Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: QoiAz9WrlOrvQhfifRSKEuNi08TsAl+ihWiFB+/jyu0=
Subject key identifier: 71:C8:A9:7A:D3:B3:23:37:4F:7B:8D:8F:EC:B0:6F:FE:E3:1C:9A:66
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 019CAC0FF58D9676B416B57A443EC6FB830A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 070F
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: oSHd3A3JyGUimiBT2722sFky4rS+VOHoVoyagFs2yZ8=)
2: fbgFYZOUj66PVAQpKUGgeHpzr24.roa (hash: SB3DJT334kxLqXYnE2DumDnn0I2NFlsBAqoFvdcBUgQ=)
3: uvHSWAI-yPchOFqjOVqKQlz8aVo.roa (hash: cnbvGF8AmLyRmJzV1rqVqz51KAWpBPpAaC9YvKK6e5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f5:8d:96:76:b4:16:b5:7a:44:3e:c6:fb:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=71c8a97ad3b323374f7b8d8fecb06ffee31c9a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:16:ef:9e:9a:39:34:9f:61:bd:e3:6a:31:72:
37:2d:c0:94:b9:83:8e:d8:67:b6:b5:a2:55:6c:07:
d4:de:ac:db:5d:89:31:1a:20:9c:90:85:61:6e:a1:
4f:f6:c8:50:95:63:8f:0c:1e:1b:2f:97:11:1f:7b:
4e:e9:d2:e2:d7:74:d7:1a:e1:dc:6b:6e:1f:05:48:
25:39:98:89:04:08:36:e9:2e:55:06:6c:c5:7c:38:
eb:fb:28:ce:ce:c9:ae:2c:63:19:d3:fd:9f:6d:39:
bb:8c:e6:90:7d:d3:cb:90:ec:c6:15:5e:62:89:40:
da:07:40:b5:c2:e9:95:7f:86:94:2f:45:6c:eb:4e:
94:ed:38:07:63:24:59:2c:a4:f0:ec:1e:7b:71:37:
a8:95:bb:bd:4d:89:50:53:22:4a:c5:87:59:2e:4b:
a2:fa:93:c6:c4:d8:2a:c2:27:2d:02:3f:4d:f4:ad:
9b:46:10:59:6b:d0:e9:d1:1f:97:6f:83:ac:d1:60:
03:cf:f7:2c:77:74:74:34:1f:80:a2:5a:ef:88:c9:
33:7c:91:40:ca:06:8d:07:3c:00:e1:51:15:76:f6:
5f:16:7b:86:0e:82:10:5c:ab:71:d4:ce:f4:39:63:
f8:89:32:97:ca:86:5c:ec:eb:41:c2:3b:99:91:a6:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:A9:7A:D3:B3:23:37:4F:7B:8D:8F:EC:B0:6F:FE:E3:1C:9A:66
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3d:fb:03:7d:5b:15:a7:17:cb:49:9f:dc:12:35:0d:4d:d0:
34:1a:17:8c:ce:11:6c:e9:a3:2f:8b:9d:8c:e8:06:47:c7:5c:
bd:b2:a9:d2:13:77:e5:e2:bc:95:9e:d3:08:70:a4:c7:21:a3:
ac:30:4b:80:61:6e:fe:bb:af:66:4b:9b:fe:a2:ee:ac:94:00:
de:5a:e6:56:b4:85:f1:d6:c9:33:66:34:2f:4d:29:3e:02:02:
ee:ed:8d:f8:6e:ed:82:80:0f:df:18:93:b4:4b:d4:27:26:14:
ec:aa:00:72:a0:14:8e:f2:f1:af:ed:e6:bc:c3:a7:d5:6c:3f:
68:0e:03:08:ad:04:d9:bb:3c:27:2c:71:2c:6d:3b:48:9d:cc:
7d:b3:45:60:2f:59:32:2b:db:9f:52:09:3c:e5:6f:65:48:63:
a2:46:2d:a0:ee:d2:51:92:4b:7b:a6:5b:3b:22:56:d0:59:fb:
9e:15:10:0a:32:44:41:90:95:5d:77:28:72:ec:93:fa:71:2a:
af:03:ca:49:30:d8:80:16:d9:94:fc:34:18:e6:5e:09:3b:02:
de:11:ea:95:3f:2d:1a:9b:90:55:18:d3:8b:50:5e:78:96:c1:
8f:05:1b:19:21:5e:36:63:54:8c:69:d2:60:eb:0c:8d:7b:72:
2e:5d:1e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:48 2026 by rpki-client