Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: Rzl9kp/DmTLynHbQEENAizGuibZ0kpzq01BiWz3ZS7k=
Subject key identifier: BC:19:7E:63:E5:16:3E:D8:F6:8E:03:4F:64:33:10:84:CF:9C:7A:0A
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 019CABD95DE85872878D7B1C05498CB9A6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 0930
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: Zq0MFv-zigl29QjEhRxZZ3ciMl8.roa (hash: hYDRJ/YZvWpX6EoU2ePQIZV0D6A8L2Y7jJBr+AftG3w=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: cTi/kzhY/UpUsdOLpyeFuD6apqxw3JuoUWYTaB+sBlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5d:e8:58:72:87:8d:7b:1c:05:49:8c:b9:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=bc197e63e5163ed8f68e034f64331084cf9c7a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:94:c6:f6:b7:9c:21:64:66:13:86:bd:0d:
9f:dd:85:9a:52:c4:96:38:06:88:84:ad:11:24:07:
69:d4:d0:4c:f7:60:14:c4:0d:a1:6e:74:6d:54:80:
73:66:ec:dc:4d:5d:47:0e:21:5a:37:16:87:7b:aa:
14:f2:81:4e:5f:96:ee:48:b5:d5:4e:f8:3d:d2:79:
40:c6:f9:f0:96:b3:fe:44:a6:5d:fc:c6:b0:c9:cd:
5b:02:4f:bf:73:d8:a8:8a:be:9e:78:97:d7:c7:6f:
2a:da:40:f0:63:de:57:22:be:ad:94:30:f9:f0:1d:
1c:10:a9:b9:3d:e6:89:52:25:6f:5c:89:b4:32:93:
91:0e:48:ab:05:9a:6e:77:ab:6d:ce:b7:ff:6e:d9:
e2:95:78:1e:7f:7e:cf:7e:6c:4a:d0:ba:ae:66:a6:
3d:a8:cc:e2:c1:fd:30:d0:89:eb:1b:ea:c3:a9:b0:
90:35:f8:07:53:37:16:71:38:ca:b6:aa:3b:c4:91:
9e:a1:6e:40:94:e1:f9:70:76:a2:e1:f2:a0:64:85:
4f:b8:10:92:5e:2b:8b:83:83:86:89:5c:cd:22:1b:
be:42:d8:4e:84:82:c5:ef:23:cb:27:89:95:dc:1a:
db:8d:fe:52:93:3f:77:1f:c3:28:89:d6:24:ef:eb:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:7E:63:E5:16:3E:D8:F6:8E:03:4F:64:33:10:84:CF:9C:7A:0A
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:71:16:7c:30:2a:cb:fd:0e:4b:81:65:d7:ed:0b:21:79:35:
f6:8f:1c:1d:76:25:ac:9d:c0:8a:ab:67:5e:5d:6f:c6:9f:05:
e8:14:89:17:34:82:4a:7b:5f:b3:77:52:b4:1a:e5:74:e4:51:
1f:ef:9d:e0:63:5b:b5:21:45:f8:46:f2:4b:23:3b:ab:b6:3a:
5d:14:6e:0a:15:04:6c:4a:1b:03:b6:88:e1:24:ef:df:df:c4:
65:79:44:ca:81:42:9f:c5:8f:b0:39:2a:36:79:7d:36:19:b0:
59:a8:99:ba:29:a7:d3:fb:31:12:6f:ff:1b:d2:b7:58:b0:7c:
eb:15:90:f4:fd:66:80:f9:d9:49:9c:26:83:24:5d:b6:0a:39:
6c:3a:1f:b5:02:33:7f:98:e5:26:55:5c:2c:4c:51:3f:72:c7:
b4:a6:28:96:fe:da:99:0b:ea:cb:32:b3:9c:bb:61:0f:ac:3f:
13:1c:17:58:80:6e:71:31:18:5e:ff:d0:68:c4:6d:77:5a:eb:
a2:b0:5e:ab:bd:dd:65:64:b1:cc:9e:97:24:88:d7:e6:84:23:
07:87:af:b9:96:b6:1b:da:29:f9:41:35:c0:90:30:0e:14:fd:
3a:84:77:de:a3:ff:ab:50:8c:2e:bb:95:c6:e8:89:5b:9a:cf:
fb:ca:17:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:16 2026 by rpki-client