Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: ytqoQP8HlOjhrQ0+GQprHeVzHfVMUH8S10hJiK9Xha8=
Subject key identifier: B1:D6:E9:56:04:14:5E:4C:8D:97:70:3E:DD:B7:35:8E:52:F4:E6:B2
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 019CAC1045EBCF6F279F13895732F3603E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0C32
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: _8dqyaacWAiBj7GrWnfshRhnGVY.roa (hash: sW41H20Oh0pfgWyCjhtCKwUXmZEC6nQrjm/lQBX3AVA=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: 0ZWJLYM6z0ZMjHCu253T+x7gm98IelwIAKofh90c2NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:45:eb:cf:6f:27:9f:13:89:57:32:f3:60:3e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=b1d6e95604145e4c8d97703eddb7358e52f4e6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:7a:f9:44:fb:23:bd:84:ce:4c:a5:78:d0:
68:5d:f8:6c:c6:34:ee:e9:1b:50:26:3b:2e:a1:e8:
cf:95:71:ca:51:74:2c:b2:ba:06:18:e9:8b:b0:dd:
d8:3e:42:d8:56:44:11:3a:c3:36:aa:0d:25:76:a4:
a2:7d:79:06:07:c8:9d:1e:76:12:a5:e3:5c:e9:17:
87:f2:61:c1:21:9f:b6:61:f7:ef:64:ed:41:d6:f9:
64:7e:6b:dc:05:a3:73:0e:62:c8:37:10:49:e4:a0:
9b:72:fe:cc:1f:ca:bc:e8:22:14:44:89:20:07:36:
d1:bf:d6:b0:6c:07:a2:15:e2:2c:94:32:a9:dd:1d:
65:0c:59:11:2e:32:7e:c2:f0:cf:20:f9:a7:e9:b4:
a0:0d:74:dc:39:99:61:0e:c5:1f:e2:85:05:c4:b6:
55:17:36:6c:a7:d7:5e:b9:d4:11:03:36:28:7c:71:
a8:18:2e:43:f8:f6:26:68:de:1b:50:32:0d:c6:1c:
1a:5d:98:fe:3f:1e:b0:1b:42:71:cc:8b:41:68:8c:
59:0b:6e:8a:17:9c:b1:f5:72:37:f6:ad:6b:48:be:
83:a3:aa:d6:ea:d6:95:c5:45:f6:b7:74:c0:78:e1:
c7:b1:e7:8b:ee:bb:46:ff:6f:cf:8c:69:93:42:6d:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:E9:56:04:14:5E:4C:8D:97:70:3E:DD:B7:35:8E:52:F4:E6:B2
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:04:46:26:84:48:cf:a0:ee:88:d7:65:c3:1a:bd:2f:c3:35:
e1:f9:e7:07:28:9c:46:38:82:5d:0c:d5:90:8d:43:87:e2:d7:
ad:9c:c3:34:c5:dc:05:07:48:a5:c7:fb:84:de:90:e7:6b:4a:
06:82:bb:80:1b:eb:66:19:9a:aa:7d:58:89:51:83:9c:15:4f:
14:80:72:50:d9:2a:7e:55:a5:6e:5f:2d:d2:66:df:6e:50:2e:
9d:65:5d:22:d7:49:35:41:15:91:4f:bf:d7:50:0c:d3:ab:13:
f0:6b:21:69:c6:01:d3:6e:7b:fb:5a:b0:2b:6c:78:1a:67:f0:
9e:36:64:55:06:28:75:0f:2e:4a:c3:b2:03:b1:30:df:57:0b:
93:82:f2:f5:a5:06:79:ba:39:dd:db:56:de:60:09:9a:0f:82:
ab:7f:12:e2:ce:19:d9:9e:ad:15:cc:8a:bc:36:57:ee:f3:8e:
63:00:f4:41:0a:7a:63:99:c3:88:2b:52:67:4f:d0:a5:1c:71:
2f:f4:9f:5e:f1:4a:02:11:c2:95:bf:2b:6b:0f:98:e5:8d:00:
28:9e:96:5f:5d:ed:9b:08:33:9d:45:43:ec:a5:a6:02:51:cc:
a7:0f:28:b4:26:e7:9d:c9:53:1d:6e:fa:09:9e:75:22:86:ba:
f2:0f:ff:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:58 2026 by rpki-client