Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
File: qiIvVnO4KKeuUvmboMYqzXCXSjg.mft (raw, json)
Hash identifier: wDT3BxUOMIKMY3TnfggVTi5F5IndUEe9yu570R69T6g=
Subject key identifier: 97:AD:45:EB:0D:6A:69:AA:41:DB:C9:7D:50:83:6A:98:F3:2F:41:FD
Authority key identifier: AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
Certificate issuer: /CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Certificate serial: 019CAC7DFBF17B4EEB419B94A6AD8D143A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
Manifest number: 0542
Signing time: Mon 02 Mar 2026 03:01:03 +0000
Manifest this update: Mon 02 Mar 2026 03:01:03 +0000
Manifest next update: Tue 03 Mar 2026 03:01:03 +0000
Files and hashes: 1: 9AVYlnVDy_5NTBGvlnnPZPWKT8U.roa (hash: N+NhjHfDEfFXjTSJhobVC2Q1bhjazURhKTdBJKZj/zM=)
2: qiIvVnO4KKeuUvmboMYqzXCXSjg.crl (hash: 3LCyapnWIZ+uYSDmlidCuzhOFuLWF2iWDbAu0qc/PXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:fb:f1:7b:4e:eb:41:9b:94:a6:ad:8d:14:3a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Validity
Not Before: Mar 2 03:01:03 2026 GMT
Not After : Mar 3 03:01:03 2026 GMT
Subject: CN=97ad45eb0d6a69aa41dbc97d50836a98f32f41fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ba:0c:0f:8d:ca:fb:8d:01:9d:de:d1:a9:2e:
10:65:9a:18:ee:01:53:70:20:25:0a:f7:41:f5:e6:
76:c0:ef:1c:7f:4f:e6:b5:e3:2e:9f:3c:3f:ef:86:
95:59:72:95:a6:55:8c:2f:22:e3:de:47:bf:99:82:
f8:28:44:22:42:ab:ef:b0:98:42:68:ef:2b:dd:6b:
82:00:93:a1:9f:93:10:ad:0e:31:26:3e:e1:4d:cf:
07:6a:62:a7:2c:df:7e:9c:0f:cf:c4:22:1a:38:df:
8c:1e:10:84:34:f4:e1:f0:fa:0e:63:ef:0a:38:43:
63:c5:cc:b3:f3:4d:42:e6:74:ce:78:78:ab:fd:44:
f5:18:2c:5a:01:85:f0:e6:7d:16:83:7e:a1:29:a6:
35:20:27:2b:90:16:48:bd:64:7e:59:cb:11:e2:2f:
ba:90:b5:5a:17:14:28:dc:74:07:a5:e7:71:13:ae:
5f:e6:63:d7:7f:3f:0d:0d:da:45:46:58:78:45:a7:
ca:e8:87:49:c1:fb:15:08:fa:57:21:ae:94:13:e5:
77:7f:ae:20:e0:f5:3e:be:9a:42:4e:3f:40:02:2d:
ac:d1:67:a8:e4:a3:c1:2a:5c:3f:09:f9:bd:81:ad:
1c:50:04:df:ec:62:ca:87:df:69:b2:24:f6:1d:01:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AD:45:EB:0D:6A:69:AA:41:DB:C9:7D:50:83:6A:98:F3:2F:41:FD
X509v3 Authority Key Identifier:
keyid:AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:19:74:75:cf:9e:9c:c5:38:95:9f:72:1d:58:fa:17:30:b9:
63:82:d3:5c:00:57:c9:a2:cb:40:bc:82:ca:25:14:30:17:e7:
b0:29:4a:56:33:6a:31:97:cf:e7:17:fe:00:7d:16:0c:0f:04:
e2:28:d7:84:b3:5a:4f:64:24:22:b3:3b:29:a0:55:66:44:d3:
40:22:96:2d:11:a9:ad:f3:80:e2:d1:8a:37:9c:82:27:f1:1a:
03:8c:b8:ef:f8:7f:20:b4:6e:c3:d1:65:bd:3a:8a:ed:a1:49:
06:bd:75:b7:5e:2a:0d:eb:4e:50:8d:9f:84:ac:29:66:5f:36:
1a:13:e6:1e:07:13:5a:55:a8:f7:0b:5b:ba:72:f6:3a:a1:a4:
2e:4d:09:57:db:80:d7:77:9f:e9:96:e8:ba:be:f5:4e:6d:75:
67:c0:49:23:20:c6:60:b9:b3:11:78:68:22:6a:30:cc:71:bf:
fa:f2:70:a0:6c:ba:cb:f4:cd:49:dd:f9:2b:2c:9d:6d:10:41:
ea:de:72:bd:e2:47:cc:c3:d5:7e:15:75:6d:82:93:17:14:8d:
22:d8:7b:19:50:cf:98:e4:d2:41:cc:7c:fc:bc:b2:e7:89:66:
c6:c1:e6:8c:37:dd:0d:ef:39:9a:c5:1d:6d:39:f1:b4:04:31:
b7:aa:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:22 2026 by rpki-client