Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: NyfXeUBevJfk5V8PpVRuGoOwZgIwh9diJLIrLp1XR1s=
Subject key identifier: 61:80:7B:21:3F:0F:8B:A6:B1:2B:58:61:FA:76:E9:A2:51:C1:52:B4
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 019D389C60A4152E4BE2C552C187965343A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: 5DE_W6pAcWsoXSwOt7MJk1c52UM.roa (hash: xF+d5aYH+/051lwctUkQ5P94uH29GuKQimWqiTvacVc=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: PTJquLN7qxnQUGcz7EEFON7fpZ0c1aHHtnAbFULzTUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:60:a4:15:2e:4b:e2:c5:52:c1:87:96:53:43:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=61807b213f0f8ba6b12b5861fa76e9a251c152b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:2b:df:2b:e3:15:1f:86:ec:40:93:d2:a4:
e3:cc:95:29:66:8c:2c:a4:ef:9a:d1:47:2c:8d:24:
66:ab:98:c1:03:6f:41:18:ff:17:42:bf:bf:b1:f2:
53:c6:e5:06:74:13:dc:01:f2:bf:5a:d1:a5:c3:8f:
08:c5:1e:40:3c:4e:9b:6d:d6:d1:f5:76:2d:83:07:
ad:d3:43:cd:b3:ac:e6:7f:4f:e5:e8:6b:21:28:80:
14:53:8c:f8:a4:0a:3b:3a:8c:7d:e1:9f:9e:7e:87:
ce:a0:08:88:07:da:f8:fb:e3:03:fa:07:82:9f:04:
57:50:3f:98:a7:20:cb:bc:c0:c0:82:81:66:b3:8e:
79:12:14:89:98:44:da:51:69:b4:5a:19:d9:25:d9:
07:25:70:65:37:45:d5:47:24:7c:ad:3c:a6:29:f3:
7f:96:a9:cf:83:b0:34:26:5e:86:43:8b:b9:84:eb:
50:90:a6:bf:d0:81:fd:5d:c2:7c:aa:37:07:0f:c0:
d5:c4:b2:39:0d:64:03:21:eb:f3:1f:4f:48:76:46:
14:dc:1d:c1:a2:d8:b1:42:19:13:19:20:59:8d:4e:
e4:cd:27:2a:04:fc:ae:49:c3:c1:07:b3:1b:bc:b3:
93:24:8a:3f:67:50:b6:49:2e:a8:ab:da:77:f4:97:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:80:7B:21:3F:0F:8B:A6:B1:2B:58:61:FA:76:E9:A2:51:C1:52:B4
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c2:ef:a4:63:5c:fb:d3:c0:ce:66:c4:b2:b0:08:10:e6:19:
6c:a8:68:5e:ab:f7:26:af:a3:1f:6b:77:c7:41:18:e8:7d:a7:
43:91:d3:5b:73:8f:8f:1a:b0:d3:e7:f4:eb:1b:ae:02:81:39:
3c:ed:f2:cf:08:bd:5d:8d:16:9f:e6:0a:ab:1f:ac:30:53:39:
68:c9:6e:14:79:51:41:2c:1e:32:e4:86:0e:a1:5d:5a:a0:a1:
6f:1d:7c:d5:8c:e7:36:93:df:20:73:02:e7:a2:f4:40:b0:6c:
3c:19:ae:b7:b9:7e:b2:0b:b7:36:55:ca:e2:a6:d0:ae:c5:f6:
cf:69:66:13:47:50:30:ba:e2:f7:ae:d9:15:02:ba:2a:56:4b:
e8:d1:26:81:3c:c4:b6:f7:8c:cb:52:6d:25:9d:a8:90:3e:66:
7c:96:63:07:49:8b:b6:06:6f:5e:69:e0:39:1f:cf:61:11:5d:
82:41:f2:2a:21:ed:fa:e4:9a:e8:c8:fd:8d:f0:6c:f3:81:ab:
89:25:28:4e:33:c6:6c:b4:95:bb:6b:37:17:91:18:bf:91:82:
6d:b7:c8:d1:0b:52:ca:5a:c0:14:72:22:ab:a9:d1:30:e8:68:
39:3e:3d:86:7b:2a:63:5e:b2:8f:12:83:d3:01:fe:fd:25:e5:
a2:1f:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:34 2026 by rpki-client