Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: fTbjjFkSpNwaQPCESd0Pv/UuCWmYU1k4p3LtFRNeUTw=
Subject key identifier: 61:C0:9B:9E:38:C3:60:4E:A7:2D:F7:61:65:14:80:38:98:0F:E2:BA
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 019CA9EACAE050996D72E8A0C372D3C99A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 0213
Signing time: Sun 01 Mar 2026 15:01:02 +0000
Manifest this update: Sun 01 Mar 2026 15:01:02 +0000
Manifest next update: Mon 02 Mar 2026 15:01:02 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: H1SRF2fYzIbMFd8nUMYt5wQPZWOw6xBIXenD+Iv0sOo=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:ca:e0:50:99:6d:72:e8:a0:c3:72:d3:c9:9a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Mar 1 15:01:02 2026 GMT
Not After : Mar 2 15:01:02 2026 GMT
Subject: CN=61c09b9e38c3604ea72df76165148038980fe2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:c8:44:95:0d:2a:e5:14:17:17:1d:c0:67:
24:a4:48:bd:03:63:35:56:37:e5:66:ed:40:a9:76:
1c:c4:7c:aa:ff:a2:21:e8:53:24:e5:b4:62:32:5b:
2e:dd:31:f0:dc:fa:ed:2c:37:ed:df:5b:85:9a:07:
da:5b:93:c0:a1:0f:5e:a7:84:56:e6:fd:89:6f:e5:
65:8c:6f:ba:cf:4f:45:0e:1f:9e:02:f6:68:b7:d4:
36:a0:68:24:d8:b6:a9:06:e6:4c:50:7e:76:82:75:
ac:20:a5:24:8c:74:b3:3c:a6:dc:a5:fa:7d:aa:ee:
62:c8:57:95:74:9e:4a:a4:45:db:c4:96:a8:fa:7d:
a6:d9:ca:96:10:41:fb:e6:c8:56:c9:23:cd:77:eb:
2f:b9:d5:6c:d0:31:30:39:0b:d8:72:93:42:9b:49:
01:5e:25:03:51:03:1a:78:a8:01:2c:35:a9:a6:2d:
b8:40:b2:13:0d:88:ee:f2:55:bb:1c:19:5a:ae:ff:
67:1a:9f:48:7e:0e:ff:b1:95:b5:d3:be:b2:ff:90:
d5:be:be:42:79:38:00:98:bf:a3:7e:0b:05:42:a1:
3f:4e:76:89:84:95:61:6d:17:24:17:41:ec:4e:73:
5b:5c:50:11:13:1d:99:1d:54:a2:f9:8e:95:21:93:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C0:9B:9E:38:C3:60:4E:A7:2D:F7:61:65:14:80:38:98:0F:E2:BA
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:30:06:76:d7:56:6f:7a:6a:b5:ac:82:52:5e:87:66:15:90:
ba:c4:a1:fd:f2:71:1a:69:bd:da:92:15:71:ad:43:5c:b0:50:
ea:f8:71:2a:ff:d1:ad:d3:eb:bc:8f:05:0d:72:d9:87:1d:75:
32:bd:c7:11:b5:13:17:71:14:12:f0:6e:86:c8:85:c3:e0:5f:
6d:24:64:6b:9a:17:7b:25:17:ed:4f:4e:36:75:a4:de:d1:b4:
bb:fd:0d:f3:67:3f:f3:13:cc:af:bf:c6:26:39:d8:a3:77:92:
86:41:a5:f9:70:d0:86:2a:6c:e2:ea:1e:74:ac:9b:6f:68:44:
83:e5:cc:5b:bb:26:ca:73:4f:99:22:97:c1:5b:3b:92:b1:39:
13:8a:74:2f:08:2d:79:0e:20:49:61:e3:6f:f6:16:5e:13:03:
4e:dc:01:31:83:cc:45:47:94:42:ec:6b:27:50:a3:9a:7b:e4:
40:ed:98:31:1e:b8:eb:03:fd:d9:11:d2:3a:3c:0f:a0:86:a8:
25:4a:46:4a:bf:99:b0:6a:99:9f:19:61:43:d4:92:17:78:01:
60:bc:4c:6a:27:78:46:ae:6b:ca:d4:74:75:3f:6c:a3:ed:1e:
1f:30:6e:35:bd:ca:04:8e:5c:5e:0c:b2:24:4a:6f:1f:9e:98:
7d:18:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:30 2026 by rpki-client