Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: 0fVvMf4v39afDrO3+jUVtJ6S3jX2FTU9p9xSXf5rVP0=
Subject key identifier: 95:6B:4A:15:62:83:AA:72:51:26:3A:6E:31:6A:ED:45:99:52:0E:0F
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019CABA263B3F79E3BF23993958DCC8F0F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 06F0
Signing time: Sun 01 Mar 2026 23:01:12 +0000
Manifest this update: Sun 01 Mar 2026 23:01:12 +0000
Manifest next update: Mon 02 Mar 2026 23:01:12 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: 9Ve6liQAbtBUjW59+U3fxnO2+u0ABYXTkH20Vq6yNmw=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:63:b3:f7:9e:3b:f2:39:93:95:8d:cc:8f:0f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Mar 1 23:01:12 2026 GMT
Not After : Mar 2 23:01:12 2026 GMT
Subject: CN=956b4a156283aa7251263a6e316aed4599520e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:97:c2:60:37:c8:de:9a:82:59:9a:b0:91:
1c:95:06:4c:4d:13:7f:fb:3f:97:36:5e:48:9c:23:
07:45:7b:fa:bc:09:20:a9:9c:55:ec:63:c4:0b:d8:
25:ba:02:e0:4e:a7:3d:ac:4e:5b:9f:8c:8b:53:01:
c6:16:33:5d:55:72:c1:fe:27:e1:c4:25:6e:51:69:
a7:05:f0:33:4d:bf:50:0c:b7:47:83:5d:2a:7d:50:
ca:03:31:e3:7b:46:39:2f:01:f8:3c:f5:bf:52:73:
7c:32:28:38:6b:db:0c:9f:b1:39:d6:f7:1f:97:b9:
0a:ff:32:e7:7f:61:2e:8c:fe:3a:ba:c4:e0:19:04:
b8:78:5a:5c:87:ab:66:49:ae:32:f0:f3:88:03:93:
cf:10:95:df:8a:a4:f3:65:cd:ea:b7:45:c5:7c:4a:
4d:b8:bf:90:2b:b0:bb:7e:fe:76:7a:df:f9:d9:54:
90:90:9e:aa:99:6e:33:15:09:f2:c0:77:02:5b:38:
d9:67:70:e0:36:73:70:df:55:a8:e8:7e:01:97:73:
35:72:06:a9:47:15:f7:bf:cd:f9:82:fb:17:7b:62:
d9:90:1b:38:b5:ec:ed:4a:f5:ba:c5:bb:ea:2a:8b:
40:0c:4b:6f:de:0a:49:55:a4:4b:f8:f5:f6:be:39:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:4A:15:62:83:AA:72:51:26:3A:6E:31:6A:ED:45:99:52:0E:0F
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a6:01:a1:6c:7f:49:5a:36:66:53:b4:68:a8:f0:28:15:81:
6c:b0:3a:cb:63:16:5b:15:64:14:7b:9d:20:fb:52:e4:88:02:
f6:b7:a1:b4:3e:57:b2:34:84:ed:6d:8f:97:38:92:b2:57:2e:
ca:33:55:7d:22:ce:23:f9:51:99:88:09:58:7f:a6:4e:e5:e0:
e7:ea:ca:28:14:a9:4a:3c:fc:94:40:63:56:0f:b7:1c:7f:08:
68:12:60:44:69:8b:cd:67:e1:a6:d0:d1:54:2f:b2:73:64:93:
4f:c2:af:7d:53:ba:10:e0:03:42:2b:60:d5:1f:9b:73:ae:86:
e9:da:ae:06:c5:8d:6e:14:21:38:80:21:04:33:74:cf:c0:1a:
99:51:b2:28:7e:29:96:a1:12:bd:7c:eb:a2:44:4a:1f:5c:97:
53:48:fc:d2:c7:7b:78:75:45:10:d8:e5:c4:e5:61:4e:f2:30:
2e:e1:80:1f:fa:4b:30:bd:47:f5:00:70:de:3c:94:a2:a6:e9:
aa:14:1b:17:30:79:86:56:a2:36:fc:b9:9b:b7:f7:d1:74:a3:
f7:03:58:71:7f:29:02:37:98:99:46:f2:19:13:67:e9:9c:3b:
55:96:b2:3c:75:1a:24:8f:a4:03:b4:fa:65:bf:57:d9:34:42:
4f:51:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:11 2026 by rpki-client