Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: IBZMnI8EpVTODSOkaC9lfL9FVmC+o56sKTDFL1kPDPs=
Subject key identifier: D3:B7:BA:12:C5:2D:62:5F:75:4A:83:0E:E2:BA:48:AE:01:04:28:43
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 019D389BEAE9D1F12250E7F2258AF26FD22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 0C8A
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: 3loz_wUg8iUnmUBOtpVHROxNJvk.roa (hash: J7VMYCaBbkzMjXRMgzvhwXQZ2f23okoS+RYz+uaW5gI=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: 9YllZb4MQIJ/7Q0piM8ekUBh0fxr6nblREkU9u0OL4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ea:e9:d1:f1:22:50:e7:f2:25:8a:f2:6f:d2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=d3b7ba12c52d625f754a830ee2ba48ae01042843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:ed:61:04:a5:eb:7e:a6:39:89:86:14:4d:
d0:58:0b:e6:8b:6f:e9:aa:ea:16:09:97:49:38:e3:
4b:03:18:c9:6b:f2:95:75:44:1b:51:e2:fd:de:94:
14:b1:af:a1:a0:30:e1:58:bc:6e:f3:ba:f6:9a:ef:
72:ad:27:28:26:c8:03:41:06:5f:6a:bf:e9:83:ac:
0e:57:52:24:ed:09:5a:58:91:e5:55:dc:3d:9f:4e:
bf:d4:29:91:6c:a7:ad:fa:fb:5a:73:54:fd:26:3a:
ca:5d:76:60:42:88:9c:9a:d7:28:d4:18:8a:fe:b9:
3b:c8:60:f1:d3:cc:a4:1b:de:7f:05:f9:18:b7:65:
66:13:0c:41:af:0b:a5:ad:45:15:e8:96:6f:55:5e:
0e:fe:02:ec:9a:08:86:9e:19:66:bc:1e:d9:4b:3c:
24:b7:22:c0:8e:50:8a:ac:11:f8:42:49:01:39:d6:
5e:d6:f3:c9:a0:43:06:20:3f:ff:33:68:c1:3a:a7:
ea:ab:bc:58:10:db:7b:1d:7d:39:9a:c2:64:9c:ae:
6e:92:a0:11:5b:53:db:d6:63:24:79:28:a8:f7:58:
b7:4e:2c:5e:00:bf:66:2f:3d:84:b1:3a:f5:44:80:
51:18:43:da:b4:e7:3b:13:06:98:17:9c:1e:06:72:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B7:BA:12:C5:2D:62:5F:75:4A:83:0E:E2:BA:48:AE:01:04:28:43
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:de:62:5f:77:4c:30:13:1b:14:e6:e3:93:29:d3:38:e9:1d:
4b:d3:64:23:d5:6c:ca:d5:79:72:9a:23:ed:98:56:2f:17:a9:
f9:ef:ba:32:06:55:77:51:32:47:bc:bd:74:1f:3f:1f:ee:a0:
df:07:72:df:a7:b5:6e:f1:02:de:ba:4b:99:ce:cf:e7:df:34:
a6:e3:36:b0:e3:92:c6:d4:a4:4f:d1:49:ef:f6:c6:8a:95:c1:
b5:c4:e3:ec:25:2a:77:4c:ca:50:78:b1:a4:f7:7e:4d:34:3c:
2d:57:0e:fc:48:70:1a:3d:5d:65:10:04:2c:1d:f1:c8:c7:15:
93:2a:29:a2:b7:6d:85:c9:bd:75:aa:ab:c0:f7:4c:a6:39:c7:
3a:81:7d:23:0e:53:84:00:d5:ec:b1:d3:80:72:90:c5:2a:f5:
e8:f6:57:89:05:47:2e:2c:8d:14:30:5b:9a:04:7d:0c:9e:87:
c4:43:f3:83:71:4e:c9:61:04:6f:39:22:bb:6b:3b:cc:54:c0:
d7:5f:aa:e0:f3:db:04:2d:58:81:3a:5d:cd:32:3c:7b:3d:b5:
a4:9d:1e:49:9f:bc:a4:20:d2:8b:9a:df:14:29:18:5e:eb:2c:
aa:50:16:08:9b:23:65:63:ab:9d:9a:8d:8d:26:11:b5:3b:ed:
e7:02:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:00 2026 by rpki-client