Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
File: qnD7s9sihDfWBXmaxPRZjSLhPhs.mft (raw, json)
Hash identifier: VRU3PMkMfoCg11Cgx+QyGKuSiBFLe0B69PSyWxlYb84=
Subject key identifier: C1:46:28:FB:FD:90:D8:34:57:7D:3A:CB:5C:0C:88:64:3E:A6:E4:82
Authority key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
Certificate issuer: /CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Certificate serial: 019CAAC6E79924824F9F20FB94F7DD385BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:27 +0000
Manifest this update: Sun 01 Mar 2026 19:01:27 +0000
Manifest next update: Mon 02 Mar 2026 19:01:27 +0000
Files and hashes: 1: 5zEkxsehYVrSBWS8R6vq4w7gVtY.roa (hash: y9Gfd8AbrZdX5+SsYIumelvvyPK5gzC9wuMjV0Ywdgw=)
2: qnD7s9sihDfWBXmaxPRZjSLhPhs.crl (hash: LOWNvUKMAqwHS6WzIya4vhhPMIgFXFqPVBDRnQhEIis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e7:99:24:82:4f:9f:20:fb:94:f7:dd:38:5b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Validity
Not Before: Mar 1 19:01:27 2026 GMT
Not After : Mar 2 19:01:27 2026 GMT
Subject: CN=c14628fbfd90d834577d3acb5c0c88643ea6e482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:47:0a:24:25:25:ce:7e:36:11:b2:3c:46:
43:11:a7:0e:5a:06:00:c7:0e:b3:1d:ac:04:4e:a7:
ae:e8:de:6a:fc:e2:90:5c:42:73:b3:ad:63:3d:87:
e2:34:09:f5:0f:a6:09:7b:94:eb:a9:c7:d6:0b:a3:
00:a4:b3:9e:fd:68:78:da:e7:e8:34:dc:4e:c8:ea:
6e:ae:0c:e4:4c:70:bf:cd:8a:b8:2a:99:ef:41:d1:
fc:9e:01:2b:b0:f0:d2:50:86:e1:fe:4d:85:ae:c6:
18:96:d5:58:d0:ea:65:f2:e2:b6:f3:17:9c:36:c5:
d4:66:89:2c:9e:16:b5:97:30:35:e1:2b:12:40:22:
d6:83:52:de:82:08:07:b5:98:09:70:7a:12:c5:c2:
f6:34:9a:42:16:d1:54:6b:58:86:da:ef:cd:58:f3:
4b:e4:e9:41:49:b2:24:68:6b:62:01:95:d2:34:3e:
44:89:a0:4d:cf:30:8e:2f:2d:70:22:19:05:25:c2:
a4:3f:9f:0a:d4:9b:dd:03:4c:f7:ae:3c:90:ea:b1:
73:8d:06:8e:24:f6:ee:64:eb:79:27:71:15:4d:2f:
85:55:80:9b:39:a9:14:9b:50:eb:af:cc:f7:8b:bf:
c2:4e:df:dc:cd:1b:23:4e:cb:d9:cc:6c:9d:4f:45:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:46:28:FB:FD:90:D8:34:57:7D:3A:CB:5C:0C:88:64:3E:A6:E4:82
X509v3 Authority Key Identifier:
keyid:AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a0:2c:49:bc:57:41:7c:74:4f:cb:f8:e3:6d:76:81:72:80:
16:1b:fe:18:81:23:ef:1f:c8:34:51:18:88:f9:7a:47:7f:0a:
d3:9a:3e:f9:79:ca:6e:9d:f3:ec:40:34:42:01:57:8f:d4:f6:
de:0e:3e:f2:6b:82:ea:37:23:07:28:e8:af:28:cd:da:4f:5e:
66:78:0c:18:56:7e:b1:44:18:29:61:52:65:77:d6:81:86:35:
be:90:08:92:cd:bc:90:23:81:09:df:c1:fc:90:8e:1c:ea:ce:
c4:b5:ac:19:e6:38:3f:e6:6a:23:4c:93:41:fb:57:08:dd:56:
61:47:7b:f4:77:32:22:df:e7:3a:b3:bf:78:f7:d4:34:06:a3:
da:b7:0f:f8:23:7d:b0:25:eb:aa:8f:27:85:ed:ed:fa:b9:38:
7c:a5:f7:70:fb:49:1f:9a:e5:15:6a:63:07:de:d2:18:13:3d:
62:e0:e9:bf:32:15:f4:d3:54:9a:b5:35:db:1a:cd:b6:ad:a0:
b2:c1:dc:85:2b:85:8e:c9:6b:83:26:3e:e3:4c:8b:41:dc:92:
6f:29:90:21:36:03:8a:78:c9:66:63:6a:ce:de:58:5a:a2:db:
0a:4c:e6:3d:1f:ff:86:6a:a5:35:5f:e0:1d:6a:73:14:b3:0a:
95:29:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:45 2026 by rpki-client