Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: CniK+0zzs5M66vs+22T1LP38oO0FJ7DYzjSrcjHqwv8=
Subject key identifier: 16:AA:B0:1B:7A:53:0B:2F:5A:B4:07:F7:44:F0:6A:6C:F5:82:75:AD
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 019CAD59908F4EE440BD256656B7D88FC66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0F30
Signing time: Mon 02 Mar 2026 07:00:53 +0000
Manifest this update: Mon 02 Mar 2026 07:00:53 +0000
Manifest next update: Tue 03 Mar 2026 07:00:53 +0000
Files and hashes: 1: Np_Aj_nRkhMZ7_NKJQ1GEacRUpA.roa (hash: ejeWv0bVkbD4tbjs10obMgkJkumcVMFWXk26yJzaKVM=)
2: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: tMIlJpwrRaz7KuzXhoYmCooHzNva+cX0c0j+R5n5B5Q=)
3: rf6n8rR_IGjgaV0dY9RAe_eoXuQ.roa (hash: h34ncx2/ZVU6/2WFeoHZWwK1+eEDb80qBYHdb3kT8TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:90:8f:4e:e4:40:bd:25:66:56:b7:d8:8f:c6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Mar 2 07:00:53 2026 GMT
Not After : Mar 3 07:00:53 2026 GMT
Subject: CN=16aab01b7a530b2f5ab407f744f06a6cf58275ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:df:08:62:e4:34:f1:e7:6a:40:38:36:ad:
f2:6a:90:e0:c1:53:26:70:5b:d7:df:10:89:5e:e6:
02:6c:9c:df:79:88:9f:70:22:46:ef:03:6f:5f:96:
27:2b:c5:28:cc:7d:01:4e:e2:78:41:f0:4d:fc:56:
8f:fb:e8:17:42:36:9c:1f:be:d4:1f:99:ed:51:65:
08:37:c6:e7:03:98:2c:35:ef:99:5d:56:1c:b7:10:
d4:f9:35:eb:2f:1d:eb:65:2d:f9:58:fa:89:b6:12:
61:67:0d:75:26:f3:cc:f3:72:e2:5f:84:c4:94:6c:
fa:85:47:88:da:d9:41:58:b5:56:27:d9:7a:bc:8d:
40:77:3e:5c:ee:3f:17:98:c9:f1:c2:e7:9e:2f:cc:
e8:3e:9c:68:a7:7d:91:43:6d:38:68:d1:da:e7:44:
b7:d9:0e:42:4a:33:3d:06:44:0a:86:d0:42:73:09:
ca:98:70:51:66:59:b9:99:45:3a:e2:d1:a1:88:94:
67:f3:a7:06:fa:32:fe:be:7e:3c:d1:1c:9c:b9:85:
01:9a:8e:c9:39:97:89:83:b8:72:18:65:51:2e:77:
1a:23:d6:04:24:77:91:2c:a2:3f:2d:0b:ca:e0:2e:
da:ab:e3:53:a8:95:39:f1:13:86:a9:04:18:1a:8c:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:B0:1B:7A:53:0B:2F:5A:B4:07:F7:44:F0:6A:6C:F5:82:75:AD
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:94:6f:b3:78:4d:d8:b2:a1:06:0f:fe:e1:f8:41:3d:40:b0:
fb:8c:c5:81:00:54:b6:fe:d4:73:50:4f:0a:d3:72:0f:47:ff:
84:66:69:a3:c3:e1:b1:f0:82:a0:85:e5:0d:a2:04:30:98:fa:
5c:09:da:a5:57:70:c8:75:e4:89:3b:43:97:4f:a7:26:84:a3:
4b:81:d5:56:39:ae:e7:f2:0a:32:3b:2a:2c:84:6b:d9:74:2d:
81:e1:01:c3:93:ae:e4:4e:90:2a:a5:81:c8:fb:6d:86:6e:1c:
1b:8b:01:17:c8:9f:d8:1f:81:7a:15:f6:19:05:c2:38:83:37:
c8:34:f9:41:49:ad:48:55:68:b6:52:f2:4c:68:a1:f7:4b:d7:
82:c1:c5:cd:44:68:1c:7f:f0:11:3d:e3:4e:04:cb:b4:68:92:
67:10:52:d2:7c:5b:3d:28:f6:2a:27:df:f6:98:72:20:a5:b3:
fc:8b:08:1e:31:bb:ca:ca:e5:4d:76:58:85:28:81:63:b5:96:
14:14:a3:e5:a9:2d:aa:0c:80:66:52:91:a8:e5:b8:d4:a4:6d:
15:e4:c7:c3:f3:9e:61:83:11:0b:22:2e:97:24:e5:d1:5c:2a:
f7:1c:c5:e4:ae:d2:5c:87:bf:eb:5e:87:33:d3:e1:b2:1b:73:
dd:33:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:36 2026 by rpki-client