Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: 016Gg0m9XVdaTqndJnfVS+TUTPDhz+6rboIsuH+FZmQ=
Subject key identifier: 53:2F:1A:3C:E7:0E:43:DC:B7:F6:61:F5:97:33:76:E7:69:41:67:27
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 019CABA24A8CED208D92D68EB4CEA072DE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 1556
Signing time: Sun 01 Mar 2026 23:01:05 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Mon 02 Mar 2026 23:01:05 +0000
Files and hashes: 1: fEi6HkF-C6surJLz6ozVnN3DCKA.roa (hash: Sz33Ft2tcLfICDqBq5ZnLaKyfti3irB30drgbFVQKSw=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: xICZmfLb+SU9+wQh41v898TytK9AQK5/6NvdtmWj6Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4a:8c:ed:20:8d:92:d6:8e:b4:ce:a0:72:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 2 23:01:05 2026 GMT
Subject: CN=532f1a3ce70e43dcb7f661f5973376e769416727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:61:29:f2:45:a4:7c:f2:52:13:41:e8:c4:
a7:43:56:a2:8f:c3:90:6c:4a:ba:ec:d6:5d:0e:c3:
79:f5:24:b2:06:47:84:6e:21:cd:35:c1:6e:07:3e:
35:d8:40:6d:92:29:0f:5c:c2:23:ad:50:f2:6e:c1:
32:7f:35:f0:87:50:6c:c2:c7:9f:a0:b7:92:bd:8b:
be:b0:1f:ce:22:f8:17:35:32:a3:8e:b7:4f:46:09:
53:b6:95:d1:15:c0:c5:5d:c0:73:5d:66:dc:05:e4:
70:73:19:6c:6b:83:71:91:83:11:8f:c7:ec:43:d9:
ad:85:de:9f:ba:ab:a9:f2:8c:64:27:64:f9:df:0c:
53:97:93:7f:ca:ea:f0:24:10:8b:a8:11:07:6d:86:
5f:72:54:d2:9c:f3:3f:a7:cf:b2:01:62:8a:b7:68:
1d:13:2b:1e:0f:35:c2:1c:85:60:eb:21:0a:a8:99:
8f:06:d7:89:d3:7e:97:33:ef:83:7f:b2:b6:8c:68:
94:3c:cc:38:50:20:6c:68:59:61:16:99:5a:1a:bf:
15:7d:db:bd:89:a4:97:0f:99:d7:0d:97:24:d3:cd:
9d:d2:56:9e:a2:55:66:5f:5e:23:54:f7:a0:44:88:
35:48:a5:4c:f6:83:b5:35:03:d4:98:25:47:4a:5b:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:1A:3C:E7:0E:43:DC:B7:F6:61:F5:97:33:76:E7:69:41:67:27
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:01:84:07:88:0d:56:f7:22:45:16:80:b8:ad:f7:0d:94:86:
02:75:75:ee:3c:2a:6c:d2:28:cb:0c:6f:e8:39:3f:e5:c7:80:
bd:c8:b4:5c:dd:e0:fd:b8:34:2f:76:47:2d:59:8c:d9:c1:ad:
8a:58:03:c4:9b:62:3f:e4:03:75:17:a7:84:e0:cf:57:82:52:
3d:5f:63:17:41:a0:75:c2:0c:80:42:4c:21:d1:2e:95:c2:68:
c9:1f:99:c7:01:18:89:73:f1:30:45:4b:6b:c2:0b:0e:cc:30:
67:4b:57:75:eb:54:8f:89:5c:23:78:1a:13:32:7e:58:43:d3:
f9:f8:25:ca:e3:1f:29:ce:aa:72:3d:86:3b:c7:15:32:2f:df:
c2:56:84:98:2c:53:0a:c3:d8:bb:3a:6d:84:5b:4a:c4:d2:53:
32:1c:0c:65:e8:2d:0d:6a:c0:b2:f9:40:16:21:d2:21:19:6e:
05:04:32:a6:47:33:61:85:85:97:21:71:8e:51:af:01:4b:f7:
5a:12:58:4d:16:69:51:17:be:ad:69:c1:3d:c2:34:23:38:8f:
b4:b8:fd:e9:be:fc:45:6a:a1:ab:f1:a1:71:71:31:2f:f0:62:
05:e7:b5:9d:b8:8e:eb:35:23:ae:40:66:9a:83:00:29:db:1d:
e2:64:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:32 2026 by rpki-client