Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: iMCddW2XqgtTeVilwDYQEaM5wjPwqoA9NHNIFX37CmU=
Subject key identifier: 73:40:9F:D1:62:BA:5A:6C:D7:20:33:79:53:FD:27:EF:87:37:91:74
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 019CAC46D82BBBC733031A822A8CF13BF506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:49 +0000
Manifest this update: Mon 02 Mar 2026 02:00:49 +0000
Manifest next update: Tue 03 Mar 2026 02:00:49 +0000
Files and hashes: 1: pZAFv0jFSIg3T6apn7mzvuziSbo.roa (hash: Mivi7UE7PO7E6vo4gXQ02GjqhdIj6xXgGbCncGPuXD8=)
2: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: B71drPvozJWaHXJumhVDL1ipaJayOrr7Sf6MKcxG+So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d8:2b:bb:c7:33:03:1a:82:2a:8c:f1:3b:f5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Mar 2 02:00:49 2026 GMT
Not After : Mar 3 02:00:49 2026 GMT
Subject: CN=73409fd162ba5a6cd720337953fd27ef87379174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:5a:4a:fa:3a:49:e4:dd:2a:dd:ab:8c:33:
3b:6f:f8:87:01:44:f8:d2:36:ed:d8:41:62:c9:3e:
91:7b:6c:91:5c:66:05:2f:61:71:04:7c:16:d3:b4:
be:aa:cc:d2:26:1e:0f:1a:5e:86:68:c8:c9:8f:df:
07:24:7e:07:23:7e:7a:8c:d9:ed:5c:b5:81:42:15:
70:f4:b7:4e:ba:43:bf:fc:31:18:74:d1:56:b9:16:
38:aa:51:9c:6a:55:01:48:55:c9:78:a4:04:b0:72:
de:c8:78:65:09:02:41:cc:91:74:51:7b:6c:e5:0b:
91:b6:b8:27:98:22:50:b2:61:36:bf:d8:97:0d:84:
3b:48:89:85:e8:53:40:66:cb:70:61:3e:d6:0d:74:
b0:57:45:94:4b:2f:ad:14:d2:4a:f8:b9:40:2e:80:
c1:fd:2e:ce:df:20:68:c4:7c:fe:26:2f:09:51:ba:
83:4f:32:8a:45:b4:2e:20:7f:bd:45:b2:a2:ec:57:
9d:0b:f5:8a:4a:3a:b0:b8:f5:87:90:4d:aa:52:9f:
b2:a8:c9:90:b9:f8:4e:ce:bd:f3:e1:d7:e2:09:c9:
df:ed:f8:8d:62:06:03:a8:e4:ae:94:16:c4:45:3f:
de:a9:7c:e6:d8:fb:fa:be:5f:f3:98:ed:22:23:94:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:9F:D1:62:BA:5A:6C:D7:20:33:79:53:FD:27:EF:87:37:91:74
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:47:69:6b:d0:a0:28:54:c2:70:98:14:43:e0:41:76:54:ef:
0a:47:75:e5:4a:72:21:9a:e3:23:23:e5:2f:81:f1:d9:8a:44:
5f:89:2e:7b:4e:ee:ae:2d:3e:3d:8b:57:22:24:4c:fd:d2:91:
83:5e:b6:08:fd:15:80:86:08:13:95:0c:cb:f1:b3:83:82:8a:
eb:bb:ba:47:d4:95:f1:ae:49:66:e0:ae:32:99:0e:da:f0:12:
1f:0c:43:c2:22:31:cb:b1:df:cd:d6:79:44:16:1b:ba:d2:f6:
ad:15:da:00:9c:19:c3:10:19:36:f4:6a:53:3c:b2:9f:7e:be:
49:50:95:33:aa:ab:c0:42:cc:99:de:6c:b3:a9:c7:89:19:cd:
e5:80:b4:e1:fa:ba:53:af:dc:a7:ae:5a:64:50:64:44:f8:a8:
50:a6:91:2f:4e:ec:9c:07:92:6d:3d:28:c0:15:9f:04:de:e1:
38:de:d2:16:2c:be:1e:a5:97:09:5f:77:0c:84:f1:6f:3c:66:
d7:0b:85:fc:92:42:76:09:6e:53:99:de:be:35:82:16:4a:80:
1f:04:9b:dd:f3:09:4f:53:0c:a4:17:c3:23:cf:52:03:64:39:
60:63:73:b1:a7:e7:27:19:8e:7a:b1:3e:5f:7a:62:4e:02:c4:
bd:ce:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:09 2026 by rpki-client