Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: PkKeFW5O7QhqFjF7WSVENAreeRyUSvQwjChEawdmbFA=
Subject key identifier: 9D:85:70:DB:2A:9A:34:20:5F:D0:38:84:8F:50:8B:D8:F4:97:18:22
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 019CACB57C59CBE747EC2C2A9037F57BE832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 17E8
Signing time: Mon 02 Mar 2026 04:01:40 +0000
Manifest this update: Mon 02 Mar 2026 04:01:40 +0000
Manifest next update: Tue 03 Mar 2026 04:01:40 +0000
Files and hashes: 1: HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa (hash: nQkhhNw6S8PZEQHevPsGMLpoMsMwEk7juRVeNkbr0JM=)
2: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: JbSErPgKM/SQGx3z1+TnAggeieSZnk3U8oEXkBH0a0I=)
3: wA3yzq_z75jJrcxF21_yaXTLA1E.roa (hash: iBqEBSf11enOfh3VlmmIO8pdDcGFw1PdUgNRwZ2N9r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:7c:59:cb:e7:47:ec:2c:2a:90:37:f5:7b:e8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Mar 2 04:01:40 2026 GMT
Not After : Mar 3 04:01:40 2026 GMT
Subject: CN=9d8570db2a9a34205fd038848f508bd8f4971822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:d6:b6:04:74:d1:9c:db:43:72:cc:3a:6e:
f3:d5:64:00:e1:14:ff:06:ed:cf:cc:8d:c3:d1:d2:
de:ad:85:31:37:08:b8:58:e8:82:f9:65:8b:fd:ec:
ee:d4:8e:f1:9d:ed:74:32:48:70:49:31:1f:17:19:
f6:dc:2f:7b:82:b5:74:13:d1:03:33:b9:44:1e:f4:
d7:54:c6:33:e8:9d:14:46:74:87:3f:45:ee:4c:5e:
69:b0:cb:39:5d:9f:07:e2:21:f1:e8:66:e0:61:89:
23:17:37:af:86:91:85:04:05:ff:1e:f2:56:38:b4:
d8:6f:ca:8f:ac:18:d9:0e:67:9f:ca:bb:a2:78:11:
4d:50:16:04:03:95:37:a8:6a:df:09:11:50:75:15:
8c:fe:98:11:22:fd:d3:1d:d4:4f:21:ca:2a:af:f9:
53:a2:6a:f2:31:71:8c:19:62:9f:77:b8:6f:4d:34:
c0:18:f6:26:9f:a0:4d:30:67:a9:9b:1c:01:c4:a0:
c2:f3:83:67:ec:2f:0c:fd:2e:19:c9:0a:1a:e8:c8:
c9:0e:fd:00:31:9e:67:7b:15:87:d2:57:b7:bf:8e:
74:e8:32:51:0a:52:e6:69:ec:f4:fa:82:5d:da:a3:
d9:f2:4a:e0:3e:4a:eb:81:02:24:e4:4a:5b:3a:8d:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:85:70:DB:2A:9A:34:20:5F:D0:38:84:8F:50:8B:D8:F4:97:18:22
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dc:e8:20:74:d6:b7:b5:ae:ee:5e:90:01:c1:53:b9:5b:3a:
50:14:56:5c:4d:2d:f0:df:f0:70:0d:ad:45:6e:44:6f:55:96:
4e:59:7a:0a:1f:30:2d:11:67:02:cd:1b:23:16:c6:c5:c8:47:
75:c7:33:8f:6e:37:c6:93:56:66:e4:3a:9d:de:7e:e6:92:f6:
ba:84:96:60:3d:eb:a5:b7:c6:8b:5b:6d:34:77:a3:9e:6b:20:
c0:a8:dd:07:8e:52:0c:0e:16:9e:bd:b5:32:fc:9d:68:b5:e0:
7e:1b:b3:70:18:fa:4c:ca:72:5a:f7:09:9b:61:3a:c6:2f:42:
2e:20:39:56:51:59:2e:cc:73:0b:f7:74:6e:d2:e4:2a:fa:42:
4c:7b:99:a3:f3:c4:61:be:ef:c2:2f:ae:d2:2a:9e:aa:e1:82:
e2:de:82:b9:09:ee:bc:98:95:ac:2d:4c:ed:90:61:23:35:48:
2c:7f:12:c2:5f:1b:e3:ed:cb:9c:23:77:7d:25:fc:b6:56:01:
d3:0e:ba:bb:16:f1:e5:cf:9d:c8:da:2f:d4:7b:eb:53:5a:8a:
9a:12:dc:2b:cf:ad:19:f8:94:c5:26:93:09:d3:11:70:f4:bc:
97:39:22:6e:d3:2f:3d:96:9e:46:19:da:40:c4:e1:61:af:97:
d2:f0:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:11 2026 by rpki-client