Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: dREeE3Eq19fE6mvflokKnvJTjweLfXthJO+2QlJ/u/8=
Subject key identifier: 86:4D:AC:3E:D0:89:02:28:E5:67:0B:36:88:8E:DE:E6:08:73:7D:46
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 019CAB6B570E3496ECAD67C2026226D2AFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 1324
Signing time: Sun 01 Mar 2026 22:01:04 +0000
Manifest this update: Sun 01 Mar 2026 22:01:04 +0000
Manifest next update: Mon 02 Mar 2026 22:01:04 +0000
Files and hashes: 1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: 5kIAt7QHjXepT6nnnb7naVpTZj0DdeGsVoOgFC0UwYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:57:0e:34:96:ec:ad:67:c2:02:62:26:d2:af:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Mar 1 22:01:04 2026 GMT
Not After : Mar 2 22:01:04 2026 GMT
Subject: CN=864dac3ed0890228e5670b36888edee608737d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:0a:9e:c4:d3:9f:fa:71:05:50:7c:da:7e:
dc:2a:46:d0:32:2a:c7:2a:c1:10:01:42:81:85:35:
16:f9:77:f3:25:5b:e5:68:68:68:90:51:d7:86:4e:
24:2d:e7:13:5d:17:17:d4:00:4f:39:d6:f6:37:74:
6e:f9:ca:97:03:71:9c:59:d3:03:0c:bb:17:34:3d:
61:03:03:9e:8b:f0:d0:25:21:0c:e2:c4:aa:81:03:
00:2c:05:73:bb:e1:34:bc:91:e2:06:0b:d4:96:b5:
b5:a4:e8:0e:bb:81:55:30:c6:ac:7b:e6:59:77:05:
dc:a9:f1:c6:ea:7f:f0:4d:db:f4:16:06:45:62:d7:
9d:7e:ca:fb:d2:47:cc:f0:72:4d:82:da:6c:b1:dc:
bb:d2:b6:0b:ba:8c:ba:63:e5:2b:8f:dc:45:df:1c:
4e:27:aa:5b:ba:2d:20:26:aa:de:85:84:ce:c1:37:
18:6b:da:6c:94:c1:36:f9:74:c6:9f:93:ab:05:1b:
00:fe:ef:53:0b:1b:c1:a1:05:72:81:fd:3d:d5:4c:
ed:c3:5b:08:34:e9:03:05:d4:cb:2e:d1:34:a9:3f:
9a:a5:60:4f:81:80:a7:3d:f4:d5:4c:d1:6a:ae:a0:
99:20:be:85:9c:aa:cd:3a:08:00:b3:cb:5e:a3:7c:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4D:AC:3E:D0:89:02:28:E5:67:0B:36:88:8E:DE:E6:08:73:7D:46
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a6:0e:39:78:fc:40:04:e9:14:90:87:be:d2:31:40:3c:b9:
31:7a:4d:c6:8a:ac:b3:67:94:0a:0b:7c:b1:06:1c:f1:2b:24:
6e:4f:1d:67:26:55:71:08:4b:5b:8b:69:75:1d:5c:83:16:63:
5f:c3:56:24:e2:e1:aa:ed:7d:4c:8e:14:39:23:74:cd:71:6c:
73:90:47:ac:3e:c7:be:5e:a1:ef:60:2b:95:8f:0d:ca:b7:0f:
c4:b3:cd:72:88:36:d1:89:b0:44:aa:0c:43:63:66:05:80:5a:
dc:2d:fb:64:d1:fa:02:65:82:99:a2:68:20:31:e8:08:8a:c3:
d7:65:66:0c:ba:4f:8b:f3:b2:88:c1:fa:86:a7:50:ef:92:67:
c9:8c:33:19:e4:65:9e:a3:b0:2c:0d:6c:b1:72:f5:3f:3b:1f:
f2:69:4b:a7:ff:43:46:0d:d1:3a:37:2b:46:ff:7c:37:8d:59:
f5:28:33:58:7a:da:4c:6e:ff:d2:de:d7:7e:6d:f0:4a:81:99:
95:a2:77:e8:86:05:6c:67:4b:eb:24:4e:1c:48:39:58:17:13:
e8:2d:72:ab:b7:d9:d9:03:96:4e:8e:e2:d4:e9:0b:91:a2:b3:
c4:96:3a:e0:9a:da:33:49:76:06:cc:42:af:66:5b:e6:75:8d:
32:e5:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:13 2026 by rpki-client