Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: q1BwbWy0vPnujTSLJDoXHZvQRlmkS7gTQyccHTyoyXs=
Subject key identifier: A7:08:CD:23:F9:30:2C:4A:C8:1A:B4:54:D0:32:4A:94:58:E2:28:B6
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019CAD22A2E3958B40599FAB1150411203B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1820
Signing time: Mon 02 Mar 2026 06:00:54 +0000
Manifest this update: Mon 02 Mar 2026 06:00:54 +0000
Manifest next update: Tue 03 Mar 2026 06:00:54 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: pl4PyR4P/7HZoY2q22liQ6helRgCX9lOrwdyhVXM4TM=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a2:e3:95:8b:40:59:9f:ab:11:50:41:12:03:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Mar 2 06:00:54 2026 GMT
Not After : Mar 3 06:00:54 2026 GMT
Subject: CN=a708cd23f9302c4ac81ab454d0324a9458e228b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:31:e0:3a:82:9f:72:0c:0f:bb:c2:63:e7:
91:33:f4:9f:95:23:4d:30:5d:a7:ff:6b:f8:bd:80:
2e:e7:cb:38:fb:c4:25:d7:2f:61:e6:bb:75:7d:a8:
02:4a:ee:fa:17:98:57:9b:7e:6e:56:3d:49:20:1b:
07:a1:a7:a8:4b:a1:59:10:94:39:4d:c2:c3:e0:44:
71:49:be:9c:b0:4b:c5:ea:f5:8e:31:66:95:c1:b7:
e1:c6:b7:2e:78:9e:4d:da:3a:2b:d1:83:e2:de:88:
1a:62:31:dd:39:09:ab:85:6a:9e:35:89:99:aa:fb:
ce:40:a8:0e:be:2d:d6:82:2e:19:21:21:bf:6c:68:
d0:76:1f:bc:31:aa:31:25:09:50:1b:03:84:0f:ff:
01:39:a1:bb:41:51:09:af:8a:d5:c5:ff:af:c5:5b:
93:83:a5:cc:65:43:34:0b:75:06:70:b9:73:1b:28:
24:da:60:0d:30:dd:90:73:b2:60:71:9f:51:ee:07:
ff:d6:ae:70:87:e6:92:32:73:25:c6:eb:26:ba:b3:
33:f4:e4:02:13:48:34:ee:52:98:e5:bd:21:59:89:
fa:05:4c:5d:23:1e:cc:f3:92:a0:59:61:a0:6e:31:
8a:cb:1a:8b:9a:e2:e2:45:33:ee:a6:21:3e:89:f3:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:08:CD:23:F9:30:2C:4A:C8:1A:B4:54:D0:32:4A:94:58:E2:28:B6
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:59:01:1e:5a:ea:0b:f0:50:75:97:34:15:ae:f1:1d:cd:3c:
6b:c6:66:bf:7e:a8:2a:bd:39:57:cf:0b:a6:c7:04:50:3d:77:
cc:46:f6:21:84:de:6a:ac:f5:62:f7:62:2f:96:e7:53:cc:27:
20:c5:2b:0b:d3:9b:2b:1f:ef:6d:9c:ab:f1:f7:08:42:72:67:
4c:fb:b5:81:b6:d9:0d:e4:84:62:37:99:8c:0b:43:c7:a8:9c:
37:39:21:3d:63:21:c2:84:c0:06:c2:ad:51:87:50:98:d8:c1:
90:24:dc:e2:0f:d1:14:41:09:6b:87:16:8c:9f:64:64:ce:73:
f5:ac:ca:ee:fe:7f:92:4a:03:2e:1b:d1:15:9e:9b:66:7d:ff:
c3:26:e4:a0:79:a3:54:96:33:3f:a4:91:b3:7f:71:80:59:2e:
86:bd:16:33:f2:8b:46:69:4e:43:6c:99:24:d0:51:b4:a5:c6:
20:ad:79:07:ed:1f:54:27:42:a4:7c:b6:c7:67:56:9a:18:31:
fa:75:ae:04:e6:a6:53:ce:71:d7:01:91:38:4a:4e:47:a8:36:
2b:e9:f0:ac:0d:0d:13:ce:4e:d4:e0:d5:5d:48:f8:af:0a:7a:
37:6e:d0:47:e3:77:8c:a2:2b:41:97:97:d1:ed:2c:51:c1:eb:
6e:55:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:03 2026 by rpki-client