Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: 6cWzOki12uubWMXzoF7RzUzoVuk/SZGPA2K4CluKI1o=
Subject key identifier: D2:01:42:75:27:FE:D9:1B:FE:5F:4F:6C:0C:7E:CF:39:29:E2:66:EF
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 019D97743AFBF93D0F5CFF8B8D644A6158CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 09AA
Signing time: Thu 16 Apr 2026 18:01:10 +0000
Manifest this update: Thu 16 Apr 2026 18:01:10 +0000
Manifest next update: Fri 17 Apr 2026 18:01:10 +0000
Files and hashes: 1: Zq0MFv-zigl29QjEhRxZZ3ciMl8.roa (hash: hYDRJ/YZvWpX6EoU2ePQIZV0D6A8L2Y7jJBr+AftG3w=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: ySU65ZOPpOOb0b/5PvPCvAHYPqsZLPO5OZUD1u3C6g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:3a:fb:f9:3d:0f:5c:ff:8b:8d:64:4a:61:58:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Apr 16 18:01:10 2026 GMT
Not After : Apr 17 18:01:10 2026 GMT
Subject: CN=d201427527fed91bfe5f4f6c0c7ecf3929e266ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:0c:f3:37:68:00:08:70:b0:ad:cd:c3:b6:
3d:58:f3:66:9d:f6:fe:8e:9a:8a:65:3f:01:de:ab:
00:03:79:1f:83:d0:fe:47:12:9e:3d:20:bd:a6:66:
bf:7d:b7:1d:f2:06:60:df:e0:50:7c:9d:e5:72:53:
39:08:13:0a:05:b9:dd:ad:ce:47:60:7f:14:d2:e8:
d1:f7:c1:99:b0:9c:69:3d:2f:0f:28:bf:88:6c:94:
7c:c5:2d:c0:21:15:59:3c:e2:ac:20:3b:63:61:a4:
ea:16:d9:30:61:bf:22:85:d9:95:28:c1:48:fc:37:
54:0c:92:3c:a9:74:82:b2:74:7e:ff:55:24:07:37:
de:b9:5e:ef:89:be:2f:6e:c7:07:11:23:c4:73:79:
40:14:5a:c0:76:49:8f:ab:3a:01:0e:e3:c5:cc:be:
e7:62:ff:64:f8:3a:5d:57:51:96:bf:90:a0:c8:e9:
aa:a0:b6:e5:90:26:c6:4b:85:e8:02:3a:62:c4:ba:
9f:98:9a:8d:66:21:a7:e7:4a:c7:39:bc:c0:6a:2f:
4b:ae:35:f8:2f:c7:2d:e8:e4:58:d7:45:93:b2:ba:
2e:c6:db:13:68:2d:df:f8:5b:88:3a:3f:25:2f:0f:
93:54:7a:86:3f:3a:cd:15:ab:8c:83:47:92:64:59:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:01:42:75:27:FE:D9:1B:FE:5F:4F:6C:0C:7E:CF:39:29:E2:66:EF
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:09:30:26:57:e6:79:37:bf:9d:3f:e9:a1:fb:6b:4f:f9:c1:
37:9a:7c:18:c5:16:5f:b8:39:76:eb:5c:03:ca:01:ae:56:8a:
f2:86:2c:9d:15:a0:2f:0b:28:24:39:3a:69:75:9b:01:ee:ce:
42:08:f0:fa:73:88:0b:2e:15:b3:5f:47:6b:58:3b:66:82:5c:
ff:61:4e:1f:f3:6b:7c:3e:0e:29:e9:0d:c7:2a:d3:3f:80:a4:
57:55:dc:3f:64:2f:34:c8:01:c1:52:09:aa:c4:59:f7:74:5c:
ef:11:d4:3c:3c:bb:8d:87:61:3b:78:15:01:35:cc:a2:e9:9b:
17:1e:59:a0:c0:15:b7:ea:7d:67:b8:03:a8:47:92:95:16:5e:
31:fe:ef:44:5b:96:9f:a7:4c:2e:4c:04:14:65:d2:3d:45:9e:
ce:35:20:6e:aa:2f:a1:ad:45:6e:db:ac:a8:48:71:d3:07:a1:
cb:3f:46:d7:6f:a6:6e:b6:72:3c:48:e7:bb:09:ab:9c:17:1c:
95:88:be:ca:c3:e9:a7:61:b3:3a:38:29:07:91:df:f9:9e:63:
18:0e:b1:40:5c:a5:98:97:4a:39:c2:df:e6:04:15:2d:c6:cd:
48:47:97:89:0f:52:ce:ae:02:48:46:bc:f8:c4:a6:04:fd:25:
1e:82:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:08 2026 by rpki-client