Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: 6JOmGR+aLiaNlbSrbJE2K8+fN3SLFfbB2ZywU6LCHeY=
Subject key identifier: A2:75:F2:BD:74:B9:F9:4A:FB:D8:2E:D5:94:A7:2E:FF:2A:41:5A:F4
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 019D39408E1E6B3502B3DE7E91740C6F52AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: e9ATf5sPxhIIrZkXrfrTWItTCA8.roa (hash: 9bYZXPWqJ0NbEhPnRTTZ2nAWZSD7VDe4KmSotczV1Og=)
2: eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa (hash: 2Gzq+fr47dBnSE3c78QxSTACSN9b6779m8anTE61jss=)
3: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: WJNTMOJiivaDb/Pq4VLZy2cr8vs2oxve80fsh+0U3Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8e:1e:6b:35:02:b3:de:7e:91:74:0c:6f:52:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=a275f2bd74b9f94afbd82ed594a72eff2a415af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:67:c5:45:d0:f5:cc:c6:f6:50:53:b8:46:
34:d7:27:98:50:05:15:61:cd:ad:5f:58:87:93:db:
70:5d:9b:9c:0d:79:b0:aa:4c:14:30:bf:97:82:3b:
19:d7:5f:3d:02:bb:32:4f:d8:72:27:08:d8:8f:6c:
5c:ce:dd:14:e8:e0:aa:b8:f9:db:02:f8:b3:0a:7e:
43:95:06:55:0a:65:ba:ce:52:be:17:37:96:f5:bf:
90:44:15:17:1f:2d:6b:dc:1a:50:04:ec:16:03:10:
ba:0c:7f:6c:46:bf:e3:5a:8b:be:0f:f3:1c:06:59:
f2:c0:ab:0f:c4:bb:54:36:b3:8f:20:cf:a4:f4:85:
08:b4:6f:42:d4:27:6d:aa:5a:16:27:7a:56:d5:84:
8d:db:4c:44:56:54:7e:7b:59:c2:b8:bc:7c:4c:bb:
a4:35:47:b4:57:10:f6:c8:66:c7:ce:b4:02:4b:07:
f0:a3:e3:2f:be:3b:21:ed:04:6f:58:47:bf:fc:10:
a5:22:d2:9f:12:97:b3:a6:63:34:24:2b:36:ce:2d:
c8:6f:ef:ec:5a:7e:66:1f:62:bc:55:aa:e9:f9:e3:
41:28:52:8c:91:26:56:86:06:6a:b7:ce:f2:5b:a3:
87:75:76:51:78:51:f1:f2:08:c6:df:94:2b:f9:98:
f4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:F2:BD:74:B9:F9:4A:FB:D8:2E:D5:94:A7:2E:FF:2A:41:5A:F4
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d1:66:03:16:47:c0:0e:ff:cf:53:9f:87:50:ab:5c:8b:6e:
f9:b4:87:f6:a1:3c:c4:f1:05:bc:0b:55:3f:38:73:82:d9:91:
83:ab:e9:5e:57:52:03:40:e5:54:d1:7c:b1:5e:50:3b:5b:c2:
b2:a2:8d:89:94:08:ea:f7:e3:2b:54:d4:cc:13:cb:e2:7f:79:
72:03:23:e9:bc:71:ea:aa:a9:63:19:78:a3:32:b7:22:f1:99:
48:c4:66:dd:55:7c:42:de:5c:ca:89:a6:4e:9e:a6:8c:f5:0b:
5e:ba:21:f5:c3:10:d5:e0:bc:c5:aa:cb:40:20:f8:e0:26:2f:
9b:5a:e1:f6:43:d4:3e:dc:3a:7d:7b:d3:be:6e:19:5b:f4:3d:
2d:ff:52:02:28:3f:3c:57:05:df:0b:20:da:56:a7:19:30:ed:
55:14:90:8e:1d:36:bd:55:81:5a:85:64:12:0e:db:a8:f3:05:
1d:9a:6e:2d:21:c4:02:b0:9c:60:ec:fa:c8:d3:da:12:f2:e5:
43:b7:06:eb:4e:48:54:bb:57:9e:b5:c0:e0:db:63:05:b6:cc:
92:62:2f:b2:e6:8b:bd:9b:9b:75:73:25:6f:3a:4c:e5:7c:e2:
d4:78:5f:cf:63:b2:37:aa:d8:dd:1e:f3:d0:c9:cc:b2:9e:f6:
82:f8:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:51 2026 by rpki-client