Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
File: qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft (raw, json)
Hash identifier: pYRRTfZWWsKaPjAMqfxV2qBulcHRlcxCJWP8mozApy4=
Subject key identifier: 38:AE:4F:84:C7:98:84:71:08:5E:62:B5:3F:57:40:F7:D6:A7:9A:FF
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Certificate issuer: /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial: 019D9C2C961F20AEB1CE399F10A5B1A0DFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
Manifest number: 1294
Signing time: Fri 17 Apr 2026 16:01:00 +0000
Manifest this update: Fri 17 Apr 2026 16:01:00 +0000
Manifest next update: Sat 18 Apr 2026 16:01:00 +0000
Files and hashes: 1: 9BXJOc4KzcwJ_gxDdNfTFpPCWH4.roa (hash: pkuMeH0UPmv52lxpZhcTdpJlbDSliFaKfs/env8uGi4=)
2: qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl (hash: 5sV8PKqyZkbSIeR1s+OMCD+fSkWT9QWiIfePqzf29ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:96:1f:20:ae:b1:ce:39:9f:10:a5:b1:a0:df:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Validity
Not Before: Apr 17 16:01:00 2026 GMT
Not After : Apr 18 16:01:00 2026 GMT
Subject: CN=38ae4f84c7988471085e62b53f5740f7d6a79aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:ee:e4:3e:c1:9d:62:7c:c1:25:70:cc:73:
02:47:ec:d8:95:11:86:ed:87:e2:87:98:3a:59:db:
65:59:9f:57:f8:30:5c:c4:ca:7d:a8:07:d9:f7:91:
3a:e5:19:b7:f0:c4:42:d4:f5:66:bf:49:46:6b:56:
df:6d:5d:80:4d:b7:18:d0:71:52:29:f1:3a:24:dc:
44:25:1b:63:f4:71:1d:fb:d1:ca:2a:84:96:a5:ff:
60:ce:b4:2f:a6:c7:c8:8e:d5:7f:30:4d:89:05:63:
91:c1:04:ec:44:c6:b0:36:dc:00:70:ef:ec:c3:56:
08:d6:bf:3a:9a:20:2e:f2:a7:f4:4a:08:59:b3:d8:
d2:28:bf:ac:76:60:ec:86:5e:b4:fb:c8:6d:01:a6:
38:da:ee:cc:08:df:37:36:d3:53:83:aa:d6:ee:77:
31:cb:bc:62:3c:c5:ca:0e:30:c1:40:79:03:02:72:
48:02:a7:74:34:af:d3:29:92:4f:a1:5d:d1:36:65:
ce:d7:dd:64:2f:ee:37:c3:b8:a9:4b:12:63:dc:bd:
98:1c:3f:99:7f:f7:b7:08:dc:0e:60:35:4f:60:d2:
00:6a:44:19:7e:d1:90:64:41:21:21:e9:ec:18:ec:
34:a3:3a:a6:18:17:7c:02:a1:8f:78:0a:15:fc:7c:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AE:4F:84:C7:98:84:71:08:5E:62:B5:3F:57:40:F7:D6:A7:9A:FF
X509v3 Authority Key Identifier:
keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8b:0d:c6:87:d2:8c:dc:84:6d:94:a5:8a:30:33:cf:a1:9d:
54:34:e1:be:bf:ce:b3:11:09:cc:1b:b5:86:0b:5e:0b:32:12:
26:c4:fd:ce:65:52:c8:9c:a8:1b:df:58:13:aa:7d:47:de:7d:
56:4c:50:9a:c0:22:f7:35:ce:27:90:5e:44:b2:ec:90:a0:32:
78:5f:7c:be:f2:99:1f:a5:1b:cf:61:4b:e6:25:85:b5:f3:34:
e7:a9:c8:c3:91:02:ff:f1:e0:ba:21:f7:e4:82:6f:5d:63:ef:
de:68:5f:b8:68:6d:e1:37:b4:16:ee:9d:4c:d8:62:65:51:82:
04:73:a8:fd:4d:34:13:b8:98:ce:df:8f:bd:b0:03:f7:70:24:
be:bc:4f:b2:39:bf:8e:df:1c:69:8d:f6:d0:c0:c5:ae:13:3f:
03:f6:29:c5:c4:93:6a:1f:39:40:4d:3e:38:06:f5:68:ef:08:
09:0b:44:3b:6a:b3:e0:4f:cd:70:97:f9:7a:5f:c5:e4:8e:df:
22:42:e7:7d:04:75:95:91:de:32:23:45:ce:9a:40:2d:6b:44:
ca:be:a8:e4:2b:5c:dc:f2:cd:7c:fc:bf:ff:77:ed:11:1e:65:
8b:18:78:04:9a:f0:4d:38:0a:39:5a:60:ba:27:6d:63:d1:59:
03:6b:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:32 2026 by rpki-client