Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: Dj82j1F89VW/jDdBZrtakvIicMtbCtgenOUJXZs1kUk=
Subject key identifier: D8:2A:BB:26:F3:0F:2F:56:85:1C:1E:42:3D:E9:1C:66:EE:53:F9:79
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019CAC7E2733AB1F5EE9D2F4182F41A576BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0C38
Signing time: Mon 02 Mar 2026 03:01:14 +0000
Manifest this update: Mon 02 Mar 2026 03:01:14 +0000
Manifest next update: Tue 03 Mar 2026 03:01:14 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: 1RlrRbDCCpkvWNNvR4KzG0hAYjYgsRVV10oI+VoUI1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:27:33:ab:1f:5e:e9:d2:f4:18:2f:41:a5:76:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Mar 2 03:01:14 2026 GMT
Not After : Mar 3 03:01:14 2026 GMT
Subject: CN=d82abb26f30f2f56851c1e423de91c66ee53f979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:18:5d:ec:a0:31:87:5b:5e:58:df:65:e5:
cf:1c:64:2b:13:c4:a3:d3:48:91:cd:28:5d:8f:2b:
76:84:66:0d:59:4b:2a:ea:a3:be:16:bb:5a:cc:52:
f7:83:ea:c7:52:ec:3d:48:0e:fd:f3:e8:f0:81:34:
48:cd:93:7b:e0:fa:37:3d:dc:30:dc:a9:dc:a7:50:
97:e2:da:47:b2:57:d1:30:f3:fc:8c:1b:41:c9:dd:
e9:0a:47:4b:cd:53:d8:23:1d:52:10:da:73:d5:71:
a8:5c:8a:d3:a4:d9:1a:a1:9f:ce:49:e1:fa:cf:01:
05:5d:23:8f:0e:63:53:fa:d5:7e:20:c3:bd:dd:ab:
bf:b4:01:50:9e:94:6d:e7:14:d1:f4:0e:07:03:20:
7b:50:ee:39:19:16:cc:fc:89:2a:3d:ed:b0:64:6d:
af:94:44:2c:d6:66:83:31:db:bc:ab:4b:80:c0:e1:
3d:dd:bc:43:05:ec:d1:96:b6:b1:ef:8c:92:89:15:
f6:e2:fe:91:ef:90:0f:22:b7:52:1f:99:e6:77:79:
97:4d:b7:75:67:6b:83:21:00:a2:c5:58:78:ec:af:
ef:2a:de:51:99:19:f1:bb:91:94:b3:dd:23:ad:a7:
81:f3:b5:47:25:c9:2c:b9:5f:81:81:00:b1:76:21:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:BB:26:F3:0F:2F:56:85:1C:1E:42:3D:E9:1C:66:EE:53:F9:79
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ae:ec:50:1a:42:40:bb:1c:a5:f5:41:3e:33:cf:80:45:64:
51:81:fa:b9:4f:e8:53:67:50:b4:c3:e1:33:57:bd:10:66:bc:
7e:bd:83:b3:f4:ef:be:4b:a3:24:0c:f3:28:1b:36:73:0a:55:
b0:1e:14:e3:49:d1:c2:73:80:9f:00:4d:2b:30:38:a3:f8:50:
43:4e:77:d8:17:a7:97:d1:0d:c7:9e:23:9d:be:87:d0:86:13:
ff:c0:62:09:1e:3d:12:9b:35:08:19:7b:7b:9f:53:12:16:f8:
69:8a:14:e4:57:e0:08:0d:b8:d4:2e:4a:ac:c4:32:c4:70:74:
1e:c9:dd:cc:82:f8:58:c8:02:04:66:6d:99:76:4d:8b:b8:5e:
cd:a9:a6:ab:98:b5:5c:04:e5:dc:6b:ab:ea:89:50:a3:65:28:
77:38:ca:d7:b8:6d:20:b4:93:88:7b:5e:35:7a:7c:91:1b:79:
91:f5:94:4d:d2:2f:4f:f2:a4:7d:88:11:60:db:ec:02:2e:da:
2f:f2:50:8b:a8:da:cb:c5:e4:5e:f6:cd:be:3b:87:e8:ff:7b:
92:3d:9f:90:70:b8:ab:ad:d7:61:0d:21:84:77:53:74:83:7b:
eb:44:c6:7c:48:c2:bc:46:97:a3:03:03:ec:cb:c1:11:93:f6:
de:93:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:04:16 2026 by rpki-client