Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: ZzWcVmh4nVzj3ydmtlYYoSSEHfMszKtzRh9I+GEtPZ0=
Subject key identifier: C7:51:00:36:85:7C:54:81:6C:87:D6:21:41:E8:F2:28:4B:F7:55:79
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 019CACB466447E7C03A2CF0FF7BB3E775D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 14D9
Signing time: Mon 02 Mar 2026 04:00:29 +0000
Manifest this update: Mon 02 Mar 2026 04:00:29 +0000
Manifest next update: Tue 03 Mar 2026 04:00:29 +0000
Files and hashes: 1: 21Yf12X5Xts3sbdn2jGlU_TfEv4.roa (hash: Uc+vkMAdsrzPjHQ3cBJ8s1GbQwnyrG3dngRrn0NPypc=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: ise+YBBTAzRm1uQ+fy1NVG2BO3DKyv03zkOP5PcHceo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:66:44:7e:7c:03:a2:cf:0f:f7:bb:3e:77:5d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Mar 2 04:00:29 2026 GMT
Not After : Mar 3 04:00:29 2026 GMT
Subject: CN=c7510036857c54816c87d62141e8f2284bf75579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:c4:2c:5e:6c:a9:6f:b0:4a:e5:97:a5:5d:
24:19:10:cf:d4:67:da:8a:17:cc:0d:e6:55:88:a4:
b6:72:15:8a:d0:e9:49:80:7a:e4:49:d4:e1:af:05:
26:d0:23:c5:32:8b:96:e0:d2:8e:2a:17:ea:50:65:
df:be:58:f4:e7:f5:d7:b2:e0:40:7d:d5:8b:8c:3f:
72:17:1d:9d:89:5b:49:40:c2:8f:4a:aa:f5:f1:9d:
8c:57:7a:d4:b6:1f:34:93:7b:b3:d8:b7:41:fa:ee:
c4:5b:0c:b8:0f:46:54:cd:e7:fe:d0:93:9f:eb:da:
bf:ae:79:c4:56:68:11:8e:e5:ac:00:a4:e2:ab:13:
e0:69:85:01:1e:df:f1:d2:04:d7:2b:ad:f1:8d:60:
df:0c:71:4e:11:c9:84:26:fd:c1:1c:b5:87:c4:62:
26:cd:97:fd:cf:af:6f:1d:0e:e5:e6:0b:10:08:3d:
da:77:13:43:a6:d8:d4:ac:9c:af:4a:0b:96:29:ce:
e6:cb:45:a0:8f:8f:69:e6:18:c4:98:dd:a2:f9:cd:
46:52:12:9a:68:aa:fb:34:2c:ad:16:f6:62:96:67:
74:f6:db:1f:91:76:e5:cc:c6:e6:87:c7:ce:b2:13:
6e:72:41:76:dd:88:47:c1:c3:d0:87:5e:b8:26:4a:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:51:00:36:85:7C:54:81:6C:87:D6:21:41:E8:F2:28:4B:F7:55:79
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6a:5a:34:e7:31:2d:c0:c6:28:57:a0:c0:da:ab:af:5e:69:
c8:bc:fb:04:73:65:ed:90:4d:fd:bd:ae:a0:cf:9a:72:44:8d:
10:e7:c4:fd:bf:af:c4:cb:84:1c:1d:f4:7d:26:fe:62:40:b5:
b2:45:aa:9c:25:7a:56:41:01:ae:33:cb:59:5c:7e:c9:3f:20:
06:72:5c:4f:a6:4e:ed:9e:a9:9f:85:f3:2f:db:57:a6:01:2b:
01:b6:4f:49:9d:29:a7:37:bb:7a:b1:3f:83:8d:65:98:12:c1:
37:a5:e0:c9:9a:bf:69:c0:e3:90:ee:0a:4c:1d:a5:d6:08:42:
ef:5d:5c:99:a2:d3:e1:cd:b9:ba:b1:b2:94:54:18:0c:2d:ad:
c0:57:0d:28:1b:9c:80:f3:cf:2a:07:e3:4a:95:eb:23:c0:7b:
62:81:b9:e6:27:cf:e8:ea:5e:a7:c6:b7:39:7c:09:fa:d5:40:
60:6e:28:1f:48:5a:7d:26:45:c8:fc:7d:5b:07:30:fb:39:81:
e8:d9:62:a3:eb:74:62:31:88:f7:1c:6b:74:a3:79:43:ba:3e:
bf:b4:75:30:aa:43:ef:48:18:b3:5d:92:d2:b2:ce:5e:a6:46:
14:c1:3d:2c:37:b7:a3:b2:9a:35:57:19:64:e5:8d:bb:bf:be:
e3:6d:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:11 2026 by rpki-client