Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: uDnuwSSeZEi4TmOcsJktYgkeD+VbO1t8J8LjEc1TUDM=
Subject key identifier: A8:B5:F6:B5:B3:20:5E:E4:27:A9:13:79:50:D3:05:A9:62:8C:02:96
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 019D37C0B0CC429CED149F2E3E8FE508B968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 06E9
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: X29-SsmJR9k5fDOjjkh75Kg4cpc.roa (hash: +euzTLNo94RLGMAt+aTDFJ+R3lTEiHq3dfTEgVifPSc=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: x7bjmFiqEC/Imk6g0xA5oQvA4klpvwV2H9OhQnJzJo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b0:cc:42:9c:ed:14:9f:2e:3e:8f:e5:08:b9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=a8b5f6b5b3205ee427a9137950d305a9628c0296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:2a:d8:b6:36:0e:b9:a8:70:5c:7b:d3:f1:
6d:b3:33:1d:3a:50:67:87:f6:14:c9:96:33:3c:8c:
f5:4b:59:b5:ba:42:1e:6a:14:d7:e1:e6:77:ec:fd:
e4:9c:79:da:d0:1b:1e:18:f0:5d:7f:8a:c2:3b:d2:
be:27:08:d5:2d:c0:35:70:ec:78:2d:e5:88:4c:b5:
f0:da:dd:ef:0e:2b:1e:b1:bc:4b:a8:be:ca:a4:95:
ca:0c:48:8a:eb:b0:00:24:4a:a8:85:48:bd:72:34:
58:25:07:4f:27:14:7d:ec:4f:d7:37:75:3d:3e:7d:
dd:a6:a7:dc:6f:43:fe:06:29:54:71:8b:fe:20:eb:
14:3d:66:c7:a9:da:59:86:d7:5f:e7:f2:61:6f:7d:
26:c7:52:a6:56:59:61:e8:90:a7:7d:19:d2:3a:49:
08:f4:cb:b0:84:51:e3:59:dc:bd:7c:2e:2e:7e:66:
1c:6c:da:27:56:e9:96:ae:22:9f:f4:6b:89:69:29:
53:cb:0f:bc:8c:ad:00:c8:67:3c:26:a8:75:c8:13:
c6:5d:7b:26:f1:ae:e5:80:7e:be:ea:59:d6:38:55:
b6:b3:99:54:f5:43:72:7f:01:4d:61:1c:ff:fe:4c:
06:63:a6:e0:a2:00:84:c8:11:40:16:d6:29:28:8f:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:F6:B5:B3:20:5E:E4:27:A9:13:79:50:D3:05:A9:62:8C:02:96
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2e:7e:1c:4a:67:e5:31:cb:0c:ce:52:fa:c2:75:ac:3a:6f:
b8:46:ac:d9:b7:b4:e5:01:c5:fd:42:65:0c:2e:e1:c9:93:8f:
5a:42:35:23:d6:da:5c:6d:05:1b:df:9e:40:0d:18:18:a7:b5:
0f:e3:35:cf:d2:fa:04:bc:6b:54:00:1d:c9:bf:28:99:5f:c1:
dc:34:94:93:47:c7:9f:85:c0:0e:48:26:bf:5b:4b:47:ae:3e:
6c:f2:58:0f:b0:ee:11:55:01:f9:27:cc:91:9a:7a:69:ba:57:
d9:a5:ef:8e:62:4d:9b:2e:b9:45:f1:54:28:0b:44:4c:bb:61:
57:ff:10:dd:21:74:7d:e5:8b:45:99:1e:d6:40:73:67:43:5e:
77:df:7e:b6:44:fa:09:a0:ef:92:bd:d2:68:57:76:b2:47:45:
2b:96:c1:da:62:08:ac:9b:49:8e:07:19:39:54:9e:ad:94:93:
1e:a3:39:04:e2:3e:00:10:f3:9f:5e:2f:db:32:ac:0e:83:5b:
93:b6:bf:df:82:9d:6c:07:3a:1d:28:a8:e5:28:d4:47:b0:33:
39:50:b7:58:3f:7e:0c:5b:07:5e:c4:e9:3a:8e:ee:35:92:99:
1f:ab:9b:b0:ff:8f:16:4a:31:6f:68:6b:98:68:4e:f7:8e:92:
0a:b0:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:33 2026 by rpki-client