Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier: Ci7wsUDcwreY99xzN7BiSjmHtSktGag6g67BltsSo+8=
Subject key identifier: DC:BB:70:77:25:C4:1A:79:2E:78:4B:75:05:9E:5F:DE:5B:09:67:B7
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 019CA97CE2469847446EF63B7ED94EB9BF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number: 04CC
Signing time: Sun 01 Mar 2026 13:00:59 +0000
Manifest this update: Sun 01 Mar 2026 13:00:59 +0000
Manifest next update: Mon 02 Mar 2026 13:00:59 +0000
Files and hashes: 1: R9ObVa6lHs_yNBiXEeUkNwPvfjY.roa (hash: 1wYwYXDyakrLIYM8b4nBqcfhKSxazLcyqbUdGxKpMqk=)
2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: HtKPe/pU9ZaOrFNgnEKqnc1LP15/PpBs9FMsNQFU8Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:e2:46:98:47:44:6e:f6:3b:7e:d9:4e:b9:bf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Mar 1 13:00:59 2026 GMT
Not After : Mar 2 13:00:59 2026 GMT
Subject: CN=dcbb707725c41a792e784b75059e5fde5b0967b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2a:a4:4c:14:d0:da:96:98:60:3d:ae:f6:7c:
7a:5d:d9:37:57:f8:2b:25:8f:0f:43:0d:30:5e:41:
64:81:0d:a2:89:0b:7a:f2:32:9c:66:b2:30:9c:96:
93:a7:1c:e8:69:0c:84:91:40:d1:5e:64:69:4e:f3:
17:0a:e0:77:45:b9:4b:2a:91:b8:86:dd:ef:18:51:
ae:3b:f0:47:c8:96:e1:30:bf:6c:9e:f7:2b:78:5e:
d2:52:c7:e7:7d:22:00:fc:e2:61:db:2f:0b:71:d7:
e1:03:74:2a:1b:10:b9:df:b8:87:fb:02:de:12:a3:
31:61:9b:6d:85:ab:96:93:5f:ae:b0:7e:6e:3b:d8:
18:2b:ea:6d:81:33:0d:70:91:eb:02:ef:77:2a:b2:
3a:c3:74:9e:db:8c:21:fb:ad:f5:d3:d6:a4:a9:fd:
75:4c:29:9d:9f:9b:90:f9:b5:c2:4f:50:81:b3:a2:
25:55:34:65:15:ed:6a:97:18:c7:e8:66:50:5d:46:
32:1a:d7:01:99:a2:7f:b4:8f:5a:37:3d:fd:bd:fd:
94:c9:f4:61:37:7b:c5:6c:32:5d:68:c5:b4:64:b5:
57:14:69:b2:a2:9a:7c:0b:e9:5f:c7:a5:34:50:d0:
54:09:ca:61:07:d2:d4:92:cf:33:a2:da:85:9f:ec:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BB:70:77:25:C4:1A:79:2E:78:4B:75:05:9E:5F:DE:5B:09:67:B7
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ee:1f:a3:7a:90:97:f6:9a:dc:26:0b:8c:6b:96:98:65:9e:
75:36:b2:4b:28:e1:54:e2:e9:54:e8:7a:25:72:cd:5d:92:db:
12:17:7f:12:ac:23:65:98:bf:af:ec:ef:3c:a5:b6:97:f7:57:
07:1c:0b:1f:04:57:fe:48:83:93:f8:b3:de:59:66:80:8b:c8:
a8:8b:93:f9:34:29:d4:45:3c:cc:92:10:f1:4a:2f:a4:e8:57:
e2:3e:36:00:17:64:68:ea:97:38:01:bb:ea:8a:16:cb:e8:7d:
00:5b:41:90:f0:48:ef:0a:c2:83:0e:48:e4:c4:79:13:54:05:
d7:eb:22:6f:2b:52:3d:93:89:63:b8:71:f4:42:63:e0:3c:ce:
00:1e:1c:18:72:5a:82:6f:e2:8d:e4:42:15:56:10:8c:66:a9:
98:cd:a7:be:37:a8:b6:67:59:33:2b:ec:d4:d0:d4:97:c6:1d:
6d:07:dd:21:f9:b6:0b:58:93:a5:c8:54:fd:f8:6d:c5:c9:8a:
ea:80:6e:e5:4b:13:96:70:4b:29:ee:1a:4c:81:52:63:93:05:
f9:79:60:57:b4:dd:72:90:5c:d0:a8:03:6a:7b:e7:5d:96:7a:
b9:a1:9e:80:40:48:27:77:65:ac:3b:2d:67:8c:06:a1:97:5e:
f5:2c:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:47 2026 by rpki-client