Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: xJj4IvMQccYPUNly9IbPMNF0TGDCJgCzqZD5vmwJRWA=
Subject key identifier: B2:03:42:F4:2B:69:49:55:C2:FD:BA:1A:56:DB:C9:40:02:D3:73:BF
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 019D382DDF4E1FCF0AAE26033EB6946755F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 0AA2
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: YlLnB86IXkq5DqHFRcLfiGrXSvOZ0TFQgFincS2m8kw=)
2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:df:4e:1f:cf:0a:ae:26:03:3e:b6:94:67:55:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=b20342f42b694955c2fdba1a56dbc94002d373bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:a4:61:18:ab:65:77:91:fe:a5:76:6c:d7:
ab:8a:9c:27:8e:c0:94:c8:84:67:c5:86:26:62:99:
2d:c4:06:86:e6:9c:a9:f1:db:14:e9:40:1c:f8:b0:
aa:e7:d6:e9:07:b0:27:09:bd:43:cc:b1:d0:f5:0c:
cd:ae:e7:71:92:21:c6:50:65:6f:52:68:4f:e8:26:
93:2c:a2:f7:97:78:c6:5d:7b:3e:1f:16:de:c1:44:
fd:d4:6d:51:09:3e:80:c7:44:1e:11:b9:d5:c3:60:
25:ab:f4:e9:93:7e:34:3e:66:e2:da:6a:47:e2:ad:
4c:f3:d2:2c:b6:18:03:c4:70:36:84:5f:64:fe:24:
5f:3b:20:28:b1:53:8c:b2:e9:22:8c:9a:e0:ca:86:
a1:db:dd:99:f1:1c:a8:ec:1c:62:e2:53:55:fd:a7:
cb:b9:01:0b:f6:5e:03:10:ae:0d:cb:e4:cc:14:06:
66:63:b9:01:ad:de:48:3f:d6:b0:31:f3:7d:b2:3e:
d2:4b:0a:ed:64:66:67:c0:c9:22:6b:03:a4:65:e9:
96:77:92:d7:6b:d5:cd:65:7c:57:f9:e8:93:7d:68:
44:b4:c0:71:6c:93:b7:8f:6b:19:20:5a:18:12:79:
c0:06:0b:96:c7:59:61:9a:af:68:b4:16:40:06:ed:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:42:F4:2B:69:49:55:C2:FD:BA:1A:56:DB:C9:40:02:D3:73:BF
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3e:f6:e0:0b:26:41:1a:bb:1b:0f:82:21:6a:0a:97:99:91:
76:8e:48:8e:b7:40:a9:a9:5e:eb:63:11:3d:95:c4:4b:94:b6:
20:17:d2:b0:92:fc:81:fd:21:53:70:78:4b:1a:a0:55:85:a1:
30:08:e4:56:2e:cc:ea:54:9b:e4:00:ad:af:34:88:04:7d:0a:
83:64:87:ce:d0:de:e1:8c:ff:c1:ae:c5:aa:4d:0e:7d:2b:a4:
ba:90:5f:24:bc:a7:f3:c7:fd:ec:90:51:dc:b8:ab:ea:75:eb:
07:02:9c:85:42:90:5f:32:9b:e8:9c:58:a7:69:c5:56:74:e0:
60:bc:18:f3:ab:ba:f8:70:1f:f5:90:56:f4:71:38:c8:c1:a5:
88:59:15:85:d2:83:a0:c6:37:9b:06:1c:ed:84:61:d8:c8:25:
fd:b5:44:0c:0f:26:94:57:b4:2a:65:6c:11:c9:18:a6:d3:b4:
25:08:e6:18:21:61:03:1f:98:4b:5e:72:88:9f:4d:06:12:b4:
f0:3c:dc:68:1e:4a:24:3c:51:d5:46:74:0c:86:2c:f7:0f:71:
b1:e0:fd:50:be:b5:28:7e:f6:ba:b1:c4:e6:74:00:28:43:d6:
88:fd:c9:93:24:de:a4:b9:84:48:23:e4:cf:9d:46:ca:83:ee:
2b:59:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:27 2026 by rpki-client