Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: 1AvVy+ApynhEIgyFzNelgiNksSJ0Wl2F5QcMZLX7QOE=
Subject key identifier: 54:E6:8E:CE:A9:D2:61:15:57:6C:F1:10:B5:2A:41:72:84:E9:FC:CD
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 019D99CFC2C812410041EEC6CE557D3A52A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0E37
Signing time: Fri 17 Apr 2026 05:00:22 +0000
Manifest this update: Fri 17 Apr 2026 05:00:22 +0000
Manifest next update: Sat 18 Apr 2026 05:00:22 +0000
Files and hashes: 1: qBBRB8HmJZEtxi-niy9T8cyyncw.roa (hash: cgLv9kyCGCoNq0/R+t8v8q6At3djIYgfHJi87YrPrCE=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: +bSoVXhA5tMKCdsCQ3Hcfe1lYkd8a8fQ+940RDozPVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c2:c8:12:41:00:41:ee:c6:ce:55:7d:3a:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Apr 17 05:00:22 2026 GMT
Not After : Apr 18 05:00:22 2026 GMT
Subject: CN=54e68ecea9d26115576cf110b52a417284e9fccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:88:59:4f:49:28:1a:4a:81:7d:15:75:25:
44:69:98:a6:9b:4e:69:0a:90:2f:d4:1e:9e:39:f0:
da:2f:b4:04:27:e5:e9:88:42:23:5f:b0:95:e0:6c:
28:2e:c3:fc:80:77:18:d7:65:8c:8e:6e:36:87:14:
49:0a:90:60:9c:5a:16:82:3e:11:9b:6f:81:e4:f4:
b5:0a:b8:1d:f6:c4:d6:05:60:78:6f:4a:6f:f8:55:
d1:38:01:e7:7d:d6:f7:e8:02:dd:b5:42:05:7f:c8:
43:38:d4:65:53:45:27:5c:3a:8a:fb:c9:7a:78:31:
36:54:64:72:36:a4:1e:73:e8:a0:36:c3:9a:0c:0f:
67:93:d4:fe:d3:4e:e5:e1:50:0d:06:2b:76:c3:35:
35:05:71:bc:c2:cb:18:17:dc:5e:e6:ba:ac:16:9b:
d9:05:c1:f6:d3:c8:2f:af:99:25:36:10:03:bb:fc:
f5:81:95:92:41:a4:a7:65:b6:df:8b:89:f0:a0:0e:
10:5b:34:d2:18:de:04:8d:84:40:bd:67:ec:77:53:
27:e3:70:08:68:77:2c:cf:e2:37:d3:21:13:47:11:
26:bb:f1:25:07:01:5e:ba:58:11:00:0c:97:17:6c:
be:65:aa:fc:96:c2:42:1f:e6:97:0d:97:37:21:47:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E6:8E:CE:A9:D2:61:15:57:6C:F1:10:B5:2A:41:72:84:E9:FC:CD
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:ee:b3:eb:83:6c:9e:71:8b:34:72:c0:d1:49:66:33:df:
68:7d:f4:8f:17:7c:81:8a:02:cc:73:3a:49:c6:dc:53:9f:1a:
f4:3b:44:82:05:48:56:10:f6:85:6b:24:6d:f8:51:8a:e8:c8:
11:e9:21:90:ea:09:4c:bc:09:41:0e:2d:89:42:0b:9d:99:54:
4d:a9:f6:68:cd:18:fc:ef:26:8d:8a:c8:00:b0:7a:23:18:61:
52:b3:11:a0:17:c4:46:67:0a:d0:6f:49:f1:00:99:28:9d:e4:
f5:53:f1:09:b7:da:41:e8:c5:26:b4:66:16:47:70:3f:f9:eb:
cf:7a:ec:f4:f0:a1:8a:e4:40:d9:7d:4c:be:b0:a7:7d:df:0b:
5f:c5:35:32:c0:d9:de:3c:0b:0d:e0:ec:40:d3:5c:4b:e3:83:
41:02:6d:9f:bf:88:4f:3a:b8:31:dc:2f:fd:4e:8c:18:6a:0a:
2c:9e:dd:61:fe:94:d1:45:64:b7:45:ac:df:58:d6:df:68:bf:
72:d8:f8:88:ab:d6:71:03:03:73:79:b5:ab:e7:e9:de:e9:2e:
3b:bb:69:30:37:b9:8b:2d:21:14:86:32:85:70:c4:77:ff:59:
d0:2a:27:ee:a8:f6:a9:d5:59:b3:1a:a2:94:dc:71:22:34:0c:
8f:2e:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:54 2026 by rpki-client