Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: 3OTiGMoFcF8mVgtp726g5OUJ/CzLCh+pKYXKimvmVW8=
Subject key identifier: 6F:9C:4B:18:AE:21:E8:AC:D5:4D:CD:6D:6A:70:BC:42:82:0A:F8:11
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 019CAA21B398707296F18B4D4DBF88BDB2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 13D0
Signing time: Sun 01 Mar 2026 16:01:01 +0000
Manifest this update: Sun 01 Mar 2026 16:01:01 +0000
Manifest next update: Mon 02 Mar 2026 16:01:01 +0000
Files and hashes: 1: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
2: ja4HyiBI4KYvnEsTozQU8Mp2lVA.roa (hash: Lay79psaoloZk98TsyG6C83RJH7tMee/A2Y6ldt4Zmk=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: hHxPxfLFUNnGxlm8Rp8tuBP9OzegaXqiv74GNN+vV4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:b3:98:70:72:96:f1:8b:4d:4d:bf:88:bd:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Mar 1 16:01:01 2026 GMT
Not After : Mar 2 16:01:01 2026 GMT
Subject: CN=6f9c4b18ae21e8acd54dcd6d6a70bc42820af811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:92:8d:6a:99:65:63:13:fe:30:fc:71:cd:
9c:bb:6c:1f:92:ed:a5:fc:42:7d:49:c0:c7:8b:ce:
fa:3b:44:a9:9a:af:93:96:f4:14:4f:96:19:a3:ad:
a2:5e:72:0b:42:2f:5d:dd:04:cb:2a:ee:a2:e8:86:
8c:5c:ad:07:2e:cf:59:8f:23:e4:71:8c:7a:d1:af:
49:06:5d:4e:49:d7:cb:17:89:9c:80:c4:ba:ab:bd:
b2:43:02:af:e1:21:e4:19:71:51:76:d5:10:7a:1e:
34:e4:f8:b1:70:67:12:c9:d9:fd:d5:46:66:13:e1:
af:ba:5d:46:72:7b:91:d3:72:14:15:9b:b4:d1:26:
c3:de:42:69:b8:b5:a0:c2:67:76:90:6f:29:ad:10:
87:b7:bb:ac:9e:0e:22:ef:af:d3:24:f3:c8:f2:81:
27:a6:7c:33:93:42:0f:4b:c9:77:f1:f6:eb:05:77:
27:20:3a:5a:85:d3:06:a1:bf:55:8b:32:ad:9d:8b:
a7:6c:8e:96:be:72:af:46:38:c7:24:36:af:88:25:
e0:14:ff:90:ff:b7:90:df:62:84:d0:db:84:1b:96:
9f:40:0a:23:04:55:4f:34:3b:13:ab:59:ff:c7:38:
c2:2f:27:c6:df:29:9d:a1:82:7a:79:ac:61:df:cd:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:4B:18:AE:21:E8:AC:D5:4D:CD:6D:6A:70:BC:42:82:0A:F8:11
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a3:26:d6:48:25:a7:ec:0a:15:db:1c:34:e9:24:d9:d9:75:
8f:f6:4c:4b:6f:11:12:81:da:88:82:f3:2b:2c:24:92:14:8b:
05:88:63:88:49:00:52:8b:42:01:15:e4:ff:0e:f3:b7:1e:9f:
c7:67:12:0d:8f:a8:8f:06:6e:41:cc:1d:f2:ab:30:e1:e4:99:
3f:94:c7:77:f4:64:ce:8a:93:54:4a:d3:b7:66:c9:e7:61:19:
28:79:83:0a:c4:cd:23:99:23:92:67:d4:2f:d7:a2:00:e8:64:
c0:ad:be:3b:7d:e9:8d:01:f8:23:a7:48:0a:32:5c:4b:a3:3a:
bc:8c:01:d7:7a:63:93:c8:bc:52:cf:2f:70:ba:93:a4:31:53:
55:89:12:e8:12:37:98:cf:fd:41:1d:b0:10:8a:f2:da:1d:51:
a3:54:29:72:2a:33:c0:78:e3:03:c5:2c:50:c9:42:0c:0b:6a:
b4:9c:76:2c:fd:a4:85:e2:9a:c9:1c:45:a4:31:18:8b:22:40:
ee:da:37:29:cf:27:77:3d:cd:91:ae:73:d6:a9:5d:97:1d:d7:
f8:b3:f9:b8:ed:ea:2a:ed:b5:cb:5b:86:d7:11:7c:fa:b0:75:
5c:28:fd:d6:a8:de:10:96:0f:7e:6d:e7:2e:78:73:14:d2:3c:
91:23:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:41 2026 by rpki-client