Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier: WDRp397m2/uIp/53aXQyMnoMlySBR5UPjNJ9G50d5/s=
Subject key identifier: F8:0E:34:C7:79:9D:13:99:F6:27:B8:96:F5:98:EA:3B:F7:78:31:34
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 019CABA25F9A98019DACFE42B1D3D3D7A3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: aMb6lxNGb2-liUxIi8yk_IeHIOY.roa (hash: 5gSa2BaLYUZyyJ6bTUAS7v+V9L4QlBvXXfhwMvfbFhA=)
2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: oHwBoF5m6D4saFvs5TTVjFN1e2gcSRXhkQr/5sWiDNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5f:9a:98:01:9d:ac:fe:42:b1:d3:d3:d7:a3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=f80e34c7799d1399f627b896f598ea3bf7783134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:91:61:34:1c:ce:a1:a6:9b:1f:f7:f1:3f:
f2:8b:31:32:ec:f3:18:84:3d:da:d6:95:33:1a:52:
3a:1c:a4:ed:36:4d:d4:92:11:02:d9:56:f8:0f:f0:
76:8e:d3:02:eb:3a:28:7f:e2:98:02:4a:02:1a:7f:
d7:c0:e4:c5:1f:64:2c:29:01:9f:6f:e6:0a:60:69:
68:e3:97:19:9c:61:28:40:67:a8:d6:db:73:98:72:
11:ad:5e:73:13:af:b6:03:cd:01:26:aa:3b:e5:a6:
05:dc:a9:3a:27:cb:54:f3:1c:59:66:8d:e7:25:95:
eb:86:bf:8b:c3:42:19:aa:05:96:af:8c:0b:0b:bd:
0f:ff:ec:0a:0d:91:b2:ea:f0:17:b4:16:55:76:59:
e1:13:68:40:51:e0:03:89:2a:81:76:aa:96:41:43:
46:75:e0:64:9b:14:64:7f:09:57:7a:6d:f3:95:c9:
24:b9:71:79:4f:de:0a:99:23:2d:9b:2e:ff:dc:e3:
02:be:de:a0:2f:92:3d:05:d9:44:b2:3c:b4:b9:fe:
d2:47:9e:9f:95:df:7f:d4:18:df:1f:0d:8f:63:79:
de:16:1b:39:3b:4e:50:1d:2e:d2:14:21:ca:50:5a:
d7:db:0e:62:7b:d8:ad:9b:7e:b0:40:a9:46:40:1a:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0E:34:C7:79:9D:13:99:F6:27:B8:96:F5:98:EA:3B:F7:78:31:34
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e9:96:72:a9:fd:19:ad:b5:3e:d0:8b:46:54:c6:32:bb:36:
2b:72:ac:37:2d:c7:2e:a1:40:e3:ea:b7:97:47:7b:81:d3:56:
8b:44:2e:1d:10:60:f7:f0:f7:a2:27:13:b8:a5:02:b1:2b:aa:
94:27:b0:df:35:ac:e0:de:4a:49:a5:33:72:6c:1f:90:8c:bb:
a4:c7:cd:ae:f1:b5:ca:d4:bd:17:20:b6:4e:d2:f7:e9:f3:f0:
df:f0:42:7f:39:2c:97:0b:3b:d5:c8:c9:53:7e:97:e6:bf:d0:
4f:b7:86:ba:e9:ef:79:7b:7c:7e:9f:f6:6a:f4:e3:21:5a:d9:
d2:60:b5:bd:1d:e4:01:47:0c:b8:c6:d1:80:36:e0:5d:fb:b2:
44:d8:ae:f0:c8:fe:66:6e:11:c1:e1:43:90:7f:de:92:f0:6e:
76:2d:44:36:ba:c7:e8:df:0b:4d:a6:24:6a:1f:cd:65:5d:1e:
8c:27:e4:e8:43:2a:d3:06:3e:a5:58:56:e4:78:b6:67:2f:8d:
93:59:7a:a6:e3:f8:84:1c:a0:4f:e6:4b:9f:47:df:d5:c1:99:
8e:41:10:5b:79:06:f8:1b:1b:e8:75:22:6f:e0:b4:6d:3a:22:
a8:95:53:19:00:10:74:26:a6:12:0f:9d:01:f2:db:c6:e3:d8:
11:26:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:00 2026 by rpki-client