Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: 0bIAc4npqFzewXglHNxqy0NSTxZ2L1t8AZ6SBwGmWxE=
Subject key identifier: 9D:9F:98:04:47:98:8B:4B:15:90:FA:1B:8F:36:AF:12:09:D8:81:4C
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019CAC0FE0B563796A3CF1DF2F15C2311092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 02BF
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa (hash: 11RGKugOQUaTnt/hJwS9BTO4yUW3mvsWT6IHYcZEL9U=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: H9Ap/Mn1YPhRPMfspApLyHNy0tsuRCLp4rKzR7waSdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e0:b5:63:79:6a:3c:f1:df:2f:15:c2:31:10:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=9d9f980447988b4b1590fa1b8f36af1209d8814c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:95:4b:17:61:d1:85:75:ec:af:ef:6e:d8:
bb:60:b0:04:e9:47:a8:a7:43:37:f4:80:9e:0a:b5:
6a:da:53:61:60:ba:fc:6d:cc:2f:bb:06:e9:54:bc:
13:af:e1:66:15:dc:95:69:f9:06:cd:31:68:3c:29:
d6:65:0c:b8:9a:96:2b:ab:eb:dc:aa:47:f3:e6:62:
2f:cd:a9:9b:22:e6:95:cd:46:68:35:75:5e:df:28:
12:25:4d:7a:b4:cd:96:d9:32:f8:dd:21:5b:0c:fb:
07:c4:29:53:f2:b4:ce:c4:57:73:53:28:3c:1c:48:
f3:34:c8:a7:37:4d:0c:ec:b7:ec:a5:3c:a5:e2:f3:
63:ea:0d:59:6f:cc:de:76:1d:c3:ab:18:b8:fa:7c:
4e:66:e7:ea:f3:ab:d1:6e:5e:b4:6d:45:95:7e:c3:
81:c4:e3:23:50:e8:e3:ae:72:9e:8f:8a:61:80:7e:
d1:b3:e3:aa:3a:e1:0b:a3:4b:61:36:fb:44:31:9d:
fe:6f:86:65:6e:14:59:cc:06:27:51:76:07:7a:0b:
05:32:85:5a:45:05:dc:a0:be:38:66:be:e8:ad:bd:
9c:11:dc:eb:db:bf:e0:7d:67:4d:01:f7:58:84:33:
9c:fd:3d:be:b3:cc:44:4c:20:c9:28:18:0b:fc:7e:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9F:98:04:47:98:8B:4B:15:90:FA:1B:8F:36:AF:12:09:D8:81:4C
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6a:de:91:96:fc:1e:ad:63:60:93:c8:e6:d3:e3:9a:73:12:
2a:b0:a9:63:ef:fa:c9:10:a5:55:2d:09:84:e2:53:c1:54:e6:
22:d9:26:aa:d3:62:08:47:09:25:87:96:e0:91:9d:0b:18:fd:
de:10:d1:47:e5:5f:9f:16:53:b0:83:cb:f1:24:be:06:10:15:
76:e8:67:59:00:b3:d3:19:78:5d:0c:76:96:9b:23:ca:de:cc:
d8:d6:85:17:24:6f:24:5a:6b:25:1d:8b:37:f8:c8:e1:6f:ba:
bd:e2:2a:a4:91:1f:d6:96:f6:89:da:37:77:20:27:b0:2b:d2:
ee:06:e2:66:30:b2:f0:d0:c1:c1:a0:26:ac:40:6c:a2:4d:cc:
25:51:4f:01:3d:55:93:83:16:d3:d6:36:69:21:3f:ec:44:78:
5f:d6:f5:99:a6:86:ca:bc:ab:41:a6:0d:b0:87:f1:01:48:b8:
d2:9e:68:91:9c:23:00:70:53:da:a6:87:3e:ca:fd:ef:b7:96:
3d:1d:38:2e:98:15:12:e3:95:55:23:72:bb:cb:75:f5:a4:d9:
d2:23:ac:f6:d3:72:97:d9:97:3a:e7:ef:9a:17:0e:18:fb:97:
83:1f:eb:0e:09:7c:4a:8f:c1:20:5d:e7:fc:3b:19:a1:89:5e:
15:bb:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:15 2026 by rpki-client