Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier: 9qd345GIulEA2oAGLNOTiUCPT7huXu3/VhI/qk+F4zU=
Subject key identifier: FC:81:7D:79:22:4E:C1:5A:D5:5B:36:CA:2C:A1:78:5E:BC:07:C1:8E
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 019CAAC709D7583EC722F379CCF1FD8A9D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number: 0FBC
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: 172C2CZ220z8mf717p+Qhd7IL89V82nP6K6VhESINDg=)
2: xbvEJZeUt0xfTCQkzUMYNid2WuU.roa (hash: N+c9uTWESBLyJAw1GRbCX5BbluIVDmwBAavnIr/6+Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:09:d7:58:3e:c7:22:f3:79:cc:f1:fd:8a:9d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=fc817d79224ec15ad55b36ca2ca1785ebc07c18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:ef:6d:92:11:04:2e:21:f6:fe:4b:79:30:
cc:80:e0:80:b9:75:1b:17:75:f7:fa:1c:17:e1:10:
c4:10:78:91:20:40:1b:57:18:60:0e:8c:cc:98:c5:
a4:ad:f2:5d:0e:59:b0:67:00:51:d9:ba:86:11:7c:
2e:b5:c9:01:a9:6f:bb:34:e9:34:da:12:30:01:14:
e7:d5:01:56:d8:87:7d:53:ec:79:34:59:72:ea:e0:
68:67:d9:b4:ff:3e:da:59:39:e8:9e:e9:7b:36:a2:
1a:a3:4d:30:07:80:03:54:d2:6e:85:f0:82:9b:6b:
43:fe:53:28:4a:55:8f:1d:7c:a7:fe:e2:75:08:b8:
35:52:e6:b0:61:ec:39:46:11:9c:45:64:92:c4:ba:
f3:4e:b8:61:99:f3:23:e8:00:f5:ba:a3:79:14:a3:
2d:5d:e5:8c:34:9a:f7:eb:2a:10:4c:84:f9:ce:7c:
2e:8d:dd:7b:b3:ec:e2:64:02:5e:f1:b7:dd:56:bd:
62:60:81:00:8b:8a:00:f7:d7:e9:34:c8:08:30:8c:
c5:b0:c8:5a:d6:da:7e:de:f0:fd:ad:94:2b:be:c9:
4e:a9:e0:01:31:bb:7c:98:1e:e0:1e:ec:88:d0:60:
43:3c:5f:ca:e1:2a:ae:7b:86:fe:ce:df:56:ea:81:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:81:7D:79:22:4E:C1:5A:D5:5B:36:CA:2C:A1:78:5E:BC:07:C1:8E
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a7:00:b3:68:48:aa:b5:f2:e8:d0:74:b2:7b:04:d3:62:39:
c9:f1:33:8e:8e:af:e1:33:3e:ca:91:fd:22:32:a0:e7:14:d2:
e0:8b:37:06:93:0e:30:aa:18:a9:0c:65:a7:55:25:e0:f9:e2:
ad:74:30:85:a9:60:c5:27:e2:07:dd:2e:1e:04:15:e7:2f:11:
0e:b7:e1:f4:fb:83:dd:6e:4f:3b:53:ae:1d:3d:c6:61:29:3f:
34:eb:1e:b3:58:52:ba:ef:ad:ef:6c:84:bc:de:7d:38:9e:e8:
3d:75:97:6c:09:a9:dd:e2:ae:b6:1f:c3:61:72:bb:f1:20:7c:
bc:96:e0:c6:5e:f1:1d:55:31:05:cc:9e:c0:d7:6f:47:aa:6b:
9f:b7:ca:e8:a5:bf:57:b9:fd:77:e0:62:9a:a3:1b:38:0a:af:
fb:18:c1:1c:39:6a:c2:7c:c5:a1:fb:8d:a6:2c:17:86:83:75:
2b:2d:4c:2a:c0:f2:12:37:68:b3:f7:cb:e9:a9:34:3f:8d:43:
39:1f:e9:f1:48:c0:a8:92:b0:74:bc:91:54:34:a5:a9:95:ef:
b6:af:56:db:c3:97:cf:87:54:5b:35:18:db:0d:35:28:22:b5:
4f:5a:3f:d7:93:74:c9:4b:eb:f6:19:06:8f:ee:11:21:88:8e:
76:91:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:07 2026 by rpki-client