Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: 2j6tMIjVnLBsEbrPmwlAQduh/DjGkyQfxwA6+nT20e8=
Subject key identifier: C5:01:07:29:35:B2:61:B1:93:E7:BF:9C:CA:6D:59:2D:E0:5B:A2:6A
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 019D3AC1A2E0992425BB661B6C4132E408F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 18:01:01 +0000
Manifest this update: Sun 29 Mar 2026 18:01:01 +0000
Manifest next update: Mon 30 Mar 2026 18:01:01 +0000
Files and hashes: 1: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (hash: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: VLjk9IGPC25kMtyYgiFFYRbCk2vSuySpISJGwl8PV+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:a2:e0:99:24:25:bb:66:1b:6c:41:32:e4:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Mar 29 18:01:01 2026 GMT
Not After : Mar 30 18:01:01 2026 GMT
Subject: CN=c501072935b261b193e7bf9cca6d592de05ba26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:86:90:46:96:54:86:08:f8:47:b3:cb:4b:
7c:0d:b6:42:fb:e2:da:f9:ea:ee:13:07:fe:9e:b8:
c7:cd:0f:48:b5:86:9f:3c:23:ee:0c:af:91:22:ba:
81:f9:ce:ea:c0:ba:8d:1f:1d:06:dc:2f:11:a2:c5:
8c:2f:fe:48:5d:ca:52:18:17:3c:f8:f4:81:66:4c:
55:69:1c:2e:de:a6:be:07:2a:75:0e:f4:74:f2:be:
01:b3:b3:ae:2a:d4:7a:5e:dc:cd:0b:a4:34:7b:f3:
92:b0:21:02:5d:50:bb:4d:51:90:9b:e9:13:a5:d9:
71:b1:2d:29:d6:da:18:2b:ef:ec:8b:d0:fa:30:ae:
e6:12:ac:69:c9:a7:8f:9a:4c:10:90:32:c6:6a:42:
49:ac:35:0e:a0:44:20:9a:96:9e:5d:08:15:44:bc:
50:aa:84:06:1d:a7:8b:22:2a:d3:97:fd:79:37:8b:
c8:61:62:e4:ab:ae:b7:f7:89:9e:43:43:9e:71:97:
d3:6c:4c:55:3d:b4:b3:4b:62:f5:4d:6d:0d:74:8b:
43:7c:e4:ac:21:7f:74:53:15:de:55:e1:f4:43:da:
e8:bf:ba:e1:84:65:e6:b8:9a:15:01:b0:0e:f2:04:
3b:86:a6:ed:81:40:70:3d:12:b4:1a:2a:cc:8b:80:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:07:29:35:B2:61:B1:93:E7:BF:9C:CA:6D:59:2D:E0:5B:A2:6A
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ff:b9:89:9a:bb:42:29:d7:27:f5:f4:58:ca:67:ff:8d:f9:
16:d4:09:77:e4:31:04:31:d8:a7:fb:c7:0c:d2:df:ca:29:b1:
65:0c:12:75:12:4d:1b:60:26:96:fb:d5:38:2a:68:84:e8:19:
b5:1f:56:cb:a4:d9:d3:d9:b7:18:a3:41:0b:e9:5e:a5:1b:af:
ea:82:5f:a9:eb:e3:09:0c:e0:89:d4:60:a9:01:23:ca:4d:84:
d3:44:c3:8a:f5:26:d2:8f:94:e2:6e:a5:d9:dd:eb:77:1f:bf:
c4:79:91:06:95:9c:1c:ce:bc:b1:c3:d4:e3:23:eb:c1:f8:fc:
8d:fc:22:20:87:4e:e6:ab:0b:34:2c:95:d6:ef:a9:45:2e:2d:
af:3b:85:be:cf:b5:ff:73:ee:4b:6c:db:b1:ef:86:02:9e:ba:
2a:7c:58:5a:50:a5:f2:e4:86:63:f4:7c:7c:28:7f:cd:68:91:
94:88:b4:8e:a8:db:9b:45:be:62:08:9f:7b:ff:bf:5c:ff:4c:
c2:b9:6d:10:25:79:c6:93:3a:3f:4a:57:34:d0:a0:46:77:e7:
84:a7:cd:58:e6:d8:13:72:0c:7f:0b:f7:11:fa:97:72:ce:db:
5d:65:e3:46:2a:c0:6f:4d:9e:8a:40:bf:5c:36:0d:23:0d:f3:
d1:ef:07:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:52 2026 by rpki-client