Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier: wY275uU5IWT5KwGRotcg4Q4LCob0sOw/D8337BQg2Jw=
Subject key identifier: 82:D8:69:CC:B5:CB:FE:AC:24:38:1B:EC:BA:02:9D:9D:DC:0F:83:96
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 019D3A8AE04926552E303C6D013337066CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 17:01:13 +0000
Manifest this update: Sun 29 Mar 2026 17:01:13 +0000
Manifest next update: Mon 30 Mar 2026 17:01:13 +0000
Files and hashes: 1: aMb6lxNGb2-liUxIi8yk_IeHIOY.roa (hash: 5gSa2BaLYUZyyJ6bTUAS7v+V9L4QlBvXXfhwMvfbFhA=)
2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: PM6IRt7w2x0JpTdkgl0lRzbsZQDH8Es75xtxGqxaYiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:e0:49:26:55:2e:30:3c:6d:01:33:37:06:6c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Mar 29 17:01:13 2026 GMT
Not After : Mar 30 17:01:13 2026 GMT
Subject: CN=82d869ccb5cbfeac24381becba029d9ddc0f8396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:a3:ce:59:01:75:95:a3:6d:2f:dc:c0:57:
2d:33:8f:3a:a0:2c:56:0a:77:43:bb:d9:7c:ad:0c:
ad:11:12:44:88:5e:c2:af:ae:11:a2:dc:8f:17:13:
fd:ce:9f:a9:78:a9:94:39:ea:f7:13:2d:3f:30:71:
b5:a4:b7:0f:91:16:68:8e:39:1e:ee:41:c0:51:a0:
1e:64:63:9e:83:39:18:1f:6c:c4:84:b8:28:2c:59:
c8:07:e5:ee:d2:d5:f1:63:38:2c:e0:86:da:65:7e:
b8:10:8c:75:5b:e9:5f:c3:c6:3b:17:ad:7d:15:5f:
39:c7:23:3f:0d:ba:f5:1e:0c:52:0b:e0:b5:89:9c:
78:db:e9:e9:9f:cf:2e:8f:15:0f:f9:bf:e0:dd:73:
28:55:8a:ae:a8:16:2c:b2:e4:24:e0:71:95:c4:4e:
5c:a3:4e:c5:7e:31:ba:29:65:53:b2:66:cd:77:4d:
99:65:c0:9f:bc:5c:4f:ea:79:52:ee:dc:e8:ff:ed:
8d:a5:60:2c:81:19:d4:23:a0:42:d7:d4:57:d9:72:
03:8c:89:95:d1:b9:4e:e3:2d:01:58:dd:63:c9:d1:
5b:eb:94:8f:52:47:00:ca:fb:51:c3:03:0f:2b:4b:
13:59:df:a0:d0:1b:34:81:8f:5e:5c:6e:88:65:90:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:69:CC:B5:CB:FE:AC:24:38:1B:EC:BA:02:9D:9D:DC:0F:83:96
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:80:c1:1e:af:56:19:e7:8c:88:e7:a0:f5:b5:5a:a1:95:9c:
d0:0f:16:1a:e0:55:50:4b:19:fc:68:e4:37:56:03:a8:ed:da:
7f:d1:a0:79:d5:9a:16:82:fc:c0:b1:1f:98:8f:cb:25:19:9c:
38:45:32:15:5f:75:19:0b:9a:e2:ec:4e:14:ce:34:6f:ca:f0:
04:96:93:9d:e7:a7:28:ee:f0:ee:bb:7a:9a:e8:83:88:dc:a2:
c9:f8:85:0a:e5:d7:e0:b2:ba:c9:97:f6:a1:4e:c8:34:24:00:
ba:34:3b:eb:f6:38:a1:04:6b:2c:81:72:5e:0b:3c:a0:d3:66:
c2:6a:74:11:ab:60:69:ec:de:97:ed:7c:7b:4c:3a:6b:29:50:
c9:e1:68:25:c0:03:9a:1d:25:81:48:18:21:4e:c1:f2:01:50:
5e:47:9a:f5:03:14:c0:d1:17:4a:77:3a:44:6b:10:e0:c9:d2:
2e:22:2c:df:b7:9e:74:3f:65:4e:4d:58:39:4d:c4:c8:3f:11:
a2:1d:34:d6:c1:d0:76:d0:5b:cd:92:d6:14:0e:4e:75:7b:cc:
d9:59:23:e3:9a:28:46:be:1e:7e:aa:e1:f5:74:6a:a8:6f:70:
e3:88:14:ad:6b:80:aa:26:d4:03:a5:12:93:c2:1d:93:4e:27:
4e:d9:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:25 2026 by rpki-client