Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: bn2D5d4BQ6gcU+S0jY+eN/iPnDYxi20wSEarMeSxf5M=
Subject key identifier: 0F:F6:CA:97:5B:E8:68:FC:30:C4:E0:04:20:C9:57:B2:8D:9D:F0:71
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 019CAB33D803A82D226F3953F1453165EA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0EC7
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: DFXetV205dDeq1xsr8vFGft299npCCPcMqZNReyZ78Q=)
2: jBBia4spWrLZ9kca7mX-CRNEOzY.roa (hash: qc1+ZFIzhBfFEWyuznbTHHa1NN9KaHansxKNqQ0bhSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d8:03:a8:2d:22:6f:39:53:f1:45:31:65:ea:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=0ff6ca975be868fc30c4e00420c957b28d9df071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:e7:88:93:cd:9c:93:39:6f:18:30:ef:f2:
d3:00:ca:57:b9:2e:c8:90:54:06:c7:93:22:67:a5:
8d:dc:c3:ef:e3:5c:44:96:9d:02:26:88:71:71:d8:
68:25:db:dd:7f:fb:06:1b:44:2f:26:c7:ab:a7:ff:
9e:25:7f:df:e7:d4:12:01:a3:b7:48:b9:a7:36:53:
b0:46:ca:b8:08:9c:f0:dd:ed:d8:51:7f:35:31:46:
7a:9e:74:0e:23:1a:eb:95:40:80:e7:06:79:72:8b:
70:db:26:e8:6e:51:a0:45:d3:ab:31:d3:6c:8d:42:
ca:2a:44:cd:f4:b7:b4:fc:3f:42:11:2a:44:2b:ae:
67:5e:46:27:a8:14:4e:07:60:22:ea:7d:75:15:2c:
de:26:8f:e3:9d:68:ed:77:f8:9e:3b:87:11:9d:e1:
2a:0a:36:d5:aa:5d:15:25:80:7a:9f:8c:b7:9b:dc:
fe:3a:18:66:e1:ce:a0:fd:78:b7:5f:78:fe:77:68:
f1:ec:52:2e:ce:af:88:d7:58:03:0b:b6:f3:99:c0:
2c:ae:ac:02:c0:fb:27:a8:54:49:ae:6f:1f:ad:16:
6f:c3:bb:22:a8:e3:bb:a5:de:40:05:bf:e6:3c:5c:
32:42:17:f1:4c:4d:93:5b:ec:1f:82:c5:21:d9:48:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:CA:97:5B:E8:68:FC:30:C4:E0:04:20:C9:57:B2:8D:9D:F0:71
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b4:ae:73:bc:ec:1a:e0:c1:cf:ee:49:87:2a:49:be:f6:72:
1f:04:b9:ce:d8:47:51:14:10:52:b7:0e:47:24:c8:3f:9b:32:
70:e8:1e:fa:38:12:5f:e3:c8:5f:f7:27:4f:7b:46:a3:a7:fe:
ab:b2:9e:58:dd:9f:52:94:3c:ce:a4:db:9a:39:f2:61:8e:27:
7b:74:0c:53:02:fe:51:fb:15:1f:7f:c0:a0:44:d0:12:25:4f:
d9:e0:ba:b9:d6:a1:4b:aa:10:74:62:1e:c7:94:78:a5:ff:28:
fa:4d:bf:1f:34:bf:63:34:42:98:6e:59:66:a2:99:a8:af:8f:
16:9d:33:09:58:b2:22:0b:3f:4b:8d:e1:8f:52:18:42:f9:81:
68:2c:5d:0f:e2:7d:6c:7a:b8:a8:95:f3:df:ae:0d:37:2f:50:
1b:b0:43:99:de:f1:16:5a:f1:7d:57:73:50:26:8e:ef:41:74:
2b:03:6c:05:37:db:07:0f:bf:ee:4f:ed:d9:47:09:dc:e3:d7:
a3:15:40:fb:de:15:04:cb:01:5c:fb:83:d1:df:bb:5a:3d:ce:
3b:53:c7:1e:38:27:25:e1:37:2f:91:2d:b0:2f:bf:43:cd:65:
d2:21:1f:48:44:42:94:5f:3b:8a:d2:cb:85:af:21:eb:3a:c0:
61:d2:e8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:48 2026 by rpki-client