Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: Gb5hpRpMNLbiNnT6uPwkDaILoj1KYhqa+PeNPnNDlew=
Subject key identifier: D5:83:83:B9:DC:2B:F2:0A:B2:6C:D1:7B:EA:0F:9E:4D:CB:D4:86:5B
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019CACB54D2DA33197228F8E1184133E4F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 114B
Signing time: Mon 02 Mar 2026 04:01:28 +0000
Manifest this update: Mon 02 Mar 2026 04:01:28 +0000
Manifest next update: Tue 03 Mar 2026 04:01:28 +0000
Files and hashes: 1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=)
2: TKU8Yc2L0FbHGl3NXxfpL1eDNnE.roa (hash: c75+0er1lGRbZ38ME3BfFzi74fQVT9//khB7uqu1zrM=)
3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=)
4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: 3Bzjiq91ingCZDsuNsMRQugvZMF/5VEIE1DKdzF7jW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4d:2d:a3:31:97:22:8f:8e:11:84:13:3e:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Mar 2 04:01:28 2026 GMT
Not After : Mar 3 04:01:28 2026 GMT
Subject: CN=d58383b9dc2bf20ab26cd17bea0f9e4dcbd4865b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:15:88:ea:70:6f:b1:ab:0e:05:75:48:de:
83:ea:6c:ce:b9:1c:89:6a:8c:0a:79:49:68:03:ee:
e2:81:e5:45:2e:d5:2b:65:87:0c:0c:a0:1e:53:15:
4d:b0:67:ff:81:02:3e:68:41:bc:c7:1c:66:70:57:
8a:20:69:79:00:8a:a6:de:df:61:9d:c6:2f:3f:4b:
34:55:e1:b9:25:29:ef:41:ab:15:0f:a4:5f:12:b8:
c6:2f:7d:1d:e7:a8:41:21:a1:05:78:75:61:92:6a:
47:58:e6:11:fa:8e:4b:fc:87:1d:81:0d:3b:1b:17:
88:b2:54:70:e2:9a:59:80:41:59:52:d6:71:d6:62:
87:8c:b0:a5:ca:b7:4d:78:68:6e:d2:90:95:b5:6c:
7a:53:4a:a8:40:76:c0:62:68:80:a3:0e:45:64:f2:
75:19:31:85:37:e0:c2:06:4d:ad:40:df:c6:44:51:
de:d7:56:3f:35:b6:ee:b0:78:98:ee:eb:5d:60:42:
11:8c:b9:73:da:cf:a2:35:31:9f:52:15:3d:f0:26:
9f:8a:8c:dc:21:90:a0:fe:fb:c2:69:da:43:1a:19:
d5:14:54:b3:c8:3a:cd:60:41:74:80:16:3a:4a:82:
33:c9:08:4f:66:1e:5d:17:9a:d7:23:eb:97:ca:ff:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:83:83:B9:DC:2B:F2:0A:B2:6C:D1:7B:EA:0F:9E:4D:CB:D4:86:5B
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f2:64:0e:76:b0:1c:fa:d4:9b:73:58:75:94:9b:a4:48:95:
12:cd:50:ca:9f:2a:8d:d0:da:f6:0d:90:c2:01:a9:5d:08:61:
ef:c3:6d:d9:7a:11:e7:02:ef:df:4f:1e:fb:c8:61:7d:cf:de:
58:93:ce:13:8e:f6:cc:78:27:61:ff:4a:02:5b:a2:cc:ec:be:
1b:96:aa:7c:72:ba:4b:d3:31:ee:76:43:f5:e3:c5:04:b6:b3:
5c:37:cc:84:a0:77:7d:1c:76:1c:63:96:1e:fa:86:52:48:63:
22:24:47:62:f5:af:35:67:38:b4:c8:e9:d9:21:ff:88:d5:af:
40:48:57:c7:6d:fa:98:89:95:48:10:ae:30:e7:42:5a:06:c1:
35:ed:71:6d:6a:2f:c1:9a:f3:32:26:75:74:50:84:1d:da:74:
96:0f:32:9c:df:5a:8a:0c:46:0a:4e:33:d2:f0:ab:90:ad:b6:
72:b4:04:8e:d7:3f:46:ad:6d:5a:c8:2a:5d:e2:8d:fa:cb:e2:
06:45:80:70:01:1c:ff:b5:b7:4d:7f:e1:50:82:ba:99:0a:ec:
86:cf:96:46:7f:f7:7c:cf:d7:5d:fc:f6:5a:d6:95:78:52:1a:
4a:cf:ad:b0:f7:7a:b7:b0:44:2d:56:67:1a:6b:84:62:ee:b6:
b8:15:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:23 2026 by rpki-client