Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier: 3CElKcaDvDEr/9KEgIaWaIytB48O3eu4Y44zNHjtwoA=
Subject key identifier: 57:CB:BA:8B:77:2E:5A:F4:98:CC:6A:65:4E:F3:69:74:F5:B8:17:67
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 019D3789C03B89C0D0F31467EA61DB3B4B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:01:07 +0000
Manifest this update: Sun 29 Mar 2026 03:01:07 +0000
Manifest next update: Mon 30 Mar 2026 03:01:07 +0000
Files and hashes: 1: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: SB+BhRnOtFph3JpMBPZv7XAFQvqT55oG96CaFcSzChM=)
2: vdO9ldGlhUGuhMbvEZgQi2UAL6Q.roa (hash: o/PY0zcPwn5EFiTDVfiSoj0UDONeDefYMUGFGgIeJHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c0:3b:89:c0:d0:f3:14:67:ea:61:db:3b:4b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Mar 29 03:01:07 2026 GMT
Not After : Mar 30 03:01:07 2026 GMT
Subject: CN=57cbba8b772e5af498cc6a654ef36974f5b81767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:68:d9:4b:55:4b:30:d0:96:02:73:cc:e1:
4c:98:ae:7e:82:4b:7f:09:d5:2e:41:0b:e2:38:33:
44:af:2f:50:41:f0:b0:53:a6:57:b9:f4:32:7a:0c:
17:24:21:45:d0:fe:69:c3:e9:fc:48:b1:32:12:81:
12:ee:70:de:95:f6:ba:5c:8e:9d:8a:5f:60:0a:50:
3b:70:48:6d:7e:f3:e5:2f:66:6c:58:8a:9a:41:bc:
89:9e:8e:46:a1:1c:7f:d9:68:30:fe:7c:dd:55:ad:
53:1e:20:ee:b3:47:20:06:ea:bd:56:39:71:63:a7:
66:6e:d7:97:19:d6:69:59:0d:00:1c:b7:3c:4c:b4:
3e:9b:df:17:62:f5:f9:75:52:63:ae:73:68:d9:6e:
7c:25:00:70:d8:5d:92:cd:c5:9a:c0:21:12:91:13:
ff:8b:47:e8:ad:ad:a5:87:65:f4:8d:1e:8c:9c:bf:
69:a9:45:90:d2:f9:ca:45:b6:16:8e:82:7b:14:6a:
f7:bc:06:e7:cc:55:85:92:04:5e:ea:92:8f:c8:02:
4c:67:b4:18:c7:af:97:51:bf:5f:08:27:2c:bb:41:
87:e2:3b:f3:95:6a:1e:e4:ee:d4:91:26:99:5d:d4:
4b:0f:2b:8a:7e:1f:15:55:91:59:db:9f:5e:67:9a:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CB:BA:8B:77:2E:5A:F4:98:CC:6A:65:4E:F3:69:74:F5:B8:17:67
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:17:5e:c0:aa:ee:b5:be:70:9d:a0:4f:85:a9:1a:49:01:41:
f7:b9:10:3b:da:99:e2:a3:d5:b5:65:8a:92:b4:cf:83:97:98:
c8:36:30:20:c4:dc:d2:69:ec:49:6e:1f:8a:54:22:58:ce:04:
14:f8:ed:8b:8a:4a:a6:48:90:35:9d:0e:39:22:de:74:3f:55:
20:aa:95:7a:9e:67:51:5e:71:6e:00:1b:1d:af:6e:9a:0d:3a:
3e:9c:1c:b7:32:f3:b8:79:c8:cc:86:13:04:08:54:5c:4f:8a:
d6:af:d7:5b:e8:86:02:57:22:f4:73:4e:e1:95:88:b6:2f:c0:
10:58:1c:cf:84:85:f4:7d:86:93:97:d5:b8:8e:ba:7b:c0:fa:
e9:29:d5:6e:75:b2:a0:da:4e:ff:42:8a:c8:38:b8:3b:19:bd:
24:c7:66:8d:15:5e:c3:05:11:3e:24:60:77:31:cc:84:2b:f4:
bc:e0:f8:bd:9b:22:c0:0a:f9:90:ea:49:e7:b5:74:d1:f3:94:
95:5e:d6:00:22:dd:75:be:99:35:74:f4:30:14:0e:17:09:23:
8d:62:e2:7a:cd:57:e3:39:8b:89:5f:24:77:26:fd:21:80:08:
f7:8b:ff:86:21:59:98:2f:41:db:68:73:dc:07:27:69:89:49:
86:1e:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:01 2026 by rpki-client