Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier: oajrVixsGdpE8G5I1iSn663+SKpXqkAWs1fZqwafvtw=
Subject key identifier: 81:0B:87:BA:38:BE:76:3D:15:57:30:D9:E4:74:0F:18:57:32:B6:D6
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 019DAE338D37EE291169F2C3F4D73A6C6718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number: 0553
Signing time: Tue 21 Apr 2026 04:01:47 +0000
Manifest this update: Tue 21 Apr 2026 04:01:47 +0000
Manifest next update: Wed 22 Apr 2026 04:01:47 +0000
Files and hashes: 1: R9ObVa6lHs_yNBiXEeUkNwPvfjY.roa (hash: 1wYwYXDyakrLIYM8b4nBqcfhKSxazLcyqbUdGxKpMqk=)
2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: mK+q/zRvVRCfnnA802mE6pMwAbjr2n2p85oEm81DpQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ae:33:8d:37:ee:29:11:69:f2:c3:f4:d7:3a:6c:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Apr 21 04:01:47 2026 GMT
Not After : Apr 22 04:01:47 2026 GMT
Subject: CN=810b87ba38be763d155730d9e4740f185732b6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:cc:52:88:6e:43:80:dc:59:fd:0d:7c:3b:
8f:96:eb:75:c5:d1:d4:42:e2:1d:65:c4:85:81:2a:
98:69:7a:9d:f8:80:57:ab:07:de:ee:c8:85:df:8c:
93:d1:4c:81:d2:0a:77:e9:23:e7:81:77:21:98:76:
b9:86:36:97:fc:b0:c2:f8:a1:a5:9e:89:83:91:c8:
84:64:a0:3b:1d:5e:5d:5b:a4:e0:00:ce:96:08:37:
81:e0:7b:eb:2d:88:cf:44:4d:cc:6c:0a:72:df:3c:
f9:3a:16:92:f9:85:f4:2e:94:bb:20:88:df:ea:2b:
48:5f:fc:62:78:f5:d9:4a:2e:12:94:cd:7c:ca:25:
26:0b:59:90:21:cc:34:86:fe:f3:0a:a4:e1:1d:f4:
76:aa:82:8d:42:22:96:32:c8:65:44:05:aa:80:b6:
c7:97:b2:37:51:56:17:d3:cc:fe:db:0c:ac:e0:99:
ce:83:58:f5:da:b2:12:3f:e1:20:db:59:01:a8:3f:
8d:06:52:ef:4b:d5:77:82:40:26:3a:7c:ad:d5:28:
73:78:68:55:3b:85:0b:50:75:d9:9c:79:81:d2:6e:
8e:01:d1:fa:04:ce:e2:26:44:94:cf:75:82:a4:56:
2e:3a:55:b1:b1:dc:bc:da:06:c4:2e:4c:c2:f5:73:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0B:87:BA:38:BE:76:3D:15:57:30:D9:E4:74:0F:18:57:32:B6:D6
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:dc:77:de:2e:d6:e3:17:1a:c5:ff:83:58:46:43:e5:99:
ea:cc:f2:1a:8a:24:08:fc:df:aa:ab:c7:10:7a:e2:2a:f7:b6:
53:70:3e:6c:ae:e4:2c:e0:d2:91:d5:e6:4f:05:dc:74:45:e3:
89:09:4e:21:ee:29:23:8a:3d:50:ce:40:42:33:aa:d4:05:8c:
a6:bd:6e:2d:08:89:d7:d9:4f:fa:56:6a:cf:48:6f:4b:2b:e7:
dd:9d:36:ac:eb:bf:1c:80:dd:c1:12:79:56:e6:b9:43:85:66:
12:ef:d2:9d:02:56:e2:51:dd:99:f6:d8:03:d7:18:86:5a:f2:
bd:2b:fe:be:90:6d:d3:7a:00:dd:f8:69:a3:e3:51:f1:78:e0:
ad:b0:de:cb:19:8e:5e:91:d7:47:fd:ae:35:ea:13:2a:67:4c:
9e:97:3d:4c:5a:81:b7:90:7d:e2:b7:10:c0:2c:6a:cb:41:62:
09:a9:f0:40:a6:26:eb:a7:5d:c3:71:07:e9:84:8c:e0:53:dd:
2b:57:69:be:df:f4:50:20:6d:3c:15:6f:0d:56:02:24:34:cb:
b4:2f:17:b1:e4:6b:4b:4b:15:0d:98:9e:64:b0:ac:4e:39:6b:
95:cc:59:d2:22:cb:21:bd:fc:a1:1e:39:e5:2a:28:87:a7:59:
53:d6:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:28:00 2026 by rpki-client