Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: 6n18L6TJ99JqCUqk52kYtdRVuAU3WzVYEagUuUeV1gA=
Subject key identifier: D5:2D:8B:48:07:7C:06:50:B3:E6:E4:22:34:CB:F7:76:4E:FC:51:BD
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 019CABA203487E67D5E534AE3E924EF836A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:47 +0000
Manifest this update: Sun 01 Mar 2026 23:00:47 +0000
Manifest next update: Mon 02 Mar 2026 23:00:47 +0000
Files and hashes: 1: UrVvZVnA9sxhDnytnq_6CJMVGDY.roa (hash: Eo7tDFpvsB5+kGHIClxenKJ/I8v5IPSf0jD2mkBbqy8=)
2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: PUMejZJvvv5Zd6ls20H0X6pSduYy26+ky5eExSJ5wNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:03:48:7e:67:d5:e5:34:ae:3e:92:4e:f8:36:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Mar 1 23:00:47 2026 GMT
Not After : Mar 2 23:00:47 2026 GMT
Subject: CN=d52d8b48077c0650b3e6e42234cbf7764efc51bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:1d:15:d5:2a:44:3c:fd:2f:be:1a:47:c7:
ec:34:10:54:2a:27:eb:b6:a7:82:e4:c9:69:9c:0d:
f3:84:f7:d8:5f:39:c1:fc:07:7b:7e:fb:d9:a4:b3:
cf:48:6a:e8:65:5e:40:80:07:a4:4c:ea:b1:0f:a0:
28:e5:38:38:be:7e:30:82:57:45:17:d2:65:f7:f0:
fa:40:9b:50:b4:f4:6a:9a:fd:83:17:e0:8d:fd:37:
9f:7c:59:47:29:74:d8:92:85:df:61:7d:97:fd:f6:
59:90:f8:70:95:18:47:c3:5f:31:fb:67:24:a8:9e:
d6:49:61:aa:5d:f6:c4:c8:5a:a5:8c:00:34:13:f3:
e8:80:43:8c:50:68:a1:dd:b0:6c:66:fc:6c:64:80:
86:93:a9:04:2d:b5:25:3d:36:e0:6d:ae:ec:2a:c1:
68:0c:fe:d5:bf:d6:56:77:92:bc:a5:46:e1:93:47:
48:c9:b9:a9:83:15:9c:29:24:3f:d6:0e:cb:d8:18:
40:43:04:8e:9a:2a:16:6e:17:de:2c:01:7c:6b:3e:
27:50:ab:63:d4:d6:c9:93:46:97:d4:6c:4c:a9:5c:
ff:01:5b:4c:c9:bb:85:2f:97:0a:58:f7:0a:2f:9b:
bc:a0:d6:98:41:c1:0a:66:27:3f:f9:28:7e:d3:10:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2D:8B:48:07:7C:06:50:B3:E6:E4:22:34:CB:F7:76:4E:FC:51:BD
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f8:d8:87:a3:f8:4e:66:1a:2c:55:4a:68:ce:b5:e5:e1:76:
16:89:f9:bf:b0:08:a2:84:91:55:96:7c:26:12:0e:a9:a1:0f:
22:48:cb:e6:30:f3:2a:69:a9:62:62:ed:89:44:11:8a:57:b3:
61:ff:15:dc:3b:7f:a7:15:f8:d1:02:86:3c:cc:6b:32:1a:b7:
be:d3:e2:0e:d8:fd:0b:04:3a:a7:2b:f9:a4:92:c9:07:94:34:
d3:2a:9d:4e:43:e6:8e:60:d8:e2:d3:eb:0e:99:03:0e:39:22:
b7:fd:79:7a:3d:90:5d:a4:b4:bb:d8:f8:9b:b5:cb:22:66:73:
68:63:3c:99:be:7b:71:12:d9:d2:4d:f8:c6:b2:28:12:9f:bc:
fe:40:47:6f:6a:b3:d1:aa:38:36:58:cf:e4:eb:b4:6d:bc:69:
88:37:9f:0d:31:95:42:28:3b:5d:7c:f6:2b:08:65:0b:c0:01:
a4:f2:c6:3b:22:73:ca:aa:53:3c:4b:54:12:a8:a2:6b:be:f1:
08:bc:59:db:dd:7a:49:6a:e0:48:5f:df:e2:e7:23:22:78:03:
90:7b:73:58:18:22:c9:d1:c4:2f:4b:f9:d7:f6:1f:16:e9:2f:
82:cc:5e:b3:1a:52:6b:e4:b9:65:e2:98:54:34:f5:9d:c1:4d:
f8:4b:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:44 2026 by rpki-client