Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: /6ou4zz3Z8Xl8vh+K5sztei6IWs8MW7K0Kg7Qxazsns=
Subject key identifier: 6A:D9:B0:9F:52:65:3D:EC:89:43:93:04:58:83:CA:74:28:AA:5A:1E
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019CAC7E12667DE565AEBF254969B20D1DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 03:01:09 +0000
Manifest this update: Mon 02 Mar 2026 03:01:09 +0000
Manifest next update: Tue 03 Mar 2026 03:01:09 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: sHgYCNVfmQqej7bNmI9cBW5xGRa30JSaZPqWSmi22hw=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:12:66:7d:e5:65:ae:bf:25:49:69:b2:0d:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Mar 2 03:01:09 2026 GMT
Not After : Mar 3 03:01:09 2026 GMT
Subject: CN=6ad9b09f52653dec894393045883ca7428aa5a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:80:6c:de:47:ab:87:64:1e:ce:c7:d7:18:
ba:0b:4e:78:91:81:51:d8:a3:0f:63:72:a2:5a:bf:
0e:fb:d6:55:50:2f:17:9d:d4:f2:d1:fb:5d:e3:0d:
e7:d1:48:37:b1:f7:b1:54:f0:f5:4f:36:d5:39:33:
1d:53:94:67:aa:6c:3d:2c:f6:46:d6:47:c2:e9:c4:
3e:ef:0e:86:db:aa:e1:87:99:8b:58:cf:a0:18:51:
39:fe:52:37:af:70:5f:4d:67:bb:8a:2c:88:a6:1a:
e5:c0:23:2c:51:4d:7b:d4:d3:bc:c3:4e:5a:19:d6:
80:2c:d9:d0:b0:68:b3:1b:99:df:9b:e5:3d:f9:a0:
0e:e7:f4:10:fc:43:ef:c8:1b:bd:c7:bb:da:d3:fc:
d2:24:ef:38:e8:28:b9:7c:f2:5c:80:6d:88:58:21:
c5:00:6b:51:48:2a:6d:1c:0d:7f:b2:18:b2:00:a4:
c1:a3:50:52:7f:ef:d9:03:54:81:6e:f5:17:47:25:
3a:e8:2b:b4:4e:9c:a7:86:d5:b8:eb:bd:99:fc:6a:
f9:46:fb:9f:1a:04:2f:41:00:84:b0:44:46:22:f2:
52:86:fe:cb:9b:cf:10:8c:d5:f7:0c:c2:85:0b:40:
f3:d1:fd:4c:44:45:4a:25:ad:22:0f:ef:e1:db:92:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:B0:9F:52:65:3D:EC:89:43:93:04:58:83:CA:74:28:AA:5A:1E
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:ed:60:62:5d:26:ae:98:1f:64:f1:ab:b3:7f:f8:ed:37:
e6:61:6e:64:90:04:50:77:af:c5:0f:aa:e7:9e:41:be:0b:22:
43:72:cb:f6:cc:66:20:0b:ec:9a:95:a0:e2:7b:77:73:28:46:
e9:20:9a:6c:05:34:1f:0c:bb:b6:7a:8e:1c:44:51:28:e9:93:
5d:03:16:03:8f:f5:21:cc:28:10:83:93:d5:0e:55:08:62:e6:
b5:da:da:f8:5c:11:00:1b:ba:52:5f:ec:ed:d8:46:47:bf:9e:
a1:3f:5a:3b:61:b7:d4:aa:9f:00:74:01:6d:fe:ea:db:ba:7f:
cf:f7:c0:69:9d:a2:58:83:5e:84:ce:15:e7:a9:65:c0:4b:42:
c6:20:6d:14:6f:4d:78:d3:c6:91:09:61:df:7a:06:94:97:0e:
8e:6c:55:5a:24:5d:16:4c:bd:b5:98:a4:24:4d:a0:f5:0d:48:
8e:1e:09:3c:32:ae:20:48:04:96:74:dd:52:2c:98:92:9d:e1:
be:64:3f:3c:01:bb:17:e1:5e:e7:3c:8f:7c:47:07:c6:9e:48:
87:2f:90:5d:a5:3d:26:f7:05:5d:8a:f9:a0:22:ba:48:7f:b0:
94:1b:d5:c7:70:3c:b2:37:62:27:ea:db:a1:df:b7:c3:d5:5d:
9a:6c:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:35 2026 by rpki-client