Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: mIBvzvLUTGVeibco4Aqa9H++YQO/mRRiB2eOExthjIQ=
Subject key identifier: 0B:89:21:F5:75:7B:57:EC:F4:9C:C8:26:97:85:72:31:79:8C:5C:16
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 019CACB4D404C5AB9E2C48CB4684B37565DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 0E99
Signing time: Mon 02 Mar 2026 04:00:57 +0000
Manifest this update: Mon 02 Mar 2026 04:00:57 +0000
Manifest next update: Tue 03 Mar 2026 04:00:57 +0000
Files and hashes: 1: RGHMhabHZkPW5wXprVh6WUeUNEU.roa (hash: aWxpktwD4HwK4DqUq/i3jSDZlGsjYGbb6rrk+6zxpz0=)
2: hW9pmZmoOAPv4EQxUHQXTXDJr6s.roa (hash: mjwhxdNEgH8aH/IfZWkqyz4fW356i+YVNu/YE2e6m8A=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: JoAyUMNBG/gC6EGT3r0KzlCQHYeui4+ZsQuwHjU7KAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d4:04:c5:ab:9e:2c:48:cb:46:84:b3:75:65:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Mar 2 04:00:57 2026 GMT
Not After : Mar 3 04:00:57 2026 GMT
Subject: CN=0b8921f5757b57ecf49cc82697857231798c5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:bf:74:ae:0e:a6:cd:94:d2:04:56:7e:e3:
51:7a:c6:ba:c2:8f:b4:b8:2d:82:0d:e6:a5:45:c9:
ce:67:df:6a:6b:a4:ff:f9:ab:b0:de:98:69:b5:e9:
87:b9:35:cb:42:aa:f0:0a:d9:52:f6:fe:00:d4:e3:
d9:bf:8c:75:b3:9e:42:61:21:af:68:7f:ba:70:48:
b7:78:28:59:89:0f:f0:24:8f:03:77:1c:2b:f3:f1:
fe:ed:f3:a1:5a:85:5c:e3:74:6e:f5:0a:b4:84:d8:
66:cd:1e:b3:41:4b:07:fa:9f:54:66:d8:73:8b:60:
48:8c:f1:3a:35:6a:76:e6:4e:e0:b8:ef:89:ab:15:
80:22:c8:b3:2e:4f:1d:1d:da:50:ba:85:b9:e4:3e:
90:9c:eb:4d:8a:da:e8:c5:a9:c3:43:05:84:68:1c:
13:e3:7d:42:32:a0:04:49:07:f3:87:7e:a8:e2:8f:
3f:02:10:a9:29:3c:1d:02:48:29:9a:c5:29:64:77:
e7:13:4b:fd:a9:5f:a2:e0:a2:fa:3d:96:fe:83:78:
a6:13:4a:f0:cb:42:19:c4:c5:18:6c:09:c6:0c:83:
ad:71:ab:14:98:df:d1:34:e4:fe:5e:05:52:e3:b8:
a4:93:a6:3f:4c:7d:84:75:d3:c4:eb:84:d9:f2:9d:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:21:F5:75:7B:57:EC:F4:9C:C8:26:97:85:72:31:79:8C:5C:16
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:84:14:47:48:d1:bb:5b:2f:70:a6:6a:2a:59:f9:34:cf:42:
5d:c6:ef:d8:af:63:91:5e:fa:e0:e4:b4:25:c1:a6:87:a6:72:
b4:2e:23:09:69:d4:c5:25:27:7e:54:49:51:26:78:86:82:e3:
0b:d7:b0:04:41:59:6f:09:db:47:37:0a:de:e5:6e:3b:ec:00:
bf:3f:00:f5:d5:3b:9b:3a:36:35:62:ad:1d:5d:f5:64:16:39:
73:58:9a:74:28:57:c2:f2:69:e8:fb:19:ff:66:a4:ca:42:85:
45:4f:e9:5f:a7:e5:cd:3c:c4:68:ac:7d:ca:8d:f8:86:8f:41:
5d:33:60:aa:7c:0b:ac:f8:0f:ad:97:fe:6c:36:2c:cc:9a:0f:
93:26:ca:fb:4b:a1:7e:07:d1:e7:43:c5:36:cc:e6:3c:0c:6b:
4f:10:07:77:f8:30:a0:3c:52:2a:10:24:89:35:7a:65:59:4a:
6c:3b:6a:cc:d5:6c:47:34:82:aa:1c:bd:3c:98:d9:f2:cc:c8:
4f:49:3a:fa:11:a2:e4:fe:23:44:61:6c:6f:19:14:60:92:6c:
45:b1:ea:ed:0d:4e:90:2a:3c:49:39:1c:32:35:db:bc:ee:af:
1e:fa:0e:f5:33:43:ef:c3:2b:b7:23:7f:ff:24:fe:e0:de:e8:
19:99:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:25 2026 by rpki-client