Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: XiwKusRIGZm/I0yY5lnJNVnadgvwrWTGrqYVwApjciM=
Subject key identifier: 8F:9F:9D:A7:DF:46:A0:94:A4:CE:E5:40:34:4A:02:A5:64:C0:D5:4D
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 019CAA2185BAC807B210357B17C708460182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0B8F
Signing time: Sun 01 Mar 2026 16:00:49 +0000
Manifest this update: Sun 01 Mar 2026 16:00:49 +0000
Manifest next update: Mon 02 Mar 2026 16:00:49 +0000
Files and hashes: 1: EvhdgJldzrTyPRhTwu7_R0oOsRk.roa (hash: jp9wh8X1nWQb/EKe4T8unvTtIOObggs6fceKYXSVd0M=)
2: KeD4L6y8pe2jawoO0v_Iw05d7f0.roa (hash: MlHed28QjL1er2kf3lP9+8MfBm3P54VkdbgLne7YLtA=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: HDUbSssyHuQPoRptyMxx7eEcioSLkW8C2+diHkS8LfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:85:ba:c8:07:b2:10:35:7b:17:c7:08:46:01:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Mar 1 16:00:49 2026 GMT
Not After : Mar 2 16:00:49 2026 GMT
Subject: CN=8f9f9da7df46a094a4cee540344a02a564c0d54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:e1:e1:d4:9e:f5:ba:60:41:39:54:38:a5:
b1:71:b7:9d:a1:de:f3:a7:12:c1:6e:ae:d0:a0:fe:
e4:58:cb:f1:96:c9:36:1b:af:f9:61:4d:a1:fb:1c:
1a:bd:ba:d1:d2:6f:12:c5:89:7d:71:6a:ea:2b:02:
fc:2b:cd:ba:9e:15:5e:28:74:31:1c:e9:1b:37:08:
cf:d7:8f:03:54:d8:87:03:c9:25:2c:b1:86:7b:e5:
07:85:df:4f:af:55:d0:1f:78:3e:64:3e:be:d8:ed:
67:d2:53:14:5f:51:8c:46:ac:b0:0a:49:f8:b4:6e:
28:7e:1e:ab:ae:a6:6d:42:b3:16:6a:4c:e6:ef:a9:
d2:7a:73:5c:a3:3d:a9:57:00:9c:11:f7:2b:25:94:
f7:65:65:5f:bd:9d:d8:1e:5b:59:d5:67:df:2e:0d:
a6:8a:79:ad:d8:e3:2c:31:ee:a3:19:f0:fc:86:21:
c2:41:c2:b6:3c:3f:da:f6:ec:74:9c:b3:22:e3:d0:
03:4f:dc:02:10:b8:9d:17:6a:97:8f:cb:ed:a0:fd:
d2:24:c0:62:98:2b:96:2a:9b:b2:2f:65:37:0f:7e:
6e:b8:be:3a:18:43:6d:74:51:6b:15:a0:70:94:40:
77:2f:79:6f:1d:ce:6d:ac:d5:28:11:06:fd:00:d6:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9F:9D:A7:DF:46:A0:94:A4:CE:E5:40:34:4A:02:A5:64:C0:D5:4D
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ad:7b:75:bd:eb:29:d5:74:10:46:e0:9d:eb:04:65:ab:33:
6f:6a:06:4e:eb:27:58:79:b1:31:da:5f:93:07:dc:31:b3:72:
8e:40:b9:7b:a4:6a:8d:51:75:20:be:41:aa:e7:a4:c1:c2:3e:
6c:e4:81:0c:7b:57:9f:74:1d:34:cf:ba:52:ba:97:49:71:cc:
b3:c5:5e:72:83:ac:83:ee:da:63:75:1d:86:63:c1:28:b0:a0:
2c:b2:cd:cb:9c:03:5a:2c:1f:03:75:5a:eb:d0:2a:42:7c:6b:
68:cc:e3:b8:71:e3:d9:51:5f:ef:32:2d:12:80:ec:39:11:33:
f6:e1:70:39:c0:19:e6:c6:8d:89:1a:48:ce:43:2a:78:14:73:
37:92:c0:31:a4:50:a2:ad:95:d8:e2:a1:54:21:d0:91:30:66:
d0:c9:87:ef:6a:fa:21:55:12:53:54:00:04:6f:e5:13:37:4e:
4b:14:49:0e:2f:62:55:20:75:1d:c0:c1:38:49:46:07:66:36:
d4:e2:e7:bb:f7:6b:49:d2:19:79:ed:63:7e:72:c7:6f:ed:2d:
8b:bc:b2:ef:cd:30:bf:69:a9:06:25:f9:3a:a5:3e:d5:53:d7:
0d:8e:7d:81:6c:cb:c0:df:89:3b:b8:7a:a6:87:54:e6:64:bc:
5d:c5:c4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:24 2026 by rpki-client