Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: AKLJPP3fXWUEXyen48S+CYD8ntazMJk48D8L0Qssekw=
Subject key identifier: 48:2A:9F:2F:44:F4:2D:B2:31:97:25:FF:28:65:CD:54:B1:48:E4:FC
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 019CAAC6F46CE81C9D6745E828AD5F54218E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:31 +0000
Manifest this update: Sun 01 Mar 2026 19:01:31 +0000
Manifest next update: Mon 02 Mar 2026 19:01:31 +0000
Files and hashes: 1: HyQmJzqnKNsyI3fs8wsXXo5JYlA.roa (hash: K4YLNNf5d2hU3VOcsfWG70mXY/0b7/Wb9z62jzKngps=)
2: kJXa9fRydrgc3PEgKj6e_ZPgJOw.roa (hash: vXw4a1fcUv1ExZN3oTfaxQy9guZhkfoKZDMFzMPNNx0=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: KELDZ0VwRG46JXCAWXdrqMnDv36thMFElBwC4Sv6K84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f4:6c:e8:1c:9d:67:45:e8:28:ad:5f:54:21:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Mar 1 19:01:31 2026 GMT
Not After : Mar 2 19:01:31 2026 GMT
Subject: CN=482a9f2f44f42db2319725ff2865cd54b148e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:dc:21:15:72:3b:dc:b7:aa:9b:29:88:1c:
d8:82:25:1c:0e:cb:20:f6:43:fc:43:d5:1b:df:22:
7f:98:e2:a4:a4:17:b1:e3:c8:50:bf:d0:a7:a1:4e:
95:a8:fb:22:56:bc:41:c1:58:40:fa:76:5e:44:ee:
cb:e6:6d:c9:c2:7b:4a:af:5b:ec:6d:d2:ff:94:c3:
e1:f3:c5:1f:73:8a:ee:e9:60:d3:bf:c7:9f:36:69:
d0:64:d5:1c:8e:16:35:57:ff:c3:62:c6:d5:30:00:
58:be:d6:6a:09:53:16:39:68:ab:54:04:22:88:68:
11:02:30:fb:27:9a:5d:f2:ff:30:d4:3c:17:69:c2:
ed:d8:c9:bc:f5:14:d0:bb:fb:ec:f7:4c:22:55:83:
81:b2:48:c2:03:b6:bd:db:73:bc:f9:ff:27:73:86:
af:fe:6d:bc:17:e2:50:a3:34:f9:79:04:98:5a:e4:
ee:b2:4e:1b:79:74:52:63:2f:2a:2a:46:e3:20:b5:
d5:cd:26:8e:5b:07:6b:44:15:17:4f:6b:79:de:08:
7b:3a:89:d5:60:66:0e:08:cf:96:00:2a:b7:99:78:
74:49:cf:4b:84:bb:a2:c3:1b:9c:ef:65:69:64:51:
65:7c:9d:8a:7b:36:38:2c:57:a2:63:38:23:ee:31:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:9F:2F:44:F4:2D:B2:31:97:25:FF:28:65:CD:54:B1:48:E4:FC
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cd:69:bd:9b:e1:93:7c:2b:b6:cc:a1:e4:fc:4c:80:6a:e7:
db:cc:70:38:68:fa:0f:0e:76:9c:a3:6c:71:cb:ac:1b:4e:d3:
d8:f1:66:cb:b2:54:3a:d5:0f:b5:d6:ab:a7:d9:48:5c:09:b6:
76:48:d9:21:4b:3d:e9:97:46:64:0e:83:02:c9:82:0f:1f:89:
34:de:82:57:0a:ee:ce:20:8e:ba:7a:e1:59:10:65:01:d9:45:
fd:92:ef:90:2f:cb:ed:4f:11:9c:15:b5:56:8b:69:01:80:db:
de:c6:a0:f8:6a:4f:5e:d6:f0:a2:c5:db:76:a4:63:c2:4f:c8:
a2:06:70:19:09:c5:4d:7e:32:9c:b1:29:d5:55:42:d7:2c:ad:
9e:6d:1e:e2:c5:5b:49:04:e7:64:1c:71:50:56:f9:c1:8c:1b:
e0:27:e0:c5:61:40:72:f2:88:f3:e5:75:ca:e4:0f:e4:e5:4b:
59:7b:8a:d9:23:35:68:fd:2b:ab:10:8a:5c:f3:67:fe:bf:95:
d8:d8:ab:2f:43:fa:ef:94:5f:3b:11:0e:a2:59:08:95:65:1c:
0e:0d:a4:61:d5:c3:cf:10:73:90:63:1f:fe:87:68:67:80:cd:
70:36:47:d1:0d:30:40:43:f6:f9:bb:0f:c4:78:e0:0e:1f:e5:
dd:36:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:02 2026 by rpki-client