Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: 2Hj79sHg7nd2E05nSLjrlYQOpBphkqwgAwNAqyrDJ/Q=
Subject key identifier: 5A:9F:C6:E6:89:22:F5:E2:9D:BD:CB:FE:2B:D7:9C:67:6E:D7:37:AC
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019CAB33ED4AC1696DE811221D1D8D1A6A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1616
Signing time: Sun 01 Mar 2026 21:00:32 +0000
Manifest this update: Sun 01 Mar 2026 21:00:32 +0000
Manifest next update: Mon 02 Mar 2026 21:00:32 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: kd+SsPdmWvDe2BGe0WQ5z606k29zwjHdVdI/ax7ZV/g=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ed:4a:c1:69:6d:e8:11:22:1d:1d:8d:1a:6a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Mar 1 21:00:32 2026 GMT
Not After : Mar 2 21:00:32 2026 GMT
Subject: CN=5a9fc6e68922f5e29dbdcbfe2bd79c676ed737ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:7c:30:3b:9c:5f:50:29:6c:e7:f7:0c:83:
c8:87:0c:8a:82:a3:98:9e:4a:01:55:35:5d:d0:f6:
88:8a:81:de:8c:f7:6c:63:82:d2:5f:24:48:2d:86:
b9:2a:ea:87:d2:91:57:e0:77:f4:0f:e1:00:ca:16:
fc:89:af:07:a7:59:c5:b3:84:76:00:6e:07:c9:3c:
7c:6f:e7:a9:81:87:15:cc:73:a6:38:83:53:42:18:
ea:bb:84:81:b6:4b:de:6a:f3:18:f4:7b:27:50:97:
09:71:dd:9c:2c:82:f7:6c:91:36:19:74:2e:4a:50:
ab:e1:26:48:0e:76:be:7a:e3:81:c5:3c:3a:69:8a:
29:49:8f:89:bc:e5:fc:08:b0:0e:5d:18:ea:a9:8e:
c7:c0:ba:d5:c2:39:9f:68:ec:e9:b0:a3:1c:ab:36:
9d:94:06:f2:83:98:30:92:f2:bf:4a:f9:b2:b6:24:
8a:bb:8f:be:9f:09:e2:34:82:f7:37:96:4d:22:90:
f9:d1:64:fd:d3:38:24:45:bf:83:6d:0d:78:ec:87:
9d:50:e2:78:20:00:b4:3e:b6:74:9e:97:37:69:d2:
f8:0e:a7:e2:22:ad:cf:cb:71:fc:74:52:c8:23:6e:
7d:b9:94:4e:29:5c:70:f3:4c:40:34:48:c9:39:6d:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9F:C6:E6:89:22:F5:E2:9D:BD:CB:FE:2B:D7:9C:67:6E:D7:37:AC
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6a:4e:7b:db:6b:8b:d4:ed:5f:8c:64:f0:66:84:c8:78:3a:
ba:3a:1f:6a:6e:9f:20:1f:51:2d:fa:70:6b:76:5d:95:8f:6b:
0f:98:5d:79:31:ce:73:6c:dc:08:4d:7c:63:5a:6b:80:f1:b7:
18:b4:7a:c4:6d:0b:7d:c7:11:8d:5a:0b:53:0b:c4:76:54:ec:
02:57:5e:5a:9b:7d:2e:1f:91:02:a0:6f:17:86:a6:20:05:a3:
8c:98:74:81:fc:0d:75:2b:6c:b9:be:5b:86:26:d7:22:35:e7:
ff:16:e1:82:d7:59:f2:d3:e8:11:08:ff:fb:36:d4:91:f0:49:
2a:a8:fe:11:12:7f:80:a9:d0:e3:89:d2:22:60:92:3b:14:e1:
41:46:02:cb:f5:f1:a2:8a:9a:04:58:6a:d6:e6:aa:c1:57:36:
1a:85:66:34:de:4d:d9:09:da:0c:3d:b5:fe:1f:57:53:4e:8d:
a8:98:e0:6a:11:42:f0:d5:67:6e:be:cf:b2:8b:54:f2:eb:ea:
76:ac:09:98:61:54:b3:02:35:d9:db:3e:dd:d8:b1:31:40:d7:
f9:74:4b:b3:9c:36:1c:3e:38:74:11:4b:e4:04:27:0e:a0:3f:
2a:6b:dd:58:fd:c3:26:fc:b9:07:0d:37:a2:ef:6c:d6:45:2b:
ce:3c:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:38 2026 by rpki-client