Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: pUw3VXBwQDSD11CkFR3+Gay+bSsr/khy02YZ9QqKJkM=
Subject key identifier: 3C:A3:DD:11:35:C1:B3:45:02:F7:11:BC:24:EC:CA:B3:93:16:BD:AD
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 019D37522D1AFF798FB0A0D7395E409EA296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 02:00:25 +0000
Manifest this update: Sun 29 Mar 2026 02:00:25 +0000
Manifest next update: Mon 30 Mar 2026 02:00:25 +0000
Files and hashes: 1: fksKXRKS55Q1EzjRDTMK_vqizsE.roa (hash: ofAdtnCLELO0txtL3rvBXK9EQmnTv0xBnbEG6eay9CA=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: ZEQpZCi3KWQcezjeD281/BcuNa8HePhHbTwgNS4RdCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2d:1a:ff:79:8f:b0:a0:d7:39:5e:40:9e:a2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Mar 29 02:00:25 2026 GMT
Not After : Mar 30 02:00:25 2026 GMT
Subject: CN=3ca3dd1135c1b34502f711bc24eccab39316bdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:fc:d7:f3:b1:7c:28:df:aa:a7:b0:b5:23:
bb:56:f0:4b:07:f8:72:34:60:7d:86:e4:ee:52:7b:
8a:e4:50:ec:df:41:70:4f:59:b3:81:56:0f:4d:d9:
d6:39:ae:f6:5f:d8:16:96:20:48:b4:ed:a0:c5:44:
e1:dd:ba:a8:44:56:12:3f:8f:08:38:51:0d:40:cd:
d4:34:fc:79:7b:0c:9f:ce:ae:18:6e:53:7e:41:e6:
d9:6b:e0:ee:1e:81:35:8b:1d:43:1a:5e:7d:76:7e:
6e:6a:80:03:b1:74:62:9d:f5:78:c5:9a:1c:17:37:
1f:ca:0d:de:91:fe:10:bf:6b:7e:29:50:cb:08:b5:
d8:c1:1a:c1:83:df:25:92:2a:2c:e2:bd:02:55:85:
c4:12:d5:d9:6b:9d:d7:93:34:b2:5d:16:45:5b:23:
ff:6a:44:b3:8c:52:2a:d0:d2:46:5a:a8:78:3c:d0:
81:34:2a:44:c9:fa:4d:d2:17:57:e9:e7:c8:13:94:
b8:89:3c:8f:57:eb:cf:04:77:06:da:4f:c4:8b:47:
69:2e:15:37:7f:fd:ce:f5:3f:5f:03:df:9e:ba:eb:
fa:4a:57:87:bd:a6:62:f6:4e:3d:8c:55:82:d3:20:
8e:49:4f:1c:73:40:0d:80:a4:dc:5a:13:98:cf:94:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A3:DD:11:35:C1:B3:45:02:F7:11:BC:24:EC:CA:B3:93:16:BD:AD
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c1:27:34:5b:18:9d:bb:4e:c7:9c:ad:eb:ba:4b:a5:25:74:
46:b3:1e:ce:fa:16:29:72:1f:90:53:cd:27:6a:44:bc:2e:b1:
91:04:14:3d:30:5f:e5:5b:4b:4b:ae:4b:f0:6b:7d:b6:6b:81:
5f:95:19:23:90:27:5e:73:24:57:0b:36:3b:cc:66:c8:21:d1:
41:22:12:02:8b:8a:f9:1e:29:15:b5:ed:80:1f:29:87:0f:c6:
0b:37:7f:1c:86:0d:22:1a:87:fa:b4:4e:a1:e5:77:48:3e:58:
dc:4d:42:47:54:9c:e7:93:28:80:92:73:92:bd:65:69:1b:4e:
ec:0d:58:91:3a:67:c9:e8:af:c2:1e:f5:63:7e:d7:f6:16:23:
c3:e1:cc:f3:25:80:ea:03:a3:c3:91:68:f5:b8:e9:4b:5c:a7:
6f:84:a1:71:3c:14:d6:40:39:d7:3c:60:54:cf:ad:81:55:44:
33:90:5e:09:78:70:0c:99:a6:0c:bf:a1:1b:54:76:de:18:f9:
b3:a8:81:4f:4e:5f:7b:44:36:bb:2b:ec:b6:e3:fd:52:93:6a:
7e:a9:01:40:9f:cb:cb:e6:f5:f7:d6:64:5d:5b:85:1f:5c:26:
c7:c8:af:17:b6:49:f4:e9:ac:7a:c6:aa:28:30:f3:0f:58:28:
8f:c1:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:33 2026 by rpki-client