Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier: 9mqpSm9Vf4RZbpoZpTcTvCK6WIGqgqeqmTGAyWMDZh8=
Subject key identifier: F4:86:F9:59:CA:ED:F3:FB:82:32:CF:86:AA:30:89:58:7A:86:15:34
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 019CADFE20F1A6A8564DA5A68CCCCD74CF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number: 17AF
Signing time: Mon 02 Mar 2026 10:00:38 +0000
Manifest this update: Mon 02 Mar 2026 10:00:38 +0000
Manifest next update: Tue 03 Mar 2026 10:00:38 +0000
Files and hashes: 1: BvtEp7ZykJYdaMqo7blsUuKtvPY.roa (hash: JWrGFKwI8ZmYJkc5AseOHeCw/Nb3xRt6/+xGW3jCg44=)
2: d9IYgCb4O0zZISXP4tK4QuK4cvs.roa (hash: jBG8EC6qVRrjvDS0o4yvkb3drCofFVHmM9LgSbzRM0s=)
3: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: PKRX62fUWXNq2QxgRr8AZhCh61b7I9bSJgXVW2CT7LI=)
4: zKQ09Wpk_sKjI1YhqBd22SglJPI.roa (hash: sGEPj5oiG+Z1hsWttL/M7GZNmLLDhgxlhH4HT0fE8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:20:f1:a6:a8:56:4d:a5:a6:8c:cc:cd:74:cf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Mar 2 10:00:38 2026 GMT
Not After : Mar 3 10:00:38 2026 GMT
Subject: CN=f486f959caedf3fb8232cf86aa3089587a861534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:9c:23:c0:f8:d4:e3:72:04:26:d4:e6:25:
f8:be:c7:04:6b:6e:d5:84:7c:a7:cf:e0:00:c8:80:
f1:72:63:c7:09:be:80:d9:75:17:f0:81:1b:05:0f:
91:1f:c9:bd:8c:3e:16:63:ba:b9:19:32:7c:e9:33:
4d:0b:6b:04:60:d0:b0:7f:7e:4f:71:5f:9a:a9:cf:
1d:99:b1:02:c8:e4:2f:1f:db:03:8d:0a:29:07:7c:
b2:f0:67:76:fa:6a:0f:b2:4f:e4:dd:9b:34:66:8f:
63:23:4e:a5:8a:9e:90:8d:2c:e3:2e:a0:bb:d1:31:
a0:34:d3:2c:98:ae:e3:f7:9a:16:59:f0:80:e1:14:
6b:d2:ea:86:38:c4:24:d7:a1:ea:30:0f:89:a8:2a:
5b:bd:d4:40:1b:a6:0b:a1:ae:6c:96:80:ad:15:27:
ec:b6:3b:5d:83:ee:f3:b4:96:5a:5c:a5:3c:da:03:
9f:97:91:c8:71:c7:e8:f0:aa:32:71:f7:b0:62:90:
1c:58:da:b5:94:29:af:4a:04:2a:89:e5:cf:c8:f3:
dc:74:43:1a:1b:67:3d:c6:2a:aa:91:2f:e4:9a:48:
cf:54:a7:96:ee:e6:5d:a6:c9:4e:d0:6d:53:b4:a5:
c9:da:ca:c4:f7:42:cb:9c:60:dc:b4:d5:15:a6:ca:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:86:F9:59:CA:ED:F3:FB:82:32:CF:86:AA:30:89:58:7A:86:15:34
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:31:a0:ca:6e:66:be:c2:f5:38:4d:5b:1e:86:d7:4b:b4:9f:
0e:f4:a2:10:ee:0e:85:96:7d:1d:17:12:e6:69:f4:c9:da:c9:
d6:e6:8d:5b:fd:84:fe:d7:35:d6:e4:bc:a1:3a:de:9a:80:2c:
a9:a2:96:fd:75:a2:4a:99:a8:bf:6c:7b:e9:1a:41:29:b3:34:
1c:1a:a4:c6:63:d0:8d:30:00:83:0e:f2:d3:ee:c8:b7:fd:66:
27:e0:8a:41:d8:45:8a:e0:d9:47:dd:04:63:d4:c8:b1:e1:52:
04:f1:6d:fc:6a:03:4f:44:7e:6b:7d:5b:c0:e5:3a:cf:74:47:
da:b9:7f:42:18:61:0d:d4:5a:1c:9e:8e:4a:e2:b6:bc:e8:8a:
b7:65:df:0a:cd:bd:81:92:fa:11:b5:ed:6d:a1:6c:6b:0e:b2:
c1:bd:c3:22:50:8d:22:46:cf:48:cf:be:17:ce:69:0d:6b:6d:
45:9d:94:c6:63:6c:ca:ce:66:dc:46:f7:52:9b:e6:83:50:cb:
42:a7:81:11:87:e2:0e:7b:7c:b8:95:5e:3f:19:bd:97:91:e1:
61:a9:82:c1:fd:2d:82:21:4e:45:73:47:e1:e9:e9:13:65:04:
e8:fc:bb:94:99:41:20:86:c0:3c:34:0f:8e:f8:60:f5:76:8d:
8d:70:10:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:44 2026 by rpki-client