Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: 1cLSsj08ckIrlYZ2Y6d8dcAHz7NELa07LKhYQojripg=
Subject key identifier: 53:31:88:4B:14:73:6A:C7:2E:DF:06:7C:2B:57:DE:D9:F0:9F:7E:10
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 019D37F75A36ADD659D39F2A4615AD948072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 0758
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: T8FgvoFG0dIPGHcrRIAon6OGlt31HCAYcytBk7pR4kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5a:36:ad:d6:59:d3:9f:2a:46:15:ad:94:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=5331884b14736ac72edf067c2b57ded9f09f7e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:68:b8:d7:81:31:7d:9f:29:4b:9d:af:a2:
32:b5:0e:bd:43:06:15:9d:9d:10:aa:f9:99:07:84:
24:42:e1:07:f6:f0:17:6d:c1:eb:c1:aa:d8:9b:2b:
31:a4:f6:5c:67:1b:6b:e5:aa:65:ce:c6:24:7d:f7:
dc:ea:2f:1a:a9:45:f5:d2:ed:42:06:28:4e:9e:fe:
8f:dc:b3:34:9c:75:ef:8e:3c:be:b2:d5:bc:da:44:
31:1b:0c:1a:29:bd:25:6c:e5:c5:15:97:61:64:3e:
5a:53:7b:5d:ed:8d:79:6e:d5:8a:21:25:0e:2d:76:
bd:d0:a2:34:f8:8d:a0:bb:2e:3f:0e:90:81:ec:ec:
dc:5b:a2:56:b7:65:3a:74:3e:72:2a:40:59:d6:a9:
e5:9a:09:43:88:b1:3c:3d:74:4b:94:1f:52:70:4d:
a9:4f:5d:73:1f:29:c9:71:f0:e5:7b:26:35:bc:60:
35:6e:ff:90:84:3c:6e:e9:49:b1:36:a3:d5:75:f5:
5c:1e:55:82:3e:49:d9:d3:ef:8c:11:ca:3c:98:72:
91:2c:03:d4:6d:b4:f2:a6:e2:2b:4b:2c:b8:97:2b:
fc:54:df:02:88:9f:7c:79:4b:98:39:52:9d:4a:81:
8a:58:7b:6a:d1:d6:f0:6d:a9:fb:4d:ac:21:b9:e4:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:31:88:4B:14:73:6A:C7:2E:DF:06:7C:2B:57:DE:D9:F0:9F:7E:10
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8e:50:65:54:bf:60:33:a3:97:e0:77:c6:6e:a7:a3:49:86:
6a:48:1c:7f:a8:6c:44:1f:01:ec:db:20:a7:dd:0f:cd:52:b1:
31:97:e7:86:30:e6:b3:a7:0b:02:eb:9b:ef:44:a2:79:5f:aa:
ca:f6:89:d6:80:c5:ac:eb:c7:cc:f9:14:44:c0:76:a2:54:7d:
35:34:5e:3b:5b:1a:4f:c6:fd:ed:2c:75:80:a5:00:e6:b0:3e:
3e:1c:21:a7:2b:16:fb:ad:8c:5b:18:a5:e6:01:27:8f:6c:08:
ba:b8:7b:3e:49:0a:b4:c1:9e:0a:2c:3e:e6:24:ac:ba:85:97:
32:00:e2:b6:4d:7d:8b:54:d2:b2:18:26:05:46:14:3f:31:0e:
e8:22:43:f3:9b:fd:81:94:c2:97:c1:b2:49:a6:56:20:95:ab:
79:a4:c7:6e:f9:7a:01:6c:7c:0c:88:16:97:60:29:0e:e9:9b:
98:92:14:23:90:20:6d:d8:9e:8f:96:bb:2f:5b:f1:a4:ac:7f:
ee:e8:6d:40:dd:67:6f:11:6e:f9:67:ce:a6:4e:ea:51:5a:2d:
b6:33:3c:ae:99:1e:d0:a5:e6:ab:8c:cc:6d:d3:59:4e:a1:2d:
f4:50:dd:1e:7c:33:af:25:7d:c4:12:dc:1d:69:0c:09:7f:ff:
61:ea:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:50 2026 by rpki-client