq_z75jJrcxF21_yaXTLA1E.roa (hash: iBqEBSf11enOfh3VlmmIO8pdDcGFw1PdUgNRwZ2N9r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:61:01:43:24:a3:d2:41:7e:54:f4:89:06:f4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Mar 29 13:01:28 2026 GMT
Not After : Mar 30 13:01:28 2026 GMT
Subject: CN=877736fb536052f78e1cd0439bfe7305f1ca4ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b0:89:4c:23:5e:c7:33:e7:fc:75:0e:c6:7c:
7b:f5:7d:33:e1:39:dd:36:d7:41:3f:cd:46:12:f0:
4f:a2:c3:86:78:18:6e:e5:02:cf:b1:bc:92:12:42:
78:26:2f:26:3a:d7:70:8d:eb:54:fd:e4:6f:35:a4:
06:4b:49:f8:90:db:0b:33:70:68:97:c8:69:0d:9c:
4c:b5:cf:27:85:e0:be:7e:80:9b:17:0f:26:09:d9:
60:86:90:59:25:49:a5:8a:99:63:0a:8a:3c:c1:83:
9c:10:68:40:4f:34:7d:f3:c8:25:43:3f:bf:6a:36:
a9:39:d7:b0:83:b0:5e:2c:1f:ec:e2:2a:a0:97:16:
35:b6:e5:a0:7d:1b:ab:b6:fe:1e:6a:05:2d:dd:fc:
17:42:59:52:30:c3:63:c6:0e:03:94:14:1e:1c:e4:
1a:10:a5:cf:a2:47:57:55:77:2e:bb:95:8e:15:f8:
de:45:1f:5b:df:81:06:51:eb:7b:e0:67:0a:e6:e0:
ac:26:e9:9c:ac:4a:ac:33:22:e2:52:6f:5f:cd:44:
87:4c:30:47:0e:86:73:81:02:94:25:64:da:a9:9f:
fe:40:9a:e0:d2:0e:32:ac:33:b1:b6:9d:b0:7c:83:
d9:00:48:d8:87:97:02:ab:b4:03:b3:95:a6:86:78:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:77:36:FB:53:60:52:F7:8E:1C:D0:43:9B:FE:73:05:F1:CA:4E:D7
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:12:1f:7d:3c:f9:7f:2f:56:a3:a6:52:a9:9f:f1:02:05:de:
9f:78:7f:69:db:d5:34:15:3b:61:38:f5:e0:48:a4:cd:f2:06:
70:9d:ec:50:30:63:f1:27:12:34:00:95:e3:1c:8f:2f:eb:3d:
9d:08:24:b6:fc:98:50:80:ae:f4:70:27:24:1f:79:51:fc:ca:
fa:4e:ce:1e:24:2e:e0:03:b5:04:a6:73:49:27:fd:36:79:34:
9a:40:c2:35:67:ef:a0:1d:5b:32:55:cb:e6:3a:c7:66:b2:32:
dd:38:a0:20:41:71:6e:14:c8:77:4e:77:98:47:67:95:8a:81:
bc:9f:15:71:02:f9:e7:1a:36:75:ca:a2:8f:69:c3:f2:00:2c:
b9:e3:ad:42:21:f9:d7:67:45:bd:e8:6f:15:62:f4:ef:68:82:
3e:5a:f8:0a:df:84:0a:6c:3d:12:53:75:ae:75:f8:f8:d2:93:
09:43:c6:06:9a:68:f9:43:b4:9a:da:a6:bc:c5:54:8f:95:9b:
67:87:33:d2:4d:93:27:61:e4:b2:0a:e3:4a:03:5b:e9:15:4b:
10:f5:82:11:7b:6e:13:37:65:72:68:b4:8b:8e:ac:26:7f:dc:
28:58:fd:43:59:95:c1:d8:bd:17:34:4d:d4:5f:5e:4f:e8:de:
be:df:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:17 2026 by rpki-client