Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: T9Qk5mXHbFd+ruKQvWQIaBNeh9GkoKdPI4AZK/l23o8=
Subject key identifier: B4:0C:6D:7E:37:48:7B:78:F9:46:F0:38:9C:CB:40:4F:2B:BA:1F:0B
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 019CAB3492AA89FCEB8F859287EA359E18DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 21:01:15 +0000
Manifest this update: Sun 01 Mar 2026 21:01:15 +0000
Manifest next update: Mon 02 Mar 2026 21:01:15 +0000
Files and hashes: 1: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: Y/Qhu8OmoIUoWoDm3KcyDLX/h2p5UbQ4v6uYYm7fzuc=)
2: u73VKktNNDp99ZZ8-aw2FkAHHqE.roa (hash: 50jFlydOYBg1FIR0dL8Ur0REyQFfT4z/eOZDEpcxAyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:92:aa:89:fc:eb:8f:85:92:87:ea:35:9e:18:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Mar 1 21:01:15 2026 GMT
Not After : Mar 2 21:01:15 2026 GMT
Subject: CN=b40c6d7e37487b78f946f0389ccb404f2bba1f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:fc:8c:10:80:21:ce:ee:c0:a9:90:e2:08:
0c:8d:a5:75:b2:2f:35:84:50:e1:d1:40:f8:c7:bd:
e2:04:b8:5d:ed:95:0c:be:59:79:8d:3c:a9:90:de:
28:69:c2:56:a4:8c:06:dc:c7:93:be:be:62:3e:c8:
4f:f9:a3:80:f9:bb:dd:5a:93:4e:f9:78:82:1e:8f:
ca:36:a2:5e:e5:e2:c2:2f:af:ef:82:c9:71:49:44:
fd:cb:d6:93:15:50:3a:34:0a:f0:22:df:2e:b2:1f:
e2:67:d8:c7:b8:3b:de:92:2a:58:73:dd:01:c6:55:
c4:55:92:6a:a4:7d:6f:dc:26:23:67:e6:57:e7:88:
cb:26:de:3b:ab:5a:96:6d:d8:06:b9:81:5d:40:54:
49:cc:43:74:4a:8d:34:66:41:04:4e:4d:3b:0d:5c:
18:28:31:46:c0:ad:86:56:ad:c1:b3:65:9d:71:19:
4e:05:51:5a:50:43:da:f7:c7:b0:2f:d4:05:fd:f3:
85:ad:f8:88:14:c3:49:5b:a5:e7:2c:19:a1:0d:30:
fd:e0:41:8a:b2:af:0c:39:79:b6:0c:70:4e:f4:e8:
1e:c1:a4:02:fa:61:fb:64:87:67:ad:31:df:68:ae:
81:93:8e:17:7e:99:f6:f9:ad:40:ec:f3:92:a9:99:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:6D:7E:37:48:7B:78:F9:46:F0:38:9C:CB:40:4F:2B:BA:1F:0B
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:21:77:26:a6:2f:50:4d:35:88:67:08:ee:92:bc:80:f3:44:
a6:9c:e4:9e:0f:d0:a0:b8:d4:c0:f2:de:f7:ae:41:18:86:8e:
69:bf:3e:df:a4:2b:4c:22:ee:c7:f1:3f:38:d0:bc:45:f2:54:
dc:9d:57:d7:b4:8c:2b:fc:e6:e8:83:12:48:40:32:fe:1c:c0:
22:32:04:c5:c3:b8:45:97:3d:43:47:4c:6a:84:8c:a2:df:2f:
f9:3b:a3:27:75:04:69:59:f6:35:e4:0a:4e:fa:38:37:c6:82:
db:47:2a:93:24:49:e2:35:08:46:2e:3a:77:7f:46:87:24:ec:
86:2e:05:62:51:51:6d:47:11:80:66:67:42:90:32:e3:08:05:
b8:b2:99:5e:0d:64:1c:a9:45:7d:00:bf:b6:e6:3d:82:51:81:
52:99:76:db:2b:22:b1:45:60:86:25:63:59:ff:1d:51:6e:40:
f6:f5:1e:36:65:df:ff:c0:1e:f0:90:3a:4b:c0:49:80:7f:ff:
90:07:1d:76:90:d2:7e:2e:b4:80:80:4d:36:43:d6:1c:2a:f2:
02:a9:b0:bf:11:3b:a6:26:fe:26:99:9f:3f:3f:f5:0f:5c:78:
3e:1f:27:d9:0a:61:c8:55:b6:88:55:d5:d6:1c:3e:c0:c9:78:
65:e4:44:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:16 2026 by rpki-client