Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: vAUTSkCzwew0f+qgKUEgLk+c7xJNRNnPWON1+IZMQG8=
Subject key identifier: A2:03:D5:43:C9:E2:30:77:40:10:48:14:86:94:84:45:AE:18:59:E5
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 019CABD98659BBD91EC6EE16FE82C275F725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: q6ncurMwQJsgqgpdeBA2Q3jtWlDaE7Ou5oWYyMvHx94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:86:59:bb:d9:1e:c6:ee:16:fe:82:c2:75:f7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=a203d543c9e230774010481486948445ae1859e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:59:d7:3f:b4:57:9f:d1:62:47:9b:7e:1c:
8e:bc:a0:48:ff:57:90:47:c0:81:82:86:f4:9f:5d:
57:62:c8:f0:2a:e9:c7:a3:9d:e2:65:76:10:0c:a4:
d3:63:a8:47:4e:ad:0d:cc:ef:95:b4:ef:af:47:6a:
76:c4:43:e8:8d:2b:01:cd:75:c0:e0:69:02:f4:71:
4a:34:93:94:ae:7a:be:f3:7b:db:73:8a:db:11:63:
8c:7a:8f:2a:e6:7e:e1:bd:3e:00:2a:1c:e4:f5:f3:
f5:b1:aa:9b:68:f6:0f:61:7a:ee:b4:dd:43:9b:64:
eb:80:0d:a1:7e:cd:03:7e:f8:47:0b:f1:f2:d3:58:
a1:99:9d:83:34:1d:e5:43:39:5b:cd:c0:a3:21:34:
1b:7a:a1:8b:20:4a:eb:7d:47:10:5d:a3:77:c8:1f:
61:a7:09:94:b6:2b:92:2f:0e:8f:fb:c6:15:99:ea:
4d:de:d7:5e:c8:dd:9e:be:27:0d:d4:e9:8d:3a:e2:
82:b9:15:d2:10:52:20:1f:e7:df:e2:34:e4:10:75:
75:a8:43:37:5f:d0:25:da:32:b9:ee:09:73:5b:b2:
ad:0b:20:3f:d4:9e:56:c5:50:63:46:8c:5f:14:0b:
8e:3a:d2:d0:9f:a8:30:6e:f1:6e:a2:d3:16:f9:5e:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:D5:43:C9:E2:30:77:40:10:48:14:86:94:84:45:AE:18:59:E5
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:18:fb:fb:fc:94:a4:75:0c:8f:c6:e7:84:17:12:e4:58:67:
6c:2f:05:a9:8f:1d:e7:9a:9c:96:2e:5e:61:e6:45:0d:e3:7c:
14:0d:f3:85:13:9b:d5:77:9c:92:ce:7e:82:41:5c:a7:a7:7c:
c6:e4:ad:2b:44:94:b1:1a:88:1d:11:60:9f:cb:89:b8:86:8b:
b5:36:a2:17:6d:31:33:0d:2e:58:6e:62:f3:c8:5c:19:19:ff:
75:19:66:0b:67:c6:08:ee:96:ae:b8:79:a2:44:af:3a:51:99:
52:5a:e6:77:8d:ce:07:de:4a:71:d7:ca:bc:92:2b:84:a3:db:
83:7a:a3:1e:46:28:82:37:51:bb:eb:3e:fb:45:cc:14:84:ec:
df:d4:2a:b4:1e:fc:7f:83:13:c2:9c:dd:e5:ba:ff:46:be:44:
dd:4b:36:da:c2:22:09:ed:1e:d0:f9:7b:00:67:6e:ae:cc:6e:
f3:36:89:9c:90:62:a5:22:f9:a6:7c:d3:bb:72:90:80:7b:37:
25:5f:9c:52:f0:a4:e9:4e:44:a5:3d:da:8a:9e:bc:9f:be:74:
72:b5:18:d6:fa:30:97:e3:b9:d0:74:ac:55:35:88:47:b7:86:
07:c6:b2:67:b1:f8:d0:07:5f:3b:5a:fb:02:b9:06:c0:69:ba:
82:20:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:55 2026 by rpki-client