Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: DNjS4l2tUuX7mHywTbNsbKcvw/dBYd7f4AaBjbPVufc=
Subject key identifier: 57:0C:9F:9F:8F:95:59:C2:4D:EA:31:B2:BE:DB:3F:1A:95:70:7F:7A
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019CAA21B3AF12F7ABABA5A4FFEF234F69AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 1067
Signing time: Sun 01 Mar 2026 16:01:01 +0000
Manifest this update: Sun 01 Mar 2026 16:01:01 +0000
Manifest next update: Mon 02 Mar 2026 16:01:01 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: Fy0caG4oYACWvdyokGki0XxkrNsSfF1OoxiXjwiZrms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:b3:af:12:f7:ab:ab:a5:a4:ff:ef:23:4f:69:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Mar 1 16:01:01 2026 GMT
Not After : Mar 2 16:01:01 2026 GMT
Subject: CN=570c9f9f8f9559c24dea31b2bedb3f1a95707f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:29:d5:83:8e:c9:cc:37:db:db:11:5f:59:
86:38:e2:76:fe:a9:c5:28:e4:41:94:36:6d:0b:b3:
42:0d:40:6e:22:b8:72:f6:e7:b2:75:87:c0:e9:82:
f7:36:b1:75:cb:ee:00:f5:28:1a:1e:6a:f5:ec:34:
75:0c:b6:79:d5:0f:d6:37:d5:19:e2:55:b3:87:f0:
9f:f9:ff:9b:27:41:03:e2:98:10:4c:80:c6:93:1f:
aa:87:5f:12:17:14:88:69:36:32:96:d0:df:6e:1c:
98:e9:bc:20:16:1f:23:9c:53:01:73:71:aa:dd:d9:
36:5f:ad:76:c8:0d:87:31:d2:37:f1:93:dc:db:da:
af:d0:36:9b:e1:36:51:b3:85:14:da:39:e5:c8:28:
70:8e:14:00:5a:2d:5d:9a:27:65:ce:63:9b:bc:eb:
db:80:c0:b3:16:ae:26:1e:21:1a:11:2a:f1:46:18:
de:5e:ff:68:da:cf:5e:a4:a7:25:a8:c9:b5:15:c9:
61:3c:0e:81:b6:f9:12:5b:36:33:05:1b:d7:22:a7:
23:ce:39:32:ff:3f:d6:9c:e3:17:7f:06:d2:e5:3d:
e7:47:ec:3b:50:09:e6:ca:7f:ea:ab:bb:9d:8c:57:
3c:0e:58:29:43:df:de:c9:b4:fc:e7:3e:28:4d:cf:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0C:9F:9F:8F:95:59:C2:4D:EA:31:B2:BE:DB:3F:1A:95:70:7F:7A
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e2:97:d0:ff:ff:66:78:82:dc:9e:d1:7e:92:3b:93:e3:a2:
7a:c2:c9:a1:5b:70:5f:2e:ce:3a:9c:85:4a:5e:cb:fc:3a:b8:
6e:da:8d:b7:7d:0c:9d:07:e2:cc:a5:00:b9:40:0a:e6:6c:b3:
b8:e1:50:56:89:df:1c:3b:17:5c:b4:f6:05:e0:02:49:8c:21:
82:d7:50:bb:6d:fd:95:87:f5:cf:bb:d3:a6:7b:73:e7:2b:bb:
4b:70:d8:f1:88:2a:c0:7a:93:7e:49:14:e2:51:f8:48:3f:0a:
ac:bb:c7:7e:57:28:75:89:f8:c0:0b:3d:85:d0:6d:d0:ed:1a:
69:ff:e6:f5:91:88:62:d8:8e:e3:16:37:6e:4f:c2:21:83:dd:
66:c6:b8:bc:f8:4c:8a:09:1d:25:5f:cb:48:36:36:2e:b5:50:
8b:f3:d6:dc:1c:d0:76:2b:25:16:27:31:d5:38:b6:f6:86:7d:
88:19:ef:10:23:77:c7:94:ad:3c:8c:62:ea:52:8c:97:d1:4a:
68:9d:05:33:08:09:22:4a:89:7d:88:d2:49:34:36:57:72:68:
6e:9a:d7:c4:25:95:06:ef:55:01:37:df:b7:67:3a:a1:79:6a:
d1:11:ec:f5:f4:5f:b2:b7:e9:c7:32:93:4d:ef:df:f8:92:9f:
86:7d:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:22:23 2026 by rpki-client