Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier: 2Bx79g69IjRI1Uyh4jQ5AQQ5A+gFcyd/mNisid6Jft4=
Subject key identifier: CD:14:23:6B:C2:7A:BF:4A:EB:3C:6F:ED:D2:A5:20:F1:41:B4:BE:AD
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial: 019CAB3400D1D1ECEE0D7E06D01F5E245D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number: 0BCA
Signing time: Sun 01 Mar 2026 21:00:37 +0000
Manifest this update: Sun 01 Mar 2026 21:00:37 +0000
Manifest next update: Mon 02 Mar 2026 21:00:37 +0000
Files and hashes: 1: gefx2fr_MDXtvtuWxylmxEbY_9I.roa (hash: DoV6a6Zcce+W+t7QXHihpVY0/SyCf2V+1wNo94geZZ0=)
2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: jnl5xsM9npGscdKbZdHWwC5rEhP1+gTqffDzybYD8FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:00:d1:d1:ec:ee:0d:7e:06:d0:1f:5e:24:5d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Validity
Not Before: Mar 1 21:00:37 2026 GMT
Not After : Mar 2 21:00:37 2026 GMT
Subject: CN=cd14236bc27abf4aeb3c6fedd2a520f141b4bead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:1e:01:34:01:d2:53:ff:46:0b:5d:95:3e:
3f:a0:68:7f:52:7b:66:3d:e8:43:a5:b8:32:e5:0e:
3b:74:f5:0b:34:1d:6d:6f:b4:12:2a:fc:09:c9:54:
0b:1f:54:93:a1:17:de:3a:84:eb:bb:bc:9e:94:24:
40:2d:b5:58:3f:7f:9b:89:76:b9:f7:d1:54:8f:a3:
32:f9:9b:76:8e:a0:03:99:84:6c:ee:85:e3:cc:b3:
05:79:07:59:47:78:f0:61:e9:16:2a:4e:f4:66:83:
58:c3:52:ea:2d:a2:73:1e:10:50:57:a3:c8:50:cb:
34:20:51:4a:d3:3e:62:40:1c:49:cb:d3:b0:72:47:
c6:d1:49:72:d4:cf:ec:fa:98:57:76:bd:3c:22:63:
7a:87:96:13:bc:4f:85:2b:b5:42:fc:ff:79:62:c2:
74:43:81:12:f1:02:ec:bd:40:cc:06:17:15:e6:29:
84:36:85:89:35:54:86:3f:ad:73:50:69:46:aa:6b:
9b:9c:d8:bc:e9:1c:ec:28:55:8a:77:bc:45:8e:eb:
fc:ed:a3:cb:ad:0b:12:ec:5a:99:0d:4e:95:bc:43:
1e:66:4d:59:7e:b3:f5:1d:7f:72:92:4c:f7:a8:56:
e8:71:cb:28:46:30:16:44:28:be:c3:48:d7:0c:c1:
07:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:23:6B:C2:7A:BF:4A:EB:3C:6F:ED:D2:A5:20:F1:41:B4:BE:AD
X509v3 Authority Key Identifier:
keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8f:13:f6:9c:93:e6:78:ad:f2:07:3a:cb:fb:49:eb:07:00:
87:88:c9:07:15:27:21:89:3f:f8:2b:81:2a:e2:50:82:f5:bb:
ad:25:46:3c:31:ee:8e:b7:bb:11:41:3d:d6:20:42:75:39:3a:
e1:41:d3:7c:9d:e2:b1:cc:f3:71:a5:b7:57:39:11:e8:62:41:
b2:1e:63:99:75:1d:d2:a3:b5:08:93:62:fa:f6:e3:c1:2e:57:
74:9e:28:b6:e4:bc:e1:30:ea:b8:db:0a:66:d4:49:a8:0b:c9:
1e:a0:29:29:4b:fe:c8:27:d4:18:65:18:f9:ad:cc:a6:20:99:
b2:34:fc:93:dd:0e:76:fe:f8:28:7c:49:5a:a6:e6:ef:08:25:
de:39:eb:34:6f:1f:4b:ab:61:f3:40:6e:e3:57:f1:c4:12:f7:
32:21:ab:9e:64:dd:58:b4:9d:a1:be:3b:3a:a4:ce:b1:db:1a:
42:9b:7d:c1:6d:4c:fe:b3:0f:84:0d:b8:61:56:65:b4:5d:05:
81:27:d0:c6:50:33:6d:47:19:90:ad:9c:b3:ca:06:18:51:c5:
5f:a4:56:e4:60:a4:a5:ad:5c:6a:50:f7:ba:58:51:b0:b4:56:
f8:5e:cf:e6:44:75:29:57:44:7e:35:5c:ca:b0:ac:f8:79:fa:
ef:79:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:00 2026 by rpki-client