Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: RP6jWVFildeu0BR7XnoXQXm70p7m7aW9Pq2vSw6Mt6s=
Subject key identifier: 60:E0:F0:5D:A9:22:F1:47:2A:92:E0:83:DB:99:A0:56:D6:A0:70:59
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 019CAD907247AD4AF2DBCD5FC3D9142FD9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0DB8
Signing time: Mon 02 Mar 2026 08:00:50 +0000
Manifest this update: Mon 02 Mar 2026 08:00:50 +0000
Manifest next update: Tue 03 Mar 2026 08:00:50 +0000
Files and hashes: 1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: B3m2L0ot6wWSFAi22XexsDKhAjRwefO8ar3NzTFr0UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:72:47:ad:4a:f2:db:cd:5f:c3:d9:14:2f:d9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Mar 2 08:00:50 2026 GMT
Not After : Mar 3 08:00:50 2026 GMT
Subject: CN=60e0f05da922f1472a92e083db99a056d6a07059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:cb:71:c5:3e:ae:9c:65:9b:bd:ee:02:27:
38:c1:28:7c:10:5c:98:38:2b:34:09:13:48:a1:9a:
b5:b5:a7:f5:61:04:c9:79:59:44:3d:ac:e3:b2:81:
35:bc:63:32:ab:f0:1d:62:a8:a7:d0:79:3a:ed:59:
3e:d5:da:46:4a:0b:71:25:68:05:93:60:22:0c:50:
19:d5:48:6a:33:6e:da:c6:b5:5e:d3:39:92:4b:49:
69:b5:fc:32:00:08:db:ae:1e:74:84:1f:a1:8e:68:
e2:59:c5:23:98:f8:39:45:3a:c0:1e:f5:5c:d8:d3:
f4:30:c8:54:12:34:1a:49:ab:18:f1:55:5f:97:45:
c4:8a:b2:5e:5e:70:c7:7a:20:14:26:6f:4d:3b:21:
75:8b:22:d4:6f:07:93:77:f2:f2:a7:de:89:ad:49:
ff:b2:a7:26:f1:9f:29:13:99:2a:a0:e9:56:d1:f5:
72:5a:7f:7c:c1:72:f9:0b:02:40:42:8b:a6:f8:b9:
f7:72:0d:e7:54:75:d0:52:ca:90:53:a8:7c:58:ad:
04:52:36:f8:5a:be:50:d2:8e:c8:21:d1:a3:8d:cd:
4a:d8:e0:b8:de:cb:d2:e6:bc:4b:18:04:7e:37:fa:
ee:8b:fb:35:29:f9:48:a7:61:61:d7:dd:b5:c1:b0:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:F0:5D:A9:22:F1:47:2A:92:E0:83:DB:99:A0:56:D6:A0:70:59
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3a:da:05:39:4c:ae:a0:97:b1:b5:6a:ef:72:59:eb:b1:45:
f0:8a:bd:95:40:03:3b:9b:47:c1:9f:7d:ef:b2:0c:b4:7d:34:
89:50:f2:23:fc:af:ba:af:90:a1:c1:53:ea:05:ab:d6:e2:bf:
e1:0a:17:e6:8e:1f:21:dd:2f:0a:e2:53:12:e7:ec:ff:11:c4:
0a:46:ee:dd:4a:8a:82:99:4d:27:ab:ca:cf:c2:56:5c:52:63:
51:6b:fd:82:95:9a:c0:d7:a1:cc:4e:0a:61:f3:9d:0b:38:c7:
06:0a:bc:52:66:71:5f:64:2b:87:82:96:2c:1b:ee:e8:bc:34:
7d:0c:39:be:f8:53:62:34:1e:ff:b2:0e:41:ac:fe:07:af:fa:
88:9d:2c:01:99:23:7b:ca:45:2d:e6:fb:d5:ed:5b:a3:75:c3:
05:7a:c9:f9:98:4f:af:5c:de:ab:6d:79:04:1e:b8:23:e2:2e:
b5:c5:50:3d:f0:03:c9:d6:14:11:ca:57:e2:73:11:e1:0f:5b:
be:b8:36:37:9b:98:7a:b4:04:fa:c9:eb:9c:cd:97:88:27:8a:
85:06:f8:5c:01:76:7f:13:87:c4:ce:6f:40:9c:b8:7a:cb:f5:
05:39:c3:1a:cf:eb:1f:3c:d0:7d:0c:2b:7c:be:8e:c0:a3:6c:
90:c2:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:25:39 2026 by rpki-client