Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: Jh+UaTGqxO2QEFUUc/6CnLcHpQhPIzRWU9YUuWBF1TE=
Subject key identifier: A7:A6:08:72:05:87:7F:30:6C:3C:4F:53:6D:69:E1:72:92:4F:F4:9F
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 019D389BCDC47C556D0F5E44F3A623E603FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: IPShWGUXlOQysmlHN59ggxp79no.roa (hash: h66cPY9mKXXd6y+2DIeK9BUX2MMAhCZtqkFLMLMhdLk=)
2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: XtIzWmFuBCe2Vwsl8eEOA0J1a3BoyBhXIzDgtat3v3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cd:c4:7c:55:6d:0f:5e:44:f3:a6:23:e6:03:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=a7a6087205877f306c3c4f536d69e172924ff49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:db:b1:a9:57:71:52:ae:a3:87:55:69:b7:
d4:5a:b3:51:bc:b9:d2:6c:88:c0:03:15:70:c5:02:
4b:e7:dd:69:0a:a8:2a:56:23:1c:86:d2:4d:af:3b:
e4:61:e1:1b:dc:20:0f:40:56:31:88:42:ed:6c:1a:
6a:ea:c2:de:08:c4:5d:42:fd:c7:e5:4c:39:90:51:
fc:a0:ac:2f:5e:8f:9e:09:61:ef:67:ca:4b:9d:8b:
e1:9c:5b:7c:f4:b5:ca:59:98:a8:a0:d3:4c:32:7a:
04:60:c5:ef:9d:c6:9a:f4:b2:5d:ee:39:fe:7c:60:
18:4c:8b:e5:74:95:73:5a:79:37:4f:b3:1e:fa:32:
62:9b:55:90:52:b2:52:04:39:71:e3:08:c1:89:a0:
25:49:24:35:40:a1:91:83:5a:70:20:5c:bb:54:9b:
9f:d8:9e:59:77:43:a9:ff:a1:27:01:4e:00:0a:eb:
7b:45:7e:2c:b6:df:0e:88:e1:d3:c2:26:ca:8b:35:
fe:82:52:6d:7e:9c:23:2d:b7:71:c5:63:b7:f8:7b:
61:0d:1d:bb:45:4c:dd:66:4c:7d:21:e6:47:a3:54:
44:b2:b9:8e:ce:f4:54:d4:d1:92:ea:10:26:a7:34:
24:97:4e:51:84:c2:2a:1b:00:56:d4:b8:ed:81:85:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:08:72:05:87:7F:30:6C:3C:4F:53:6D:69:E1:72:92:4F:F4:9F
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a4:39:4e:51:2c:f7:ed:d0:dd:fc:b3:a2:32:72:13:4c:72:
d8:73:0d:e7:f3:db:a6:b6:32:2d:94:84:e2:ae:a8:63:64:dd:
69:09:2c:75:37:d9:53:20:10:b0:ce:00:06:a4:81:5c:52:87:
c5:4b:de:74:02:12:20:20:54:68:11:2d:ab:9c:00:39:59:b5:
81:96:7c:1f:2e:c5:b8:43:92:c0:bc:15:92:c6:59:e6:39:88:
7e:44:c9:39:19:e3:74:56:0a:38:44:7d:72:4d:be:57:fd:30:
25:f6:1f:c4:fe:32:aa:43:1b:e1:46:b2:c0:0f:29:d0:d5:b5:
fa:0b:e7:68:7b:c9:a0:e9:33:3f:c6:13:44:11:03:ae:a3:fc:
5d:e7:7d:dd:f5:98:6f:48:fa:0b:a6:2d:09:fb:ba:d8:80:38:
75:7d:7f:c2:51:a7:13:69:4a:8a:09:5e:50:64:70:d1:6b:e9:
d9:52:73:af:d0:48:14:21:ef:2a:69:96:ac:17:f5:06:81:65:
0b:bc:84:48:fa:e6:a8:0a:9f:be:1e:39:fd:f8:16:b3:1f:37:
d3:de:c7:c1:73:45:68:20:7d:54:b1:f3:ca:9f:85:e3:d3:dc:
93:dc:af:a3:b4:e0:85:ef:c9:57:27:ea:4e:3c:f3:f8:6a:38:
12:e8:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:45 2026 by rpki-client