Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
File: qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json)
Hash identifier: v4ll5/vRd9yuAltrtoaHNIf2zV6pkXPmSK5L0ZteUrw=
Subject key identifier: AE:2E:D4:F6:24:09:31:7A:AB:ED:74:94:E8:98:A1:5E:1B:38:F7:1F
Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Certificate issuer: /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Certificate serial: 019D3AC155CE52732289C7558C36D5F2AD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 18:00:42 +0000
Manifest this update: Sun 29 Mar 2026 18:00:42 +0000
Manifest next update: Mon 30 Mar 2026 18:00:42 +0000
Files and hashes: 1: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: TI+VBXKdFptG4I8SixsI9zGg+hQa1sxBo6BHPr6Dnbg=)
2: z_aohf0nvgrxwGRTbVmz5aObwgs.roa (hash: uED0obTkRG8cxn/WVBRgbTdBw3zAOTzzg1FW8rl0WuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:55:ce:52:73:22:89:c7:55:8c:36:d5:f2:ad:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Validity
Not Before: Mar 29 18:00:42 2026 GMT
Not After : Mar 30 18:00:42 2026 GMT
Subject: CN=ae2ed4f62409317aabed7494e898a15e1b38f71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:41:40:a9:c2:b3:2e:6b:fb:1f:0e:51:22:0d:
ff:43:e5:3b:73:60:39:4d:dd:bb:77:59:09:8d:3b:
14:03:ed:64:b9:0d:a2:87:2d:42:7f:35:14:d7:a0:
61:41:96:84:5c:af:9a:2f:ca:e1:ba:2f:56:66:21:
07:3d:db:26:99:7f:37:a1:5e:a3:ba:dc:ea:0e:31:
18:86:ec:e5:d6:a4:48:97:5e:aa:fc:91:30:0b:c4:
c7:6b:9f:5d:c2:0c:2d:8b:42:02:ae:82:c8:92:ce:
dd:dd:c6:60:a4:55:0c:0f:b6:bb:c9:99:1e:93:28:
c9:41:1b:db:57:46:a7:eb:65:7b:df:f1:da:b3:1f:
96:6b:63:fd:37:19:d3:39:18:9c:08:ae:b6:e9:32:
0b:62:66:34:69:1d:f4:41:1f:33:48:6e:bd:79:db:
19:8b:f2:e3:c3:ae:8b:6c:5f:29:27:f1:6c:48:95:
04:a3:ba:07:c6:32:5a:30:0d:fb:f3:86:9c:b8:ca:
99:5a:cc:63:7a:89:4c:23:56:d2:fc:7e:f5:7c:08:
6d:40:b4:d8:eb:34:21:ea:0f:ba:9b:59:11:e2:b4:
4a:ba:b9:2b:b7:73:1d:4c:fc:15:72:f0:2d:0f:30:
fe:49:15:24:db:eb:00:d5:21:b0:9d:a0:d4:ce:45:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2E:D4:F6:24:09:31:7A:AB:ED:74:94:E8:98:A1:5E:1B:38:F7:1F
X509v3 Authority Key Identifier:
keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b3:bb:0b:76:24:cc:15:ce:8e:1a:76:88:db:1c:a9:22:36:
af:a8:84:b2:70:d9:bf:63:1c:5c:bd:41:2b:b6:f3:85:88:ee:
f6:dc:d0:ee:b8:f4:36:22:d4:0d:4e:ef:f3:e0:73:e6:00:0d:
95:ff:af:93:1a:13:f0:1c:90:9f:7e:16:f7:94:6b:96:5d:2a:
a8:44:6e:d6:fc:62:a0:15:b8:d4:54:ea:73:1a:26:65:63:df:
9e:be:05:db:72:d1:81:32:6a:0d:34:fd:ff:53:7c:20:cc:c8:
5f:3d:d3:b9:f3:62:a3:bf:01:23:7b:11:57:a4:4c:da:54:39:
40:eb:cc:45:8f:98:3a:19:15:de:c1:72:78:be:da:89:fd:60:
a4:b3:fe:76:28:a1:4c:6a:ca:d4:8f:b5:d9:c4:77:6d:f7:c7:
a7:ef:78:d9:14:e2:e3:6b:54:d8:b9:be:5d:e4:11:f7:0b:d5:
5b:bf:3f:c5:9e:e1:05:49:7b:a6:00:95:05:49:b1:3d:da:78:
16:3f:98:6d:59:7d:a6:c8:52:f0:c7:b9:93:f2:c9:0e:de:c3:
dc:6d:e7:2f:72:e6:82:d2:d8:c2:d1:09:4a:66:20:57:a1:ab:
88:d6:b2:f5:4e:9f:6b:98:d9:16:eb:cd:da:f6:95:86:b9:07:
ca:53:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:05 2026 by rpki-client