Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: hgyAtVSLOKM8GgTfJ9dn7njxnox06ekNdvy2rzK3PWY=
Subject key identifier: 09:C8:F8:80:F0:F5:96:F8:CD:29:BE:5F:0B:FA:9C:64:AE:C8:5B:4A
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 019CAAFCF5394BD4D45C598D00F685585E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 070F
Signing time: Sun 01 Mar 2026 20:00:30 +0000
Manifest this update: Sun 01 Mar 2026 20:00:30 +0000
Manifest next update: Mon 02 Mar 2026 20:00:30 +0000
Files and hashes: 1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: LJjz49KnZq6EmMMmdf2RDAzggmc/DAJf1//9JLNzpOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f5:39:4b:d4:d4:5c:59:8d:00:f6:85:58:5e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Mar 1 20:00:30 2026 GMT
Not After : Mar 2 20:00:30 2026 GMT
Subject: CN=09c8f880f0f596f8cd29be5f0bfa9c64aec85b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:de:df:7e:a0:66:59:f6:80:d2:a8:02:0f:
30:41:db:04:8a:32:38:8e:cd:4d:1e:55:bb:85:c2:
7a:0f:d7:d8:62:4b:2f:1b:f2:a6:15:ee:ad:84:6c:
31:4f:7b:88:36:c4:68:16:e6:a2:06:7e:c3:fe:71:
6b:76:e4:f1:f4:1f:22:86:48:96:65:ec:64:c9:cf:
44:5b:db:df:09:0f:c5:e6:f2:e7:3e:24:7f:bf:00:
fe:9a:15:a4:4d:39:e1:e7:62:ce:ba:90:f2:3c:b6:
0a:e6:19:b4:59:ed:1b:e7:11:c5:ea:bd:dd:42:5b:
c9:35:30:1c:fb:e4:45:00:35:88:1b:90:1a:0a:4e:
31:fc:3d:1a:50:b5:0b:5f:c5:d5:7f:f8:d5:d4:99:
95:16:81:af:be:f8:1a:43:63:c9:ab:1c:22:b2:5d:
13:55:c6:aa:42:b9:32:ed:c7:5a:5c:25:3a:16:21:
f6:fe:e4:b6:83:bd:19:e3:bf:c4:b3:14:d9:71:69:
1f:0d:01:75:30:2d:b2:09:21:8c:8c:7b:15:83:7a:
67:1d:fe:85:94:e3:1b:b3:35:f3:65:2f:62:34:aa:
7a:d5:0c:e4:3c:49:c2:e7:d9:85:10:21:20:6f:c6:
a7:26:ef:70:92:2c:d7:a9:f6:3c:dc:58:87:f9:00:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:F8:80:F0:F5:96:F8:CD:29:BE:5F:0B:FA:9C:64:AE:C8:5B:4A
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fc:64:79:36:0e:13:b7:e0:59:fd:f8:d4:e3:2d:a9:2f:fa:
12:90:65:ec:67:3d:96:d8:d6:88:75:3a:04:26:d6:0a:3f:81:
ab:f3:cc:78:f7:28:fb:fe:ee:4a:28:9f:15:27:f0:7d:41:68:
e5:d8:ec:55:e7:b1:48:cc:35:4e:79:50:76:24:6c:eb:a9:57:
c7:8e:04:02:1a:13:c1:b7:64:75:ba:e8:aa:f5:ed:e9:ef:f2:
a5:48:58:7f:7b:fc:a2:92:bd:12:8b:8d:b1:39:c7:c5:fd:ff:
c8:a0:d6:bd:0d:f3:4c:fe:55:ee:65:dd:a6:ae:04:e2:e0:3a:
c6:6e:8d:c7:e8:e0:b5:92:1d:db:d9:c8:c1:2d:35:fb:a4:05:
65:eb:70:a9:71:af:c3:3a:5f:12:50:54:6d:d3:f7:76:c6:74:
46:4f:1a:80:26:1f:28:29:79:23:fd:42:06:9c:ff:15:aa:06:
e8:0a:10:28:f2:9e:2c:4d:28:a4:a0:11:b8:99:d5:e8:7f:bd:
18:7f:b8:a9:f5:4d:6f:4c:bf:fb:8b:31:58:46:ad:21:62:f5:
63:bb:6b:d2:f6:d8:de:46:7a:db:8d:e2:8d:9b:3f:ba:fe:8c:
7b:90:93:29:64:4e:6d:ae:f9:49:7c:24:d4:c2:d7:e0:c5:4c:
d3:63:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:33 2026 by rpki-client