Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier: JYyj+lisOCwYBeOpvYPJ6IEjA8MSwU4MhcWxI5SngN4=
Subject key identifier: 83:3A:BC:E0:4D:AC:FB:C1:8E:31:A7:F8:E7:2E:43:D9:3C:E1:D6:DC
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019CACB4FB068DA7986BEBCB54D3F4ADCEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number: 0C19
Signing time: Mon 02 Mar 2026 04:01:07 +0000
Manifest this update: Mon 02 Mar 2026 04:01:07 +0000
Manifest next update: Tue 03 Mar 2026 04:01:07 +0000
Files and hashes: 1: 1-3nsrh4Lo8MRYJrpDe2Kv8gI2bk.roa (hash: J6AC5UbCT/JPLrTSWfSumCMQQX3px8kLFv3gDTLnI80=)
2: 9Q-wIj12he9wXDbL67TYYvZ_2cI.roa (hash: TjJ3yUQRLm+yE/F996Jy9BjBIBFcfqDfS+QMH9VjHSM=)
3: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
4: PIU7Zxr6WOBUfjTOxP66dy63XjE.roa (hash: h4a3tGn4XY5dyoqR5ywDpWw2ctrTMxmn2LdoBTK4oGk=)
5: fmZxjRZiqOQwHDt7j51f9SOA6RI.roa (hash: L9SLemKUDE99zwW/1qnnl1xaC8S5UDziumUBVKNLf1U=)
6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: gkCNo880+KN31Uk7J/kOfIYLqez469j0TRzW2EHw32s=)
7: rHk667_7e1f5CM1H6jMGDJQ1_rI.roa (hash: eJy0wY8fT6hZGfxYTUIN+SEKm4c/Wt9buTzlEZ5VOng=)
8: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:fb:06:8d:a7:98:6b:eb:cb:54:d3:f4:ad:ce:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Mar 2 04:01:07 2026 GMT
Not After : Mar 3 04:01:07 2026 GMT
Subject: CN=833abce04dacfbc18e31a7f8e72e43d93ce1d6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:ed:13:be:15:63:47:e3:07:bc:00:69:d0:
74:cf:90:03:7b:3d:c3:7d:92:41:9c:e9:fd:7a:58:
ec:a5:99:0c:59:b7:fc:58:9c:eb:ff:3f:d8:37:a2:
58:0f:e2:be:32:f8:df:88:e5:12:1c:fe:c2:f6:c6:
f0:82:a8:0e:86:d3:b5:4e:af:86:e6:4f:5e:4d:05:
32:48:9d:b3:dc:b3:fc:7f:7b:03:6b:9e:17:d2:ed:
c0:b4:42:46:a1:7e:d9:bf:dc:93:29:18:6a:22:fa:
6c:3d:38:c5:a2:4f:2b:f5:56:17:e0:fd:1c:68:6e:
a7:e0:ca:a7:ad:08:44:c3:53:28:56:d3:a1:0b:b8:
e6:ec:b6:8d:fc:86:40:42:7d:ce:67:55:d5:f6:7a:
d4:36:c0:b8:02:4a:e7:ce:a9:1f:68:5b:2a:00:37:
c8:b7:a1:45:b8:a9:c2:1d:0a:9f:05:f6:b9:d1:fe:
e0:06:7f:90:cc:5f:04:50:43:79:f2:15:f8:5a:87:
65:b8:30:7f:ed:44:7b:30:a3:54:9d:8f:8d:6e:4d:
1e:da:ab:8b:62:de:04:02:55:74:04:2d:f8:d6:d7:
0e:45:f8:3f:ef:32:ad:c0:c9:67:6c:bc:99:8c:76:
f5:67:f0:67:97:d9:65:d1:37:44:77:2d:91:ae:00:
75:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3A:BC:E0:4D:AC:FB:C1:8E:31:A7:F8:E7:2E:43:D9:3C:E1:D6:DC
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a1:39:cd:ca:8e:10:e4:02:78:6f:6e:ec:52:88:1c:be:f3:
8d:76:48:53:2d:3e:dc:a7:35:b0:aa:d2:7c:06:a2:ab:4e:54:
b4:bd:7a:56:e0:cb:95:9d:17:45:07:53:74:5b:34:32:9f:6e:
6f:b0:5f:f8:de:e7:c7:00:eb:3a:52:46:97:ec:b2:17:9a:92:
86:4d:a5:44:ce:8c:b0:4f:c7:7c:de:5d:d2:55:b9:4e:2f:dc:
f6:0b:8a:dc:22:2e:64:a6:76:e2:62:67:f0:ac:26:d5:e0:cc:
47:ba:b2:a0:e0:b6:11:21:2e:68:3c:39:cd:9d:de:be:48:05:
de:42:e0:b2:7a:5d:39:c8:31:8f:e4:e7:1e:42:dd:03:09:ab:
84:89:c2:d6:d1:4a:fd:17:c5:71:7b:7d:f8:0b:64:89:c5:c9:
ef:7a:32:23:e5:37:63:56:1e:5d:e1:0e:1b:15:56:d9:a3:1d:
95:1d:b4:18:d4:74:52:16:25:29:c4:31:32:d0:b1:18:be:5c:
47:38:fd:bb:54:ee:8e:83:d1:00:33:b7:f8:d2:c1:77:38:c1:
9b:00:3f:ea:91:5e:83:2b:df:f5:0a:c3:bb:e7:49:58:10:80:
41:3c:98:df:0b:a5:7c:f7:7e:49:0a:a5:34:7a:cc:55:11:e5:
17:96:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:25 2026 by rpki-client