Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: EvIA8vurvdbaSFbZbQ5aYnMeUqueaAZQupQWq18/8Mw=
Subject key identifier: FA:75:F4:14:02:59:07:93:0B:F3:CA:EE:2B:E0:CB:3B:8A:3F:D5:F6
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 019CAC475489D522BD4488FB169683F67CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 130D
Signing time: Mon 02 Mar 2026 02:01:21 +0000
Manifest this update: Mon 02 Mar 2026 02:01:21 +0000
Manifest next update: Tue 03 Mar 2026 02:01:21 +0000
Files and hashes: 1: UXdNeJ_2Ddl0fTsV4WKpWbphuQI.roa (hash: 7YnRWBVkQ2KwpLyECOgcBh/stkchlYEprARWfyy/l+Q=)
2: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: EXuWIw/lAsIBNFkVJF3pZ8iPrLAAm6GL1NH3Py3NEJg=)
3: w6aExTmK4M1JcDUj2sMwX4mRvWU.roa (hash: tK7qE6NFsnQxjHhUh4pWia2W9oNUWtIhK9S5aCgGRFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:54:89:d5:22:bd:44:88:fb:16:96:83:f6:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Mar 2 02:01:21 2026 GMT
Not After : Mar 3 02:01:21 2026 GMT
Subject: CN=fa75f414025907930bf3caee2be0cb3b8a3fd5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:a3:20:1c:b1:fc:b8:63:1f:e4:88:5f:f5:
17:5e:56:14:64:b6:88:84:b5:8d:48:e8:51:77:ac:
5e:65:4f:34:72:02:9b:24:dc:e1:10:55:e0:8b:8f:
79:2f:84:0b:1d:40:9d:3a:18:15:f8:54:5b:74:f5:
16:9f:a2:20:5c:af:b7:e7:b1:32:b9:3c:33:1d:93:
5a:9c:30:94:9c:83:cf:29:d7:7a:ce:8f:f3:79:6c:
b9:5b:8e:c6:ac:5f:aa:a3:86:58:60:dc:a3:50:3b:
bc:2f:5c:d9:f4:71:17:c3:ab:1d:88:71:c1:70:cb:
e5:71:68:3a:94:a4:99:4f:e3:3e:93:78:c1:e9:85:
9f:47:5d:6a:76:ab:6d:93:2a:ef:16:90:04:86:1f:
83:6d:f9:c6:19:a1:de:2d:17:e7:a2:81:07:76:ce:
d2:62:54:3f:10:99:66:33:e0:95:25:6e:9b:2d:68:
de:cb:ad:86:89:3d:9b:01:8c:88:0c:e7:0a:22:a9:
f6:99:2d:cd:e1:25:a0:29:3a:d8:5e:0f:57:1d:1c:
fb:1a:72:c5:76:1a:9c:98:a0:4a:96:8b:1e:d0:17:
74:cc:6b:63:0a:06:96:66:85:69:3d:6e:3d:e4:86:
f6:6a:41:7c:1a:e3:a2:fc:7b:66:c9:08:a3:4e:71:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:75:F4:14:02:59:07:93:0B:F3:CA:EE:2B:E0:CB:3B:8A:3F:D5:F6
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b2:b1:05:ab:f1:9d:b0:eb:8c:73:f1:8e:f5:50:6a:3f:b5:
0b:18:8c:40:55:18:46:3f:7b:22:53:17:78:b6:6f:c1:b3:a0:
ab:74:52:8c:0b:58:5a:69:0f:bc:44:6a:25:a4:61:17:76:16:
6c:72:48:65:6a:6c:78:a2:e3:6d:dd:2a:98:79:38:3d:42:73:
a3:25:9a:fd:34:77:27:ec:c2:d5:ef:81:d2:79:88:9e:2a:00:
ed:d5:5e:f6:d4:80:bd:65:53:57:98:fe:c0:cb:98:80:aa:f2:
ef:cf:b4:8b:95:77:c9:96:c3:43:92:e2:25:0a:41:28:74:99:
f5:df:57:8a:65:bf:81:57:80:41:0f:20:3c:14:54:71:af:e6:
30:02:98:0c:56:00:bf:80:4c:56:e8:3d:4f:41:54:33:9a:e7:
0d:c0:24:6f:d7:a2:7b:30:4f:45:c8:0f:70:39:cf:7e:41:2b:
a1:27:ab:1f:06:17:dd:28:e1:f2:11:e9:27:ce:49:c3:73:25:
b1:b6:c8:cf:fc:00:8c:f7:f2:c9:59:6f:b2:ca:48:10:ea:06:
91:21:0d:db:b1:b4:be:4a:d1:6d:d5:c6:8c:b0:33:bf:d2:2f:
5a:ec:ad:ea:27:54:b7:e9:a2:c3:ab:4f:00:c6:8c:5a:0d:f2:
ee:b6:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:47 2026 by rpki-client