Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: VVhxEX9CYWj6xTAYwdsxJk2gJE7Yylzm5Z0uortSUk0=
Subject key identifier: 11:2C:02:B0:33:5D:D5:76:49:E9:19:13:FF:D4:13:07:AE:44:12:8F
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 019CAC46F33CADED3DF6A6961D300F17682E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: La2WPm3LYF79MEJ5dmUf5iwdqMk.roa (hash: RkxUiCmpQV7nr6FWYwJ2GApRVYq0umpCRpKV/azNpzM=)
2: acmzZO4WdYbcbfIVT_LX9qTPV78.roa (hash: pEP2EoeuhTQlSixvaPnjA7Q75y0GUPve3N+3u4ET3rs=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: t+Brmc/JoLcuuE9hoyUwZNB5Nix8+8mKb3rLfH4gAHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f3:3c:ad:ed:3d:f6:a6:96:1d:30:0f:17:68:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=112c02b0335dd57649e91913ffd41307ae44128f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:6b:e0:55:9d:4c:c6:96:1f:48:b4:0c:9c:
42:05:4f:3e:6e:1e:28:8a:7a:bd:d3:35:a7:19:44:
61:17:9b:a0:bc:05:cd:88:23:77:97:e9:8c:60:f3:
4e:04:e3:fe:13:e2:34:13:eb:df:c7:34:be:99:55:
38:50:c2:dc:f8:3b:54:e7:47:ff:8f:fc:c1:ce:9b:
e5:de:fa:84:a6:a8:84:9f:68:15:80:db:02:ff:3a:
72:5a:71:78:76:e6:96:3a:7b:18:f5:5e:cb:95:c9:
88:0a:de:75:2a:96:a6:f4:af:e1:8a:45:2a:4a:f2:
37:32:03:ba:8f:5a:70:ab:62:e2:9a:aa:7a:eb:97:
de:64:dd:cf:f2:ce:40:bd:4e:52:76:fa:65:d8:9a:
25:ec:8d:9f:4f:d1:79:f9:c7:24:93:3d:85:3f:a5:
3c:5d:2a:b6:02:24:4a:1d:43:ba:cd:09:14:fa:ef:
e3:17:6e:44:6c:2e:7e:11:60:1c:32:bf:43:83:d0:
3b:29:ed:eb:34:e4:a9:e7:ab:57:66:a2:8b:e1:d9:
09:3a:07:89:ca:fe:c3:b1:d3:5d:b7:76:f5:65:d3:
9d:73:6b:dc:d1:b1:71:42:06:b7:fd:9a:d8:2b:0f:
df:d1:97:34:a2:d8:a3:85:21:58:63:ae:4a:41:4f:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2C:02:B0:33:5D:D5:76:49:E9:19:13:FF:D4:13:07:AE:44:12:8F
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:46:e6:06:69:32:a8:cf:d8:eb:13:64:3d:e0:0a:d6:9b:ce:
a9:3e:b8:e7:dd:5b:e4:cf:81:62:d5:16:dc:96:68:24:76:0a:
b2:73:e9:e6:ce:d8:02:97:a1:b9:b8:64:2e:ad:2c:d5:4c:eb:
86:4b:8a:26:b7:f6:48:aa:2b:83:23:51:67:b7:03:77:58:0a:
db:54:1f:ca:71:e7:0f:4b:7d:9f:8f:ea:00:aa:4a:b1:3b:6f:
6d:3a:b2:ca:18:92:94:e8:37:46:72:36:7d:17:cb:88:1c:47:
22:e0:e9:31:dc:59:5a:02:f1:ce:11:78:76:93:ca:99:ed:75:
cf:45:c5:da:86:95:48:e9:36:53:8b:4d:54:26:91:a9:8c:ca:
22:7d:5d:e3:0f:88:aa:db:e6:a8:52:ce:c0:95:08:a9:bf:a7:
d8:32:57:0b:9e:5c:58:f7:f4:fb:da:f5:43:6c:4a:50:43:0c:
aa:c5:45:85:5d:9f:79:93:b8:ea:7e:0c:1d:a5:cb:a4:e1:65:
c7:cb:f0:1d:f7:b1:68:7a:87:09:f3:67:20:99:0f:1c:6a:f7:
cf:97:c5:bf:3e:19:6c:6e:56:fc:05:cf:87:82:43:b2:80:98:
be:da:d8:65:72:cb:92:d3:f9:bb:af:18:fe:2a:89:63:f9:28:
16:10:f6:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRvM8re099qaWHTAPF2guMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YWMxZjg1OTViYWQ1NTgyNDBkNzQwNjgwMDBhMWNmNzA4
YmExYTUwHhcNMjYwMzAyMDIwMDU2WhcNMjYwMzAzMDIwMDU2WjAzMTEwLwYDVQQD
EygxMTJjMDJiMDMzNWRkNTc2NDllOTE5MTNmZmQ0MTMwN2FlNDQxMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsolr4FWdTMaWH0i0DJxCBU8+bh4o
inq90zWnGURhF5ugvAXNiCN3l+mMYPNOBOP+E+I0E+vfxzS+mVU4UMLc+DtU50f/
j/zBzpvl3vqEpqiEn2gVgNsC/zpyWnF4duaWOnsY9V7LlcmICt51Kpam9K/hikUq
SvI3MgO6j1pwq2Limqp665feZN3P8s5AvU5Sdvpl2Jol7I2fT9F5+cckkz2FP6U8
XSq2AiRKHUO6zQkU+u/jF25EbC5+EWAcMr9Dg9A7Ke3rNOSp56tXZqKL4dkJOgeJ
yv7DsdNdt3b1ZdOdc2vc0bFxQga3/ZrYKw/f0Zc0otijhSFYY65KQU8EkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEsArAzXdV2SekZE//UEweuRBKPMB8GA1UdIwQY
MBaAFKmsH4WVutVYJA10BoAAoc9wi6GlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWF3ZmhaVzYxVmdrRFhRR2dBQ2h6M0NMb2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80ZWRjMzYtNGQ1My00N2NmLWE2ZmMt
YjUxMTU0NjI4ZmIzLzEvcWF3ZmhaVzYxVmdrRFhRR2dBQ2h6M0NMb2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80ZWRjMzYtNGQ1My00N2NmLWE2ZmMtYjUxMTU0NjI4ZmIz
LzEvcWF3ZmhaVzYxVmdrRFhRR2dBQ2h6M0NMb2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEbmBmky
qM/Y6xNkPeAK1pvOqT64591b5M+BYtUW3JZoJHYKsnPp5s7YApehubhkLq0s1Uzr
hkuKJrf2SKorgyNRZ7cDd1gK21QfynHnD0t9n4/qAKpKsTtvbTqyyhiSlOg3RnI2
fRfLiBxHIuDpMdxZWgLxzhF4dpPKme11z0XF2oaVSOk2U4tNVCaRqYzKIn1d4w+I
qtvmqFLOwJUIqb+n2DJXC55cWPf0+9r1Q2xKUEMMqsVFhV2feZO46n4MHaXLpOFl
x8vwHfexaHqHCfNnIJkPHGr3z5fFvz4ZbG5W/AXPh4JDsoCYvtrYZXLLktP5u68Y
/iqJY/koFhD2+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:31 2026 by rpki-client