Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: MjbaAsMWNOu3FaOEQ3HUwBVVHqedObHo8lf3HcgG3pQ=
Subject key identifier: 53:8B:5A:F6:02:21:BE:B3:4C:B9:C3:10:72:44:A3:8D:0E:53:AB:FC
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 019CACB54FB54890F470E89D526F977454C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:29 +0000
Manifest this update: Mon 02 Mar 2026 04:01:29 +0000
Manifest next update: Tue 03 Mar 2026 04:01:29 +0000
Files and hashes: 1: 1b_krTT_K4qK4dHHlDSdwvTB_Ck.roa (hash: WyAqk00HCYlIWNZ7WJdQWAHo5r3VFoh2daJ+Uc2V4bY=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: iuhPdpPbwxQBlDo1hNKAYjajdpNaezUSDgwxPA05fXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4f:b5:48:90:f4:70:e8:9d:52:6f:97:74:54:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Mar 2 04:01:29 2026 GMT
Not After : Mar 3 04:01:29 2026 GMT
Subject: CN=538b5af60221beb34cb9c3107244a38d0e53abfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:c6:a1:cd:ce:cd:d4:09:b1:24:9e:5a:58:
0d:36:ce:aa:94:a3:b9:b1:6d:dd:e7:67:87:51:12:
6e:0c:06:4f:dc:ae:27:5d:24:89:32:2d:bf:a9:ae:
15:90:5c:18:4b:31:1a:ac:94:f4:ac:17:ed:39:e6:
3b:a2:25:20:f6:ae:e6:47:78:15:6e:db:26:8d:d5:
7d:4c:13:fe:8a:50:56:7c:b1:62:f5:19:f2:a7:79:
da:72:8a:bd:3f:9d:c3:3a:aa:f1:5f:37:d1:42:72:
ef:5b:7c:6b:4c:34:dd:cc:19:42:4f:1c:3e:2b:3b:
00:d4:0b:3d:d5:28:94:3a:86:9d:c2:c0:29:30:6f:
a1:01:f3:7b:19:82:05:93:bf:bc:cd:5c:2c:67:8c:
a3:7d:e8:81:3c:c7:d9:f6:a0:c4:ad:7a:1c:b3:c7:
92:fa:49:9c:90:75:37:c8:a3:0f:33:3c:d0:e0:0a:
81:a3:9d:40:7c:f9:5e:06:ee:79:ee:0b:ab:d4:c7:
ea:58:49:0d:7f:de:0b:0a:29:26:18:fc:2a:8b:6a:
85:c4:79:f1:67:ee:72:83:e2:a2:d4:5f:dd:73:b4:
e2:15:ba:b4:54:b7:c6:26:75:23:95:4c:e8:71:d2:
39:46:3c:32:f1:c4:c7:f5:fd:bd:6f:57:46:82:ca:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8B:5A:F6:02:21:BE:B3:4C:B9:C3:10:72:44:A3:8D:0E:53:AB:FC
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:17:44:10:01:65:9a:9e:55:08:23:d5:58:18:ea:90:23:a1:
27:2f:81:f9:07:b9:0d:fd:95:57:da:e4:d8:89:b4:77:90:12:
44:bb:e8:db:c9:6e:0e:c5:19:5c:16:e8:67:b8:56:e8:3d:6c:
fa:6a:7d:79:78:e3:13:40:c4:e3:11:92:8e:60:33:70:41:54:
34:99:c4:62:10:f8:55:cc:b8:de:f0:24:a3:7e:e4:2e:a9:e9:
c0:b9:bc:8e:5b:52:2f:9d:12:26:db:b9:2e:94:56:3d:8b:38:
0d:c5:b6:47:2c:29:45:7a:57:d2:f5:73:4a:b7:66:d8:1e:83:
c6:18:db:ce:e5:7a:f4:46:39:97:d7:b0:c0:d4:ea:46:c1:4e:
a7:91:8f:33:e9:14:79:4e:0d:2b:5a:26:dc:d6:87:f9:e5:bd:
26:d2:2b:d0:b7:bb:06:68:f5:b2:a9:d8:36:bb:8e:23:b6:dd:
d6:e7:9d:e2:86:14:c5:5c:b2:cb:2c:0e:f3:06:4f:24:06:6d:
c8:42:f7:6d:43:0e:bc:91:12:f3:4f:7a:00:2d:53:49:99:a1:
54:06:e9:df:ca:1a:82:a1:83:5a:4a:54:7f:5e:69:49:92:95:
d6:9b:ae:3f:93:19:2e:5a:22:68:09:1d:8c:33:ac:2d:0f:67:
fa:b8:ee:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:31 2026 by rpki-client