Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier: uL8JZbbqnqklWgoE/DGPix/vmpS5pnSrR6nHLPPjaqw=
Subject key identifier: FB:E8:80:24:79:03:0C:99:BB:2A:78:26:21:A8:AF:B4:FE:75:1B:C5
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 019CAD22935366724CDB2213ADC79DCE931A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number: 09F4
Signing time: Mon 02 Mar 2026 06:00:50 +0000
Manifest this update: Mon 02 Mar 2026 06:00:50 +0000
Manifest next update: Tue 03 Mar 2026 06:00:50 +0000
Files and hashes: 1: QRd4aPFV9jlBuWiqVWId4f78nwU.roa (hash: z76kR0ZXpWXElfaEyx2j2tbap+nSUCRwRkiT2NmSfmM=)
2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: FLMopQ1oU4E9yj5hyHK83pPgMgt5fX1ri8TlXEMlQ9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:93:53:66:72:4c:db:22:13:ad:c7:9d:ce:93:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Mar 2 06:00:50 2026 GMT
Not After : Mar 3 06:00:50 2026 GMT
Subject: CN=fbe8802479030c99bb2a782621a8afb4fe751bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:26:37:4c:09:30:da:13:15:fb:07:76:dd:
52:99:02:0f:2f:3b:34:6e:31:8e:67:a1:ef:33:1b:
c8:5e:76:bb:cd:c3:4b:6d:8b:6a:4a:ef:bd:83:bd:
91:c0:ec:da:c8:cd:c9:66:cb:b9:18:59:81:bc:9c:
aa:90:c9:7b:68:05:4d:42:9d:b1:d1:0f:7c:e0:ca:
20:99:dd:68:e8:28:2b:b4:3b:32:d7:d6:d9:3c:18:
77:3a:4d:48:6a:49:58:d8:bf:c9:e7:cb:16:7f:3d:
02:10:a8:c1:6f:90:d1:22:34:e7:c0:cb:45:14:b8:
b2:6e:f3:17:26:6d:b1:97:b3:65:3c:df:4b:19:ee:
58:cf:31:fb:94:fd:ce:a8:d1:8f:97:66:b2:1e:64:
e1:db:7f:9f:63:5d:cb:cf:dc:a6:df:1d:02:bd:61:
4b:30:2d:30:81:57:19:3b:f2:e7:7c:10:4f:b7:23:
63:af:3e:89:23:e2:38:4d:3e:20:fa:4e:f4:2a:a8:
18:be:a8:9d:9b:0c:46:6e:75:1a:75:82:bb:19:8a:
e4:58:0f:31:35:07:a8:ca:99:c1:a6:81:a5:41:b3:
11:94:6e:f3:1f:8a:44:b9:98:d6:08:cd:9c:db:f9:
a3:86:d0:9c:51:af:d4:82:4e:f0:bc:0d:e5:93:53:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:80:24:79:03:0C:99:BB:2A:78:26:21:A8:AF:B4:FE:75:1B:C5
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:04:6d:94:eb:22:ae:b1:98:74:cf:39:68:cc:48:33:fb:ea:
e3:d9:30:bd:30:67:11:2f:da:07:d9:20:2f:66:3a:e7:fb:06:
56:a3:ba:5f:98:82:2b:9d:7f:79:97:79:3d:69:80:27:57:27:
05:79:82:02:fb:90:e4:5c:c5:04:64:b2:58:2b:30:a9:c5:fd:
04:fa:11:8f:93:73:91:ec:f6:fc:f6:16:de:52:45:9c:e3:16:
de:2e:05:22:de:3a:75:7b:a4:c9:3e:0a:12:0f:15:21:ec:df:
88:71:22:c7:d9:ed:06:1d:1d:3b:e2:f0:b2:5b:84:9f:d9:b6:
c0:b2:1f:f9:8a:c4:df:86:e1:1e:6b:8f:97:ad:bd:20:a6:c3:
65:f6:43:7e:09:87:b1:d2:65:d4:9b:0d:f8:ba:ba:90:2a:3f:
44:a6:23:80:62:a4:69:51:4c:c0:4a:c2:00:46:8d:b1:91:25:
a3:c6:3b:43:3a:7b:60:e9:0e:3c:4f:b7:70:d3:9d:e4:3c:64:
08:9c:bb:5a:31:6f:a9:55:1e:92:9b:62:3c:58:28:8d:d2:85:
a0:30:0f:1d:a2:4c:94:ec:f1:88:d1:84:3a:50:57:36:d7:a6:
98:87:bd:dc:ad:32:11:6a:2d:fc:da:0d:17:44:1b:b1:b5:49:
02:b1:e6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:48 2026 by rpki-client