Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: SwQB4SESI6y6IZDS85Az7EHIaLkpyJBgoAoqRBIU/h4=
Subject key identifier: CE:D8:28:26:E5:94:D4:04:F9:1E:B4:59:0B:8F:7A:66:F4:7D:85:CB
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 019D3940CC2D25B3BF93B0452E759F19780F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 16ED
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: X6N22azmZ7YvfwKicSHtrRRzv2A.roa (hash: nYHkLqVvvIjj1RReDJNi6r7lmu+SNXIeDPrdh2zqSZA=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: Ufid8kqUXDXQc9lQUa19T9l4+DagC/syS7cJSQkVz6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:cc:2d:25:b3:bf:93:b0:45:2e:75:9f:19:78:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=ced82826e594d404f91eb4590b8f7a66f47d85cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:9b:e1:a6:a2:01:72:49:1b:d0:4d:8a:4f:
8c:ab:d5:ad:6d:32:82:bd:31:37:8a:07:4b:ea:91:
87:0d:b0:38:d8:78:e5:87:6e:60:bd:3c:3f:d0:6a:
39:cf:56:ca:d0:80:9b:fb:f2:e3:d5:d4:42:8c:05:
82:ca:92:e4:62:f5:60:b6:79:12:69:38:8b:93:19:
ef:5b:7b:c6:d5:51:53:4e:f4:81:47:b2:ff:3f:75:
e7:b9:6d:a7:28:54:c4:c3:d4:c8:36:a2:09:a7:17:
92:eb:ba:52:b7:7a:c1:7b:99:45:9f:0e:03:29:9d:
66:e6:68:44:7b:66:80:69:1d:1b:0e:f4:28:6e:7f:
c5:b3:5b:e6:6b:02:21:c2:91:c5:fe:23:83:cb:4b:
45:92:67:84:08:05:26:a4:48:9f:59:3b:89:3c:b2:
b6:ab:ce:b7:5f:b0:5c:c2:a0:cc:2a:96:99:b0:1c:
40:31:ad:6b:02:d9:d0:90:92:e3:97:c2:1a:b4:59:
ae:f5:65:b0:1a:2c:62:0c:bb:1c:65:4b:2c:e9:6c:
61:9a:1a:81:20:fe:aa:59:10:bf:f6:13:6f:ae:71:
85:3a:ab:2e:49:93:e6:74:1a:9d:19:02:7e:10:11:
36:a6:0f:81:30:f9:02:5e:d5:5f:dd:b0:1b:8c:99:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:28:26:E5:94:D4:04:F9:1E:B4:59:0B:8F:7A:66:F4:7D:85:CB
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0b:50:6e:4d:63:e1:b1:5d:89:04:00:2b:0c:9f:55:18:37:
63:74:a0:81:d5:f1:3b:40:2c:f9:7c:6a:c1:27:43:cd:1b:8c:
19:0a:3e:95:c9:1a:f7:30:cb:2d:4b:9f:82:72:31:ef:2f:32:
90:fd:b3:7b:eb:71:c9:5a:d0:13:67:94:b8:48:1c:cd:d8:68:
34:b2:5d:2a:49:18:48:be:4b:f7:e2:01:1f:16:5a:8b:8a:ba:
57:a7:b2:ca:6c:a6:d5:0e:f7:5f:e8:e6:92:e0:af:a0:96:38:
ec:ef:ea:3c:f8:9c:a5:0e:42:3b:ec:1e:be:05:5b:af:0e:f6:
ca:7f:24:0f:8b:e6:6f:53:b1:92:c3:5c:c9:10:f5:c1:37:c1:
91:d8:0f:55:8b:4c:41:4a:4e:4c:05:ec:02:fe:c4:4c:19:f5:
ab:a2:a6:ee:98:09:c8:c0:95:0f:ac:21:b1:7f:73:90:80:5a:
ee:63:53:83:93:a5:6b:1c:f1:f3:45:ef:11:73:56:66:54:5e:
3d:26:19:e4:09:93:14:e7:4b:a0:2c:34:8e:13:5b:e2:00:99:
92:1d:e5:80:27:f6:fb:39:80:47:ee:cd:37:ec:8c:d5:4e:63:
a5:ab:6a:0e:9b:23:ef:4d:37:1e:f8:fc:2e:b9:e9:6c:cb:2c:
02:c8:96:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:45 2026 by rpki-client