Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
File: qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json)
Hash identifier: rjeyqNbYwxDpFQQlJ9eLtUqGW1HuhzjpoZAP8H71puA=
Subject key identifier: 3F:DF:E9:B1:F5:DD:54:CA:C7:01:9E:E6:F8:53:8E:7F:8A:F3:01:A4
Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
Certificate issuer: /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Certificate serial: 019DA29CD935B10D1682A518DE86459D3FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
Manifest number: 0802
Signing time: Sat 18 Apr 2026 22:01:21 +0000
Manifest this update: Sat 18 Apr 2026 22:01:21 +0000
Manifest next update: Sun 19 Apr 2026 22:01:21 +0000
Files and hashes: 1: 1-8RpzQOO8MH_8tY_8CiuesNU5kw.roa (hash: NwZ58UxGQif1qZHSYOqbsi4+8X/Tbr0yxp1KYuyKjAA=)
2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: xhjKZXn7iLySHHSAYwl552JNq3XYUUqsw6CaSo79mGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:d9:35:b1:0d:16:82:a5:18:de:86:45:9d:3f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Validity
Not Before: Apr 18 22:01:21 2026 GMT
Not After : Apr 19 22:01:21 2026 GMT
Subject: CN=3fdfe9b1f5dd54cac7019ee6f8538e7f8af301a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:ea:df:21:de:4d:35:3e:3e:ab:8a:b3:f5:
3e:ae:78:f4:c5:e7:6f:81:55:26:c8:93:f3:0d:71:
3e:3d:89:53:45:0d:07:80:e9:56:8b:23:51:5f:cc:
77:da:63:e9:ba:d5:93:8b:d2:5f:cc:33:8b:30:62:
d2:a3:2d:26:da:ef:44:7f:84:37:09:a9:d6:31:0a:
65:18:19:17:d2:0c:79:c1:13:81:a1:0c:14:4e:15:
20:b5:ae:f7:a0:bc:92:4d:20:55:31:4a:54:f2:4f:
16:08:a4:0d:50:4d:b1:a6:a9:8d:3f:29:9b:55:cf:
ef:9a:c4:d0:d4:e7:50:88:55:5d:50:5e:1d:14:27:
41:d4:f4:13:12:17:5b:77:e6:1f:d2:31:75:5c:10:
e6:a8:8e:9c:06:58:2a:78:66:57:4e:51:93:16:ab:
bf:66:3f:c6:d7:b6:47:d6:83:03:a5:dd:f8:2a:8e:
c1:17:49:92:9a:f1:e0:06:ba:fc:3d:68:cb:eb:5e:
8e:7c:c7:8d:38:13:69:f3:1e:4c:a5:ca:f2:61:a2:
da:96:64:12:b9:62:c8:0b:14:65:ae:a0:73:bf:81:
f3:d8:13:65:9d:1a:28:2f:5c:33:84:69:a0:11:5e:
ad:51:b5:4c:3b:ad:74:84:b1:31:61:df:80:a2:b8:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:E9:B1:F5:DD:54:CA:C7:01:9E:E6:F8:53:8E:7F:8A:F3:01:A4
X509v3 Authority Key Identifier:
keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:99:4c:80:5c:c5:e0:de:4c:b0:34:6a:9c:2f:43:24:73:08:
05:3c:40:85:6c:34:08:80:f1:b6:54:64:02:77:3b:8c:7c:7f:
de:e3:b2:87:ca:cf:57:45:ba:dd:da:d6:22:88:3d:2e:9e:63:
90:ea:2a:76:0a:fa:32:b6:6d:bb:9f:2c:b4:3e:54:db:c2:27:
3a:6b:19:5d:90:5f:5b:e5:59:43:a7:80:c2:75:fa:52:6f:91:
c6:76:58:7a:22:bc:1c:4f:77:b3:0a:09:62:af:6a:f6:f2:18:
11:1e:3d:82:60:73:74:7b:5f:8e:5f:22:5b:73:24:ca:67:df:
6a:9a:6f:8f:c9:7e:41:25:5c:e4:4f:75:9d:f0:31:5a:f4:57:
c9:ac:29:da:a6:ff:8d:a3:87:a3:74:49:ee:c0:e3:27:5a:a8:
52:ef:eb:8a:91:7d:65:e6:2d:b0:2e:03:8e:1e:59:65:95:8d:
9f:10:92:38:19:01:18:78:1d:d5:86:85:83:4e:71:93:f2:38:
54:b1:07:17:8d:43:5e:c7:3c:2b:46:4f:35:05:ec:62:ad:89:
1b:c4:a7:bf:7c:c7:a1:0f:63:46:71:3e:aa:5d:a4:3b:ad:78:
ec:97:64:25:23:bd:c4:cf:92:7a:80:96:47:85:3e:86:ad:5e:
68:7c:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:46 2026 by rpki-client