Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier: yjvFCcMYRMbzmXSRgEKQw6ZM20xLn7cqVaxPQLJjCDI=
Subject key identifier: 22:30:70:6D:01:09:A4:5E:8B:38:AE:EF:05:DE:C7:89:63:E7:01:A7
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial: 019CAAC63E78D22EC935D5557AFB24483453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number: 06DB
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: C9n3jZhV5gHWr76q-PSPLCCeU-c.roa (hash: NudX3PJ0NTpOrF0Ljr21hav4oi+7YT61u4c+R/6Ps9s=)
2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: VcMnmU3EgD59X9/MNmY1jqubp6ziQXW37qD94vDCSLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3e:78:d2:2e:c9:35:d5:55:7a:fb:24:48:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=2230706d0109a45e8b38aeef05dec78963e701a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:49:03:34:8d:b8:72:07:80:5c:42:34:df:
9f:56:0f:09:b1:b2:3f:9b:ef:43:c0:22:3f:92:14:
ab:f6:82:ea:fb:82:3d:34:ee:e7:1c:f2:73:b2:26:
9c:b6:27:5e:25:b1:aa:50:27:9a:d7:cb:c9:99:32:
cc:e7:87:5b:86:05:cc:f6:96:e5:a7:94:e1:ec:d3:
ce:c6:25:46:eb:3a:61:29:c1:3b:2c:03:89:c4:51:
a5:d3:48:ae:83:d7:6c:52:db:ff:35:ae:74:13:a3:
e3:8b:a2:80:58:26:60:17:62:76:14:48:b8:98:49:
f1:ec:e9:98:5d:79:09:41:3b:2f:56:93:6e:c5:fb:
ee:90:6e:20:5d:65:97:bd:5b:a0:88:50:1c:28:62:
09:dc:58:ba:03:22:b9:69:f0:ba:05:5a:08:a3:00:
a8:e7:9c:99:3d:44:c1:a5:43:49:ae:8f:5b:c1:4a:
49:7b:f5:c1:0c:fc:4e:e5:46:97:0c:70:e2:dc:9a:
7f:e3:b0:d1:4d:78:af:94:48:92:12:5e:32:34:be:
79:70:b4:ce:5d:15:14:95:92:66:75:90:7a:b6:11:
09:bb:f3:0c:22:9f:96:c7:32:25:48:5f:5a:d9:58:
9e:65:07:02:4c:f1:29:8e:97:73:d6:8f:20:cb:f5:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:70:6D:01:09:A4:5E:8B:38:AE:EF:05:DE:C7:89:63:E7:01:A7
X509v3 Authority Key Identifier:
keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9f:c0:01:b7:c5:23:aa:2e:ec:2b:4e:ef:e5:3d:60:f6:ee:
30:01:21:70:4c:b9:96:e2:f2:d9:62:17:ad:ca:31:f0:8b:a2:
c2:1c:bb:4b:1d:22:24:bb:e5:ea:4b:b0:dd:d1:a3:f4:d8:ca:
4b:b7:fa:25:cc:72:2f:ab:fb:66:e6:39:55:8f:45:59:9b:10:
4e:b5:54:77:23:27:15:e5:66:88:71:e0:bb:4c:68:ba:bf:58:
b2:e8:6a:e5:85:a1:41:57:e9:e0:6d:4d:02:a5:c3:bf:4e:38:
f0:43:22:25:81:62:23:de:97:98:32:29:05:8a:ce:89:de:4d:
30:84:b5:e5:65:39:ee:95:87:72:f1:24:1d:af:94:1a:03:0f:
48:62:a0:c2:8b:54:1f:dc:01:70:c0:de:e8:dd:3b:aa:0b:dc:
67:95:e4:54:af:c2:36:7d:08:19:56:ab:45:12:fb:f4:55:60:
46:29:3c:ce:31:78:c4:32:4a:d7:53:cb:94:aa:98:ab:7e:cf:
2d:3f:9a:05:15:3e:23:29:68:3c:04:8f:64:1b:ae:24:6c:71:
5a:ff:f5:64:cc:c5:d2:69:02:3f:d9:79:54:06:c4:07:ff:93:
9a:0e:7a:62:b8:71:e9:20:7a:9c:ee:70:02:6c:6d:14:e6:e8:
9c:c9:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:56 2026 by rpki-client