Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: f5ivTR7e50ezCRwo/prQd9fKQoNah/SBczxZ5UWQ1SU=
Subject key identifier: 8F:8E:FE:FE:25:13:6D:DA:97:5B:3D:33:2B:17:4E:80:7B:E6:3E:AC
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 019D3909CF4C631364E52D4800AE1AF283EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: sOMUFpjaAI80pqHl+VlyreUz6QYxwAThJ/LV25VLc3o=)
2: tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa (hash: oFn0sS2KIEC+fcfgS1boOcIBmwWzk50WRGkvZp+ryXo=)
3: wga_WdR_8QvLv6SYCAFbkFgE4IY.roa (hash: 1WShRNTFDIi2o5zhM9Z4CcfauIXDzI1Kphz/pH1YsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cf:4c:63:13:64:e5:2d:48:00:ae:1a:f2:83:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=8f8efefe25136dda975b3d332b174e807be63eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:f0:70:f6:6d:c9:a2:00:45:15:62:8f:12:
7a:9a:0b:82:95:76:a9:d3:d3:4e:44:15:00:fe:f2:
27:03:e9:84:65:e1:15:bd:7c:3f:5f:ba:6f:2c:fb:
80:48:1b:9b:ff:ef:d2:d4:4e:30:10:5e:92:61:83:
ae:87:78:f2:c4:1a:49:80:ef:6e:f8:69:e5:65:20:
87:4d:84:e6:1f:24:4c:5b:cd:78:b7:93:b5:da:e7:
a0:62:60:ce:b6:5a:80:55:ef:3a:42:9c:10:0b:c4:
5e:c0:8a:21:a8:1d:3a:5e:ad:66:a1:14:b3:c2:45:
81:64:5a:2f:59:bc:95:f5:58:c7:0a:4f:ce:c7:dc:
eb:bc:ce:ab:05:79:b9:5f:50:d3:85:76:77:8f:57:
c7:a0:09:f7:be:5a:fb:df:c7:2a:74:e4:92:1b:cb:
b3:12:f9:ea:ac:f2:c2:b2:ca:42:8b:2a:c7:b7:7a:
fe:2c:72:22:52:ee:8f:ea:e4:9e:fb:f8:e8:67:7c:
7f:6a:43:de:e1:f9:e8:72:62:db:49:6c:c6:05:39:
6d:49:2c:f4:a6:78:90:82:02:53:b1:46:d8:85:f3:
05:a9:89:5c:4d:2b:01:83:62:27:4c:39:b4:56:64:
ef:dc:de:56:93:b9:62:f4:73:38:ce:fe:12:46:83:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8E:FE:FE:25:13:6D:DA:97:5B:3D:33:2B:17:4E:80:7B:E6:3E:AC
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:85:af:75:1d:6f:43:87:94:5b:6d:1b:1d:db:66:42:e1:d1:
5b:a8:38:43:b3:2b:c8:59:9c:d1:6a:61:8c:ce:29:b4:8b:6e:
f3:d4:e4:70:e4:ef:4e:1f:11:e2:06:4a:8f:51:f9:93:56:b9:
2b:31:bb:f1:c9:7c:6c:80:08:e7:d4:fd:09:61:ae:e5:5f:4c:
85:12:13:ea:85:6e:fc:39:9c:8e:1c:8e:25:9a:4e:f0:97:55:
d1:d7:14:69:5c:33:66:1d:0a:0d:6d:e9:bd:70:52:61:5f:ac:
38:32:b3:cc:21:02:ff:68:d3:36:b8:6d:e0:ae:21:93:e3:a2:
c1:1b:ce:d1:2d:ac:52:fc:97:a1:94:89:a8:ea:b0:a3:1a:5b:
fe:2c:52:48:a8:0d:5c:b9:e2:df:14:53:5d:3d:13:f7:76:ee:
0a:ed:48:92:43:ce:ec:eb:55:93:1d:d0:b4:d7:c0:cc:5d:68:
98:cf:17:fd:17:65:8d:19:ff:50:af:5c:d9:90:99:43:51:a5:
f4:06:2e:10:1c:8d:43:dd:be:0c:1c:29:dd:1b:93:01:87:e0:
0b:13:8b:84:3c:bc:4d:06:05:83:43:49:c4:a4:39:5f:e8:35:
f5:c7:18:e7:b5:c5:73:33:fb:ae:b6:66:3a:6e:28:da:a1:9b:
8e:e2:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:23 2026 by rpki-client