Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: VxhuGwfpp3F20HkGXkthR42niRPi6FUerph0Jiztg90=
Subject key identifier: BA:5D:9D:6A:60:99:7A:49:4E:8F:A4:6D:CE:2A:DB:50:55:43:57:B1
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019CAAC62C0F6CA8F7D7C74B99BA9B65D9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: ByaMG3qQvevk7AvgHB70KjoE3A0.roa (hash: p1aG6j/NLPI3cpBHB5DlRAwLBJWnR2mOUIqEzPqPSI4=)
2: QCoF-rujbi30mxySq-53A2Un6G0.roa (hash: JvBfOTcTs7nWh8mPAtftbN8wivlXScDpGBs3k9Clm0w=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: g2H6KD7OiJGOwgjONEyemF6G3kgpPrH4L1UuqXxQWLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2c:0f:6c:a8:f7:d7:c7:4b:99:ba:9b:65:d9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=ba5d9d6a60997a494e8fa46dce2adb50554357b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:86:83:9f:7b:ee:2b:09:75:b0:5f:a5:ad:
f0:29:62:76:75:28:fb:90:5f:5a:8f:b0:03:92:64:
3f:94:1f:fe:26:fd:ba:20:77:e7:a9:75:8f:d5:73:
ab:d0:e9:f0:d6:c1:02:10:60:16:ff:55:19:78:1c:
17:7e:d3:12:51:36:26:ca:ed:52:31:60:0e:02:a4:
6b:31:b7:4a:30:8f:19:8f:71:c0:6a:c6:5d:49:8f:
f8:cc:84:2c:cf:75:f0:9d:7b:65:8d:26:93:b3:35:
44:29:86:26:8f:f2:c5:61:3b:34:2d:d1:a5:3e:db:
91:ba:ac:6b:aa:fb:35:7f:e9:b8:c8:23:ce:99:4b:
a3:2c:75:04:ba:7e:db:73:b3:71:88:ce:1c:1e:fd:
7c:a1:2c:e7:55:00:99:c5:cd:02:fd:24:fe:3c:be:
35:95:4a:41:ba:53:38:cb:e9:9d:97:9f:11:e9:61:
d0:7d:96:a2:4a:6f:6c:18:82:be:8d:f0:34:e8:fb:
50:b7:5d:ca:32:78:29:09:9b:06:2f:14:76:79:ff:
41:dc:ca:0b:a5:32:cf:ce:b5:62:a1:37:16:e8:c5:
5f:e4:0e:fe:fa:96:7e:08:dd:16:ff:f8:d2:92:27:
bf:73:d6:6b:b9:48:2d:1e:c6:e1:c6:79:86:4c:aa:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5D:9D:6A:60:99:7A:49:4E:8F:A4:6D:CE:2A:DB:50:55:43:57:B1
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:37:60:18:64:4f:9f:bd:8f:1a:a3:ee:1f:49:ef:04:74:aa:
83:0d:35:33:4a:0a:51:d5:69:18:a7:06:bf:6c:ca:a1:c7:61:
fd:5a:42:1f:0c:db:52:46:bf:e0:2e:8a:ba:00:8a:25:fc:b5:
6a:fa:29:d4:cb:de:5b:64:a7:3d:fe:43:aa:e2:3d:c8:de:b5:
6d:61:ae:7e:c9:78:5b:89:7b:fa:cf:eb:75:4c:a7:76:d5:fc:
d2:24:64:76:f0:bb:90:9c:74:91:3c:dd:16:10:04:e5:11:b6:
a3:ba:6d:b7:3e:a9:89:d9:aa:38:58:ec:19:e0:5c:2c:a9:81:
0d:c0:10:f9:cd:b6:50:c2:ab:f3:31:cb:0f:51:a8:3d:73:b9:
35:59:02:a5:23:0c:9e:73:8c:57:fe:ab:80:39:30:91:a9:be:
78:4f:c2:f2:00:a7:5f:f5:7a:30:d1:81:50:e0:84:ca:7c:10:
02:86:c0:a5:c0:77:40:be:6a:2f:ed:ec:07:e6:81:3b:35:2c:
08:e9:40:73:44:60:de:65:eb:a7:89:0c:43:df:87:d1:41:96:
83:71:70:21:b1:c0:75:a0:b8:0d:7a:cd:0c:d9:3b:d9:e2:cf:
95:fd:7d:27:90:e2:8d:95:98:ce:be:2c:f6:8e:aa:d7:39:d9:
8e:55:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:31 2026 by rpki-client