Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
File: qpzqolwClcyPY42qbWT3Ii9rCS8.mft (raw, json)
Hash identifier: atDl2JYI4dAXMxJCJYqKITWeXy11x/taKBhfaFQOJ9k=
Subject key identifier: DD:98:FF:B5:DC:E6:A9:3E:C9:44:B8:E5:98:48:03:4F:1D:B5:52:D2
Authority key identifier: AA:9C:EA:A2:5C:02:95:CC:8F:63:8D:AA:6D:64:F7:22:2F:6B:09:2F
Certificate issuer: /CN=aa9ceaa25c0295cc8f638daa6d64f7222f6b092f
Certificate serial: 019DA41D13877B5A18B1ECE12433AAC8BA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
Manifest number: 93
Signing time: Sun 19 Apr 2026 05:01:02 +0000
Manifest this update: Sun 19 Apr 2026 05:01:02 +0000
Manifest next update: Mon 20 Apr 2026 05:01:02 +0000
Files and hashes: 1: 5yQDORsjAc2qkrpGb2sFa87WdeQ.roa (hash: 6lWA3h6svKzAnLIBjtQj55IORN1aTf/i5R1xbiHi7hA=)
2: YR0KezbAbuwIwjhj2avNGcLc02U.roa (hash: rah4d1f8WB0+ik2fE3EWyLXPHfSge2y2R4kVqT1hjgw=)
3: qpzqolwClcyPY42qbWT3Ii9rCS8.crl (hash: NPKikvAFZ2qgGKjlOFTFiPSAHT1otaoMBOTbWGIhdB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:13:87:7b:5a:18:b1:ec:e1:24:33:aa:c8:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9ceaa25c0295cc8f638daa6d64f7222f6b092f
Validity
Not Before: Apr 19 05:01:02 2026 GMT
Not After : Apr 20 05:01:02 2026 GMT
Subject: CN=dd98ffb5dce6a93ec944b8e59848034f1db552d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:38:94:d3:39:77:39:d4:7f:f3:59:31:81:
1f:65:b1:3f:8d:0f:f1:15:a0:59:10:43:0c:a2:08:
a6:9c:c9:07:c8:ce:e9:fc:8b:ca:2e:68:ed:10:21:
01:22:30:4d:7b:3b:a4:9b:74:20:ac:14:ef:11:a5:
fc:e7:21:ea:8c:62:c8:60:c3:ff:a6:d5:89:8d:37:
e2:f4:00:4a:76:f9:22:9c:c6:a3:c2:7d:88:59:11:
16:6d:b7:50:b2:01:d8:7c:a1:d7:fc:3b:c9:85:13:
f3:8b:82:eb:0f:e1:7b:5d:7c:04:dd:81:7e:98:21:
01:08:e6:97:5e:3b:c4:5f:12:53:fa:3f:56:60:83:
c2:c7:c3:d2:34:17:bd:03:3c:4d:9e:f3:b0:c6:80:
32:d7:10:2e:8d:55:9c:bc:ae:03:e8:6e:a8:47:95:
0e:17:e5:90:80:95:05:51:5d:ef:08:84:b9:66:1c:
85:c8:ec:0c:f7:a2:7f:be:bf:fd:3e:99:fb:1a:bf:
1b:64:72:0d:83:8c:75:4b:2a:ee:47:f6:b8:fc:f1:
3b:cf:f6:0d:ce:4e:e0:bc:f3:d7:77:ef:97:26:29:
59:de:fe:e8:14:b1:9f:10:4a:c4:87:29:73:95:8c:
60:65:15:0b:53:56:93:4c:c0:66:d7:1d:fd:7f:24:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:98:FF:B5:DC:E6:A9:3E:C9:44:B8:E5:98:48:03:4F:1D:B5:52:D2
X509v3 Authority Key Identifier:
keyid:AA:9C:EA:A2:5C:02:95:CC:8F:63:8D:AA:6D:64:F7:22:2F:6B:09:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:d4:e3:12:b4:5e:08:14:6f:0a:27:a6:05:93:5c:1c:d1:
1c:4c:9f:9b:35:a6:d2:66:2c:e9:8e:7e:f4:d1:f7:ff:71:be:
de:53:d8:a3:36:2c:30:09:97:a0:1f:54:2a:c1:9f:f4:24:52:
07:c1:bd:81:19:c6:d5:8d:65:5e:98:50:ec:07:52:1d:11:0a:
b3:51:70:a2:4b:f7:76:07:4f:9d:c7:82:a5:b1:cb:09:31:fc:
7d:15:b1:81:fc:00:35:e4:47:c0:ec:c4:95:38:21:d7:c1:94:
54:f9:09:7e:a0:95:4e:b1:28:0a:d0:17:db:24:2d:9b:5d:2b:
29:cc:cb:88:6a:a6:2c:60:7c:91:3f:9d:f8:5b:b8:16:6c:75:
50:f8:58:ec:fc:ee:fe:d1:bd:3c:12:7b:e3:8a:3c:6b:d7:57:
cf:e8:47:56:36:07:43:55:8a:a7:8f:77:4c:d8:c0:9f:23:aa:
85:7b:87:e0:8a:14:a9:61:49:38:cb:64:de:c4:03:03:f7:12:
2e:68:39:5e:56:f5:0a:25:26:7a:90:f0:c3:d9:81:e5:6f:64:
f7:3a:ad:d2:32:63:c7:cf:80:44:e0:51:56:ab:a9:fc:26:48:
46:f7:9f:3c:a7:bd:54:54:9d:c8:97:55:a8:5e:5a:10:a2:41:
50:68:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:36 2026 by rpki-client