Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: rwgW1LpsWudjAYpaFt2MOEriQkeZCKmbXSY61nhHK6Q=
Subject key identifier: A8:47:23:E0:32:32:70:7D:57:CE:51:F9:DF:EE:76:D7:72:B1:CF:21
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019D389BD82C8793AB32084B52F9F541A7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 013E
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: jCSpcHJvpmHW1qvsO9qiN0Zx/6no8IraweNGj4oxMj8=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d8:2c:87:93:ab:32:08:4b:52:f9:f5:41:a7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=a84723e03232707d57ce51f9dfee76d772b1cf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:80:f2:49:33:b5:ca:0c:df:e6:5f:54:8d:
bb:86:87:a7:64:76:96:1c:27:0b:ec:b8:1c:fe:72:
3b:69:57:fd:77:23:1e:a1:92:cd:1a:69:b3:de:42:
8c:bf:5d:1b:3d:65:94:a5:b7:39:3f:87:91:d7:21:
61:64:a0:59:16:42:f7:f1:c2:f4:b3:52:2e:ef:ee:
f9:09:ce:3b:a4:2d:ef:d4:2a:cf:33:ac:cc:a8:a2:
46:08:64:16:b5:0b:5e:63:c0:0a:09:8b:c5:44:3f:
d1:df:58:a4:11:d4:72:33:94:e1:10:85:a9:03:9a:
ec:ac:91:2e:4f:bf:18:56:8d:41:76:d3:05:11:3b:
4e:fd:20:ba:0d:b1:87:46:d0:3d:29:31:68:44:b2:
79:27:11:ac:78:b0:fc:5b:e7:d0:1d:95:2e:24:86:
74:b4:2f:20:8a:23:16:eb:45:17:a7:ab:cc:5d:76:
5a:63:be:80:76:a7:a9:a7:24:5e:25:e2:19:60:53:
0e:02:08:e2:03:fe:f0:47:89:65:d9:84:bc:bf:52:
fa:10:bb:2b:0e:f0:66:65:aa:03:ac:ad:3e:f4:57:
60:af:d4:a9:52:ae:7a:b5:80:3c:f1:d3:93:1a:ca:
f6:03:bf:2a:39:31:ea:c8:41:29:d7:45:b8:ec:28:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:23:E0:32:32:70:7D:57:CE:51:F9:DF:EE:76:D7:72:B1:CF:21
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c2:31:b7:bd:1a:f8:5f:f6:f2:92:a8:54:ee:1f:23:1d:89:
91:6b:7f:a7:77:b1:74:85:d1:f2:30:c7:6a:2e:e5:f1:d0:8d:
ea:23:64:70:6c:49:03:6b:c0:98:cb:23:c9:b5:e9:0e:4d:60:
b0:cc:68:01:2a:91:be:e4:d0:28:01:ee:5b:02:53:96:17:bf:
80:5a:58:69:ef:41:37:ea:7b:4e:65:0f:7c:67:10:b7:d7:ef:
da:69:fb:71:c7:aa:04:db:25:6b:6f:ea:1d:a5:26:3f:d4:3b:
50:1b:12:dd:85:2f:17:07:d8:48:b9:9c:f5:a1:25:06:a0:1e:
17:95:ea:c3:cf:ec:0f:d2:76:b9:de:88:c5:d2:ce:24:d6:1f:
17:df:36:00:aa:18:f9:2c:8a:73:99:68:49:70:05:b3:50:ed:
14:aa:7c:3a:05:49:a2:30:40:d6:b0:a8:5c:fb:02:be:ee:63:
f1:5e:fe:9c:23:71:70:d3:b6:1e:d7:af:bf:b4:e2:6d:f3:49:
d5:6e:48:a7:71:c5:94:a0:f7:7f:07:bc:e3:e9:bb:cb:e0:ad:
9e:db:77:eb:f2:8d:c0:b9:3f:f1:68:c1:02:e7:1d:96:21:c4:
71:9c:be:ce:1f:7c:c4:99:51:31:27:0b:51:92:44:62:dc:9b:
a7:c6:8a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:46 2026 by rpki-client