Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
File: qtT1OyE_1fbkbdPuO36dKH_JFzI.mft (raw, json)
Hash identifier: 51tDn60Sx+Vex6ZZz+xiEIYrwaSZVtxNcJ8qE6U+aGQ=
Subject key identifier: E9:A0:7A:64:C7:EC:62:B0:4F:2D:EA:E3:5B:88:93:15:49:22:7A:EC
Authority key identifier: AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
Certificate issuer: /CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Certificate serial: 019D38660738CD4231C40D36A35072CC7C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
Manifest number: 01B8
Signing time: Sun 29 Mar 2026 07:01:43 +0000
Manifest this update: Sun 29 Mar 2026 07:01:43 +0000
Manifest next update: Mon 30 Mar 2026 07:01:43 +0000
Files and hashes: 1: D3QWsZD5slBszZssssGu-y6SPDY.roa (hash: m5arG3sgwaeIurzLGruOIuKyUYJet4zIQQosgeemCIc=)
2: qtT1OyE_1fbkbdPuO36dKH_JFzI.crl (hash: 65SKFggUTiqxG2AAk4OeD7vAhkywDpiXL0et7hICA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:07:38:cd:42:31:c4:0d:36:a3:50:72:cc:7c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Validity
Not Before: Mar 29 07:01:43 2026 GMT
Not After : Mar 30 07:01:43 2026 GMT
Subject: CN=e9a07a64c7ec62b04f2deae35b88931549227aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:85:8a:7c:8a:4c:58:01:65:0c:6c:be:5f:
7a:c7:26:7a:3d:ca:70:cd:d8:b3:a4:36:53:c7:01:
1d:7b:04:00:fb:2b:cc:23:77:d2:f9:f8:59:14:8b:
4c:8a:08:65:fb:cb:67:0c:e7:81:44:2e:b4:76:e7:
5d:10:5c:77:3b:a9:54:57:31:57:42:4f:bc:56:78:
ee:fe:b1:39:06:5e:ad:7d:ee:52:7d:93:58:8a:5b:
da:cc:0d:7b:41:cf:87:f4:a5:74:59:df:a5:8e:93:
13:68:aa:2d:75:b3:a8:43:0c:b3:e5:ea:6d:02:2d:
91:17:8e:83:dd:e5:ec:ae:2a:3c:53:9d:20:88:9b:
97:3a:a5:14:a9:db:48:31:7f:64:a5:65:05:3d:24:
e5:b0:f0:9c:0f:7e:40:d4:78:c0:78:08:27:ec:c7:
fb:d5:de:83:18:46:92:04:64:b2:1a:9f:a9:0d:ec:
7d:89:3d:bc:1f:7e:9a:4f:21:e1:a8:79:6f:31:aa:
b7:dd:93:21:af:91:d8:22:8d:b6:48:88:f8:6c:6e:
a3:28:77:99:46:b7:c0:e6:11:47:ce:c5:89:0a:fc:
5b:48:4a:67:72:27:98:af:77:48:f1:12:5b:42:8a:
b3:72:23:d1:59:6a:b9:a1:66:51:10:7e:7b:2f:4c:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A0:7A:64:C7:EC:62:B0:4F:2D:EA:E3:5B:88:93:15:49:22:7A:EC
X509v3 Authority Key Identifier:
keyid:AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:32:ac:ef:09:62:05:3f:45:8d:cc:c5:76:f7:00:c4:fa:55:
a0:a6:d0:25:cb:09:b1:d2:d5:a4:ce:87:a5:d8:fb:ae:b5:d5:
cc:4e:53:5a:01:91:ef:29:4a:5c:9a:1a:28:fc:e0:22:31:8a:
13:16:a4:60:f8:de:4c:2e:a0:29:91:a3:21:85:ae:41:45:8f:
cc:2c:f7:66:51:74:d9:1d:69:e4:64:f9:fa:17:87:f4:52:f5:
aa:2b:fc:39:b9:5b:df:ce:e6:ff:f6:b9:df:ff:cb:53:07:13:
bd:87:43:9b:49:e2:bd:97:cc:ea:8c:c9:c4:e2:59:19:a3:99:
fe:95:71:34:aa:56:11:80:d6:59:fb:f2:6f:1a:c7:95:d7:9e:
97:3a:de:b0:a3:20:44:83:6d:e3:af:45:a0:dd:5f:76:e7:a5:
d1:fa:f6:d2:ad:da:93:a8:8e:cc:96:58:4c:c8:d3:b4:7d:35:
ee:43:20:5f:a8:e4:8e:de:d7:53:96:b6:f9:c6:e3:7e:2a:6e:
16:66:98:b4:1c:2d:f9:63:71:7c:fd:e7:fe:f6:4e:e6:ac:49:
24:4a:de:b2:d3:6f:58:45:cf:a9:a0:0c:83:ee:51:fb:87:13:
a0:16:7c:c1:e8:69:53:fa:3a:69:46:b1:6b:ac:00:19:ad:16:
43:80:eb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:31 2026 by rpki-client