Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: R6qQmZdo9mPsuA6nxH520V6Dgy4VfiUnOeSyllnU8q0=
Subject key identifier: 33:97:F0:B8:D5:D0:29:FC:94:A4:7D:55:CB:AD:9B:77:F9:BB:12:7C
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 019D3752DC30C84D1ED417293266A6D7428C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:01:10 +0000
Manifest this update: Sun 29 Mar 2026 02:01:10 +0000
Manifest next update: Mon 30 Mar 2026 02:01:10 +0000
Files and hashes: 1: BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa (hash: e4XrjTZT9DVKsoP6xpDG68p8DkyaP4kbQPdVBr18Zts=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: bzSveluZuwrKvujkznNZbci19rzgTWiy1bl3Mj83iZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:dc:30:c8:4d:1e:d4:17:29:32:66:a6:d7:42:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Mar 29 02:01:10 2026 GMT
Not After : Mar 30 02:01:10 2026 GMT
Subject: CN=3397f0b8d5d029fc94a47d55cbad9b77f9bb127c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:c9:05:f4:86:08:4f:a5:58:77:15:e4:0f:
70:22:8f:36:6d:d4:3f:6b:1a:71:ae:7e:c5:70:5b:
85:a4:6d:80:ae:a3:04:9b:80:4f:9b:48:67:e9:40:
65:3e:76:47:30:2b:d9:80:0e:60:3c:03:d2:01:69:
11:b0:32:5b:dc:86:cf:15:48:17:99:f8:10:9d:07:
a0:b0:0a:56:76:57:af:61:af:53:db:b5:cf:82:74:
88:a1:cd:22:e7:4e:97:f1:80:61:12:8f:28:b8:fb:
0d:e0:8e:81:83:bc:80:87:51:d9:d3:11:c7:69:11:
b9:7f:2f:03:51:f4:cb:8a:95:a6:c3:3a:d0:11:5a:
0a:97:0d:cd:14:f9:cf:b7:cb:a1:0c:4e:46:d2:34:
25:c9:33:91:51:dc:82:ec:e4:3c:1a:33:3e:28:3c:
06:c7:fd:fa:6e:cb:3f:70:bd:42:41:7f:1c:e1:e8:
da:95:6f:0b:db:96:4e:45:3c:01:a2:84:32:f3:fd:
e6:87:28:d7:cf:d0:e6:ba:ea:a2:29:86:44:96:dc:
60:cd:cd:6f:7e:f1:29:17:07:8c:0a:26:7f:50:4d:
d5:3b:f6:7e:fd:f9:02:8d:e6:2f:74:db:e5:a4:2e:
0d:ad:04:cd:b0:e8:18:87:3c:9f:a5:90:a8:dc:57:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:F0:B8:D5:D0:29:FC:94:A4:7D:55:CB:AD:9B:77:F9:BB:12:7C
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1a:3d:19:d5:52:8e:0f:cb:e2:20:11:bf:3d:db:27:30:01:
03:96:19:e0:8c:65:88:c6:24:2f:ff:75:e2:8a:2c:7c:49:d3:
a5:5a:3c:64:92:40:4f:75:87:86:80:37:c8:05:75:48:2b:ec:
65:b6:20:de:3f:8c:46:33:07:d1:22:74:c2:4c:42:33:1c:b8:
8a:e8:2b:c3:66:b5:de:01:04:ae:3e:ff:c9:16:b3:f3:ca:39:
5f:de:c0:e3:4e:f8:36:46:49:b1:23:e3:24:5d:be:91:29:a9:
3e:9a:0d:25:e5:85:3c:00:29:8f:50:8a:4f:0d:ac:d5:f9:02:
81:d8:ba:5f:d2:ae:96:a3:d4:05:26:d8:fe:04:28:6f:a0:f4:
81:82:a9:9b:3f:b5:6f:a0:36:94:88:aa:11:1f:fb:8a:7e:e8:
d2:53:d7:fa:36:20:ab:29:e4:73:48:21:ab:09:4d:81:12:6a:
1c:69:73:8d:a3:30:a2:d8:32:09:6a:58:b2:dd:9e:77:6e:3f:
84:a9:c4:29:42:08:62:f2:8c:f4:a9:6c:43:a0:04:0e:be:be:
19:85:74:1d:dc:cf:38:98:ca:6b:18:d4:e0:97:41:04:97:98:
51:b3:81:3a:1d:9b:34:53:3a:a4:06:2e:05:ec:1a:88:db:dc:
ec:3a:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:54 2026 by rpki-client