Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
File: qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft (raw, json)
Hash identifier: BEfPYfZYFgh2/as5jdvuzBaySytSNtyYluMzTSwQwok=
Subject key identifier: 6D:1E:38:CA:96:EF:6E:18:EE:D3:C4:0A:59:90:77:4C:FB:2C:70:40
Authority key identifier: A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB
Certificate issuer: /CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
Certificate serial: 019D37C1194C2C32100F04319AFD2C0C021B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
Manifest number: 01E0
Signing time: Sun 29 Mar 2026 04:01:34 +0000
Manifest this update: Sun 29 Mar 2026 04:01:34 +0000
Manifest next update: Mon 30 Mar 2026 04:01:34 +0000
Files and hashes: 1: SV-k7vOmp78ptABWGmNdtZgKTUE.roa (hash: Y6g0l9jHxH9c7iY6DMqcSeYaKKVNRITzYxEL75xHrLg=)
2: qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl (hash: oRYeyBIoxnfEDERx5iuMR+e7sA4/KC4JcQn0XKYfd+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:19:4c:2c:32:10:0f:04:31:9a:fd:2c:0c:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
Validity
Not Before: Mar 29 04:01:34 2026 GMT
Not After : Mar 30 04:01:34 2026 GMT
Subject: CN=6d1e38ca96ef6e18eed3c40a5990774cfb2c7040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:bd:0f:45:59:5d:92:f1:cb:d0:15:e0:07:
bb:9f:65:91:df:08:09:8a:de:0d:20:9c:68:9e:8e:
6b:e1:36:50:e6:e9:0f:67:cf:2e:25:11:4f:03:3a:
f0:c9:be:f2:e5:76:0c:5c:f4:b2:d6:36:14:e0:5b:
0c:4a:e2:08:62:a2:18:40:22:1a:c5:95:a8:56:6f:
ad:d6:91:99:cb:22:8b:8a:44:8a:2d:dc:a7:96:ca:
5b:78:90:85:22:56:14:5b:b6:6a:d4:28:da:cd:b7:
06:cb:4d:e1:dd:08:e9:21:9a:8b:a4:28:52:fa:14:
a9:60:8c:1e:41:92:90:7d:f6:ba:de:1d:f7:2f:0c:
7e:ec:41:b4:6b:cc:81:a6:c6:af:76:73:19:fa:9e:
25:10:17:af:96:36:2a:ed:61:73:6c:15:7f:58:90:
ec:76:3c:32:c0:b5:76:74:2f:82:b7:52:0d:58:1c:
51:50:31:7f:d5:ca:20:53:c3:9f:8d:6a:44:45:ab:
70:97:2a:fa:29:a1:8c:85:b9:6b:f3:2c:ac:99:dd:
67:9a:f4:89:f4:af:f2:f2:32:75:92:24:67:0a:3a:
d4:c3:4e:6a:a5:4f:e0:de:fe:19:84:29:4a:f9:ec:
dd:a2:a2:57:97:66:df:27:32:31:d3:2f:91:7e:a2:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:38:CA:96:EF:6E:18:EE:D3:C4:0A:59:90:77:4C:FB:2C:70:40
X509v3 Authority Key Identifier:
keyid:A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:ab:73:e7:fe:c9:56:0f:49:2c:39:06:7a:b7:5a:32:ad:
5e:2d:dd:3a:53:44:54:af:8d:04:95:82:c7:20:c5:68:1d:05:
7d:ce:95:6c:a1:02:a7:fb:ee:9f:fa:dd:8c:ce:14:79:b9:32:
9b:ef:d1:a3:7c:d5:e2:e9:ec:c7:f2:9f:86:7f:58:03:b2:46:
20:d3:19:af:0c:2e:e6:18:89:8a:b4:18:b3:f5:07:e1:9d:25:
aa:b5:8a:1b:d7:02:6d:02:d1:c0:54:28:b8:ad:f7:81:8d:66:
e1:6f:e6:7a:05:a1:24:83:9a:cf:b3:5d:94:88:1b:0e:ed:c6:
84:21:a0:1f:af:24:f5:8a:53:00:50:34:55:04:ea:ef:74:1d:
7b:5a:7e:28:55:cb:19:63:b1:f1:6f:d7:4c:66:9c:0e:0d:c6:
8b:f4:93:af:f4:3f:56:39:88:c2:d3:03:91:aa:d5:d5:3a:9c:
bb:5b:3a:24:b9:30:05:3b:a4:03:d9:47:89:06:9b:95:f2:63:
c3:29:3d:4a:4e:bc:82:87:20:3a:5f:ef:ec:32:85:f6:f1:6d:
3d:c1:ab:18:3c:1e:0e:ed:b9:6e:40:c6:60:db:98:21:a9:8c:
0d:6a:00:2b:aa:11:9e:a7:a2:73:84:ba:b9:72:10:4d:a0:d2:
20:2f:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:46 2026 by rpki-client