Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier: jNIGUBDbl/iVRGQQgtowkoNBQqeYbtLtnEmKpF2McIs=
Subject key identifier: C3:B9:6A:9B:79:DA:1C:36:52:1F:B1:05:97:E2:A7:EC:92:DF:87:9F
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 019CAD908B9B8AB5D97F4D63C7653D8A6C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number: 14A4
Signing time: Mon 02 Mar 2026 08:00:57 +0000
Manifest this update: Mon 02 Mar 2026 08:00:57 +0000
Manifest next update: Tue 03 Mar 2026 08:00:57 +0000
Files and hashes: 1: IWErWVtspulYBc2P0UkO-q5egfs.roa (hash: lBRwxz9Xohtldef78/SXShaF/JL3thmNLA+SU9F6qTI=)
2: dFq--4OMc9Rjg5-mNAsJIFvbJME.roa (hash: KdydhQpjZ/9bUOR6cl5ITO2afuDxYiCJCh8ZvZyKzpE=)
3: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: hbJTRxpSLM/YYOdF/Tv+IMwX9N7sUQ/NP2eCRra63kU=)
4: yRUaitnmXUxZxGbULPkZbaJ4rlQ.roa (hash: C+dkviU9NULiViFs9l9KMMoHApjfQiWaRWnrAEZ92P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:8b:9b:8a:b5:d9:7f:4d:63:c7:65:3d:8a:6c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Mar 2 08:00:57 2026 GMT
Not After : Mar 3 08:00:57 2026 GMT
Subject: CN=c3b96a9b79da1c36521fb10597e2a7ec92df879f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:d0:1e:ae:3e:78:46:0b:be:f5:91:16:9f:
88:62:3c:e2:e3:37:30:5e:32:9a:34:f1:ec:a6:4d:
9d:51:bd:17:e3:fe:bc:96:ac:3b:12:bd:54:c4:74:
69:22:6e:af:1c:5e:9e:ef:aa:c6:19:38:62:e2:36:
51:dc:1e:7a:b7:81:15:84:29:87:e7:26:66:12:8b:
35:86:7f:42:33:23:ce:51:7d:9d:13:0a:9a:12:83:
fb:54:14:b1:b3:46:05:67:b0:b4:46:88:ac:16:6f:
3a:9a:43:61:45:61:64:91:3b:5c:ee:16:02:25:10:
05:7d:65:a8:1a:ce:3e:9c:13:f4:ca:01:95:c8:06:
ce:52:c2:fa:54:d3:5f:eb:67:bb:a2:bc:66:a2:62:
e5:52:56:3a:40:53:fa:e8:11:88:30:50:4f:ac:7f:
ba:33:92:ca:0c:05:02:4e:f4:a0:8f:4c:d9:95:55:
98:07:5d:0d:66:2d:93:90:8b:65:92:67:49:2e:43:
d5:7c:d4:ae:c8:d7:dd:93:69:76:ee:5b:a8:a7:4b:
44:cc:20:47:f5:01:2d:2c:fd:30:21:bf:ae:03:2b:
97:75:4e:3e:de:87:2b:93:13:8c:32:78:6e:6c:46:
f5:59:58:7d:51:3c:2a:a1:c1:ee:f6:93:ed:9b:b1:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B9:6A:9B:79:DA:1C:36:52:1F:B1:05:97:E2:A7:EC:92:DF:87:9F
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:34:ce:1e:c0:56:1b:67:f7:c9:3d:bc:a0:80:e6:4d:9e:a1:
39:ea:eb:ef:1e:01:d0:98:b8:00:8e:55:3b:1c:be:a5:ea:9a:
8e:d9:13:a9:12:dc:c9:d8:84:8a:c8:98:ab:8b:2f:52:45:af:
58:4d:fa:5b:eb:ff:7b:73:f8:db:9b:4a:f2:4c:16:5f:07:47:
49:e9:62:a8:2d:06:c4:a1:51:53:f7:04:39:4d:8c:ff:6f:05:
71:9e:ad:f6:e8:8f:66:80:30:47:d4:02:95:04:e4:10:0f:48:
b9:5a:ea:cf:ce:2b:7a:8e:2d:cf:17:8c:52:72:17:68:57:65:
54:05:75:93:b5:a3:52:d7:9b:fc:3f:99:20:82:3e:d8:a6:51:
06:de:99:6e:dc:c6:3d:47:4b:89:41:ac:e7:e6:e6:3b:c9:dd:
40:72:a2:9d:6e:44:5c:35:2b:da:5a:56:d7:50:75:a2:49:8e:
35:b7:61:57:84:ff:8d:3b:c3:ee:c4:fa:e8:d7:18:2d:08:67:
c7:b2:9e:10:13:ef:ef:17:d7:b4:40:15:4d:d9:69:6d:5b:b6:
ad:24:f1:a5:2c:ff:d8:6f:1d:5b:11:58:7c:ef:11:37:f7:8d:
6c:72:e0:f5:bd:d8:e0:84:62:24:f4:f8:e7:ab:96:00:ed:11:
57:2a:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:55 2026 by rpki-client