Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: n4tHeuZoZmcp/sdoJBRWYG/djcKt/q9mVfZRZg4KIOI=
Subject key identifier: 85:4A:CC:6E:72:E0:08:D1:F4:0A:DE:34:9E:92:0E:7B:A5:43:0E:88
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019CACB4E8FF05ED362B251B438438413068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 06CA
Signing time: Mon 02 Mar 2026 04:01:03 +0000
Manifest this update: Mon 02 Mar 2026 04:01:03 +0000
Manifest next update: Tue 03 Mar 2026 04:01:03 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: g18bMn8zp7Pb4eY3/TmXPtoyj7VHdQJElR/jpjWahTE=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: uhmE3at76dYLrtDiQbzMepv_16I.roa (hash: /LKq8mUsMWaHICUc9KVgvqVuRJ8efqGttlCEBaJ+7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e8:ff:05:ed:36:2b:25:1b:43:84:38:41:30:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Mar 2 04:01:03 2026 GMT
Not After : Mar 3 04:01:03 2026 GMT
Subject: CN=854acc6e72e008d1f40ade349e920e7ba5430e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:c4:a0:2e:10:78:b6:af:d9:3b:fc:c5:e5:
29:01:55:74:ab:9c:8a:6a:f5:10:f4:25:ca:fa:05:
37:cc:7f:01:f2:70:cf:ec:2b:74:75:95:22:6f:c3:
2d:4e:5e:24:77:ac:cd:17:86:a8:e3:c8:6a:26:0e:
6d:14:81:2f:e4:ca:e5:64:48:7f:10:c6:3c:26:2a:
55:c4:40:e8:24:24:b4:a2:5e:11:ff:8a:80:c5:12:
1e:a1:67:3c:28:9f:c8:e8:15:54:d2:3c:c4:b1:aa:
9a:0e:f1:f6:a3:db:01:be:bc:4e:92:83:e1:7a:ff:
52:3c:3c:00:59:69:a2:f3:40:b8:44:ac:16:9c:ea:
06:f7:f3:1a:2b:cb:80:39:b9:3d:46:7d:f4:ed:74:
99:1c:66:c7:e7:fe:83:ac:c6:e9:60:b9:3b:3c:41:
dd:57:0a:92:6b:2a:b0:16:59:17:95:fb:d1:9e:7a:
7a:e7:70:1c:a6:e3:f5:42:56:c1:a7:78:c3:63:83:
ad:cc:8b:3d:e2:8e:38:43:f7:e3:54:58:26:57:9e:
06:49:62:a8:0b:d6:12:fe:d1:08:fa:6c:70:90:c1:
aa:ab:1d:40:cb:1a:64:22:ae:ba:b9:65:c2:d7:19:
7c:ba:55:10:d6:bb:e8:8b:6c:f0:48:d8:86:eb:dd:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4A:CC:6E:72:E0:08:D1:F4:0A:DE:34:9E:92:0E:7B:A5:43:0E:88
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:71:44:13:7d:fa:da:06:86:a9:eb:2d:6d:88:07:3f:fa:72:
1c:7f:20:fa:64:13:5d:f7:e8:64:05:83:bb:a5:a5:b8:07:de:
11:7c:c9:ce:fb:86:11:e6:57:0c:6c:a5:87:78:dd:c4:d1:e4:
8f:76:b1:3a:b0:38:ba:a6:0b:7f:12:46:f8:4a:6d:ce:8c:62:
c3:4f:87:52:e3:c8:27:cb:22:d7:a1:c6:aa:68:62:0f:b2:8a:
87:a6:a3:37:2e:3d:d9:e4:60:e6:d1:1c:e8:ed:4d:87:96:83:
56:4b:78:25:e9:c2:86:cc:cc:5b:fa:e1:73:77:9d:41:a9:e2:
1d:e5:10:89:99:a5:b3:b3:cf:a8:74:89:91:b0:f6:c3:b1:13:
c7:65:e0:af:70:4a:2f:b7:40:ab:9c:df:c9:5d:22:3b:2b:75:
80:db:eb:3e:89:45:bb:ca:e8:7f:13:91:fe:a4:e2:48:2b:80:
40:34:b0:c1:31:16:b4:d3:29:d8:96:4f:bd:75:a8:bc:83:81:
70:8a:b6:3d:74:40:f7:57:d8:d2:28:5e:2e:ff:55:aa:93:68:
aa:4f:0d:4e:cf:00:72:c5:08:41:2b:37:e9:9d:96:d0:dd:a5:
77:a5:89:3b:2e:6d:d2:87:73:d5:27:74:35:7a:3a:5e:59:c6:
7e:8f:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:02 2026 by rpki-client