Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: pRFHFsuEG5H6DB0cIZZsMAouv1JTl5U20DuFB1C8YR0=
Subject key identifier: 42:79:83:24:33:DD:53:DA:72:A9:46:EE:15:25:D6:08:44:A0:22:3A
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 019CAAC6846C3520FDF68B9C47D83F45D506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 0C85
Signing time: Sun 01 Mar 2026 19:01:02 +0000
Manifest this update: Sun 01 Mar 2026 19:01:02 +0000
Manifest next update: Mon 02 Mar 2026 19:01:02 +0000
Files and hashes: 1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=)
2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=)
3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=)
4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=)
5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: 0m7EfnTyZgFP4kEfjzsnuTkNsSaOXLVi29wYZn1tU5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:84:6c:35:20:fd:f6:8b:9c:47:d8:3f:45:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Mar 1 19:01:02 2026 GMT
Not After : Mar 2 19:01:02 2026 GMT
Subject: CN=4279832433dd53da72a946ee1525d60844a0223a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:e0:f3:9c:ff:68:63:7a:53:db:24:13:27:
8e:41:93:9e:02:15:02:b6:8a:fb:3c:47:cb:77:4d:
bf:05:e7:ec:bc:cc:a5:53:58:08:ec:30:90:d5:fc:
5d:86:9f:9a:9d:3e:66:6e:9e:85:5a:b1:18:f3:f9:
4b:de:68:f3:b1:c3:d7:1d:33:f8:6e:1c:65:c2:d7:
23:4c:55:8d:16:17:e0:02:1d:4b:1d:2e:78:74:0e:
9b:14:33:69:4b:e9:8b:fb:70:8d:a7:d9:3d:83:9b:
da:53:64:3f:03:dd:60:11:e7:92:44:15:d2:d0:13:
93:d4:a8:f3:fd:c5:f6:4b:25:90:df:88:a2:35:66:
e3:a5:f1:5c:33:89:2e:41:53:10:02:18:68:6b:52:
75:cb:3d:9a:12:52:4b:ee:7b:be:84:69:25:9c:35:
41:9f:c4:75:df:1e:2d:fc:9c:ff:17:cf:da:6c:d3:
b0:79:60:6b:1d:98:a6:0c:be:30:40:0f:1a:aa:eb:
71:5d:a1:6a:76:7c:ee:18:56:00:f7:a5:79:06:d6:
88:29:bd:6b:f4:66:54:df:2a:69:30:e1:60:da:d4:
6d:4e:58:12:76:5f:e6:88:30:07:ed:a2:cc:66:c6:
b0:1f:f4:41:58:be:2e:cc:c0:72:97:33:c3:52:b9:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:83:24:33:DD:53:DA:72:A9:46:EE:15:25:D6:08:44:A0:22:3A
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ac:19:ed:ba:3b:ad:d1:3e:4f:57:d8:ec:7d:4a:37:3e:b1:
1d:4a:4a:3c:d2:3d:39:fc:ed:49:2d:48:70:f3:28:a5:1c:a7:
68:2a:ec:63:30:39:10:1e:ad:63:f5:cd:3d:8c:10:48:fe:70:
13:cd:90:66:42:42:eb:a9:7a:b6:51:04:8e:4c:3b:07:46:ab:
ff:c2:79:53:ee:3d:d2:7f:f5:5f:9c:18:31:d4:1a:62:a5:af:
f0:bc:5f:5a:2f:b0:7f:31:bb:26:9c:a9:3a:06:44:7f:a7:2f:
6b:be:c0:46:ae:97:11:06:3a:7c:60:fd:8e:85:72:b0:6b:9d:
a0:da:fe:47:8b:54:c6:2e:24:e1:74:fa:09:e9:8d:e5:75:a4:
63:e4:3f:6b:7b:d7:35:0c:1e:b7:ea:85:10:d4:18:79:7c:9c:
f0:c3:6c:92:7a:f4:41:12:23:4d:83:03:a5:0e:99:44:b3:d2:
03:79:4e:12:ff:0b:5a:7d:60:3a:db:9c:2f:f5:c4:c8:bb:5c:
5b:6d:0f:c8:fb:21:81:8e:a6:84:69:e4:ea:ed:e4:24:bb:ee:
c8:24:c0:19:fa:51:b2:97:d9:c7:5d:5b:48:a9:b5:31:1d:80:
a0:4a:10:7e:22:c3:e3:67:be:09:c9:14:54:64:86:e8:66:da:
62:8d:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:13 2026 by rpki-client