Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json)
Hash identifier: UAux2wdk//Np11KSmKSJoCrKAoSqDxARo7dgiR7J8jI=
Subject key identifier: C1:FE:55:C6:03:02:4E:1C:DD:7F:95:A7:98:A0:43:AA:B1:19:61:69
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 019CAD901FA2D16864332C2F62DBC78D537F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
Manifest number: 0B21
Signing time: Mon 02 Mar 2026 08:00:29 +0000
Manifest this update: Mon 02 Mar 2026 08:00:29 +0000
Manifest next update: Tue 03 Mar 2026 08:00:29 +0000
Files and hashes: 1: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: XyRn77+pv2QvVz5Va5WuKE7iPwp5f2/iCnHgkebpHzw=)
2: y4Da6sZJ9Zrri-68tCZQ82txVE8.roa (hash: siiOFYThlEnhOuPTtcgPza0sux7K+s3jYPDLUM6lsRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:1f:a2:d1:68:64:33:2c:2f:62:db:c7:8d:53:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: Mar 2 08:00:29 2026 GMT
Not After : Mar 3 08:00:29 2026 GMT
Subject: CN=c1fe55c603024e1cdd7f95a798a043aab1196169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:37:4f:76:15:51:5c:c8:9c:8c:97:85:46:
32:df:05:16:31:28:f7:48:4f:65:a0:09:95:c9:2c:
09:ea:3d:d7:56:9b:0a:b8:0d:8c:93:00:7a:e7:6d:
ac:69:b9:92:2d:51:16:cd:07:6a:0f:b0:59:9a:14:
32:a2:a6:e8:21:b6:70:a7:db:56:a6:4a:e4:b2:18:
7b:9d:29:fa:24:5b:44:d4:2d:23:94:c8:05:0e:cf:
44:16:71:83:c4:99:40:40:73:cd:25:db:2b:d7:7e:
af:b4:3b:9f:97:a7:f0:7e:4e:14:79:81:6d:1f:fa:
d5:c7:70:32:13:d8:e3:5d:04:8b:8f:a2:b1:d1:80:
08:0c:1f:39:c7:a4:ff:ac:59:75:9a:78:3c:c8:4f:
3a:d5:36:df:ed:97:2b:29:a0:5f:27:a4:26:98:30:
5d:05:45:72:5d:46:ff:cb:eb:b6:66:5f:34:9a:8c:
e8:a9:4d:f5:24:71:64:bd:24:69:f8:b8:2f:6f:8f:
be:d8:2a:5f:4a:b0:0f:0b:35:fe:2b:32:ad:ce:6a:
51:f5:ae:63:e8:b0:fe:9c:25:1c:ca:50:df:7c:af:
eb:17:d7:e7:ba:40:d8:a4:47:7a:cc:9b:2e:54:36:
52:fe:9c:7b:48:5c:74:38:78:53:b8:b0:a6:74:93:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:55:C6:03:02:4E:1C:DD:7F:95:A7:98:A0:43:AA:B1:19:61:69
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cb:59:62:f4:e9:d0:5d:95:d9:d8:f9:92:0d:e0:f5:f4:e8:
27:7e:a2:34:9b:b5:e3:8c:c2:0d:93:6a:37:c4:fb:5d:ea:d7:
fc:f6:ce:9f:4a:58:ae:c1:d4:5c:8e:8f:30:5d:f8:c2:12:ba:
45:92:1c:35:2d:3e:5e:14:6b:f1:19:02:6a:fa:eb:8d:4f:48:
e2:2a:3a:0b:98:23:a3:15:d2:07:bf:a8:3f:7a:fa:57:69:d7:
bf:d4:4f:80:dd:a5:32:2c:1d:92:51:b5:5a:a6:8c:73:9c:d9:
79:da:c6:04:7c:97:aa:ce:41:bb:2f:3e:be:b2:25:3a:51:3c:
64:b6:48:bf:ed:0c:85:5d:00:0e:cf:bc:de:ec:dc:55:43:14:
b3:a1:95:15:b2:78:78:e4:63:5c:d0:94:e7:f8:f0:e6:cc:14:
4f:8b:ba:ce:06:1c:7d:c9:6f:53:76:9d:a2:ef:f9:ce:34:7d:
96:d5:c1:85:00:bb:6e:26:d0:ed:3a:7e:81:bb:f4:98:f2:ec:
ff:70:07:a5:86:55:73:e8:48:22:a8:5a:be:5e:04:0d:7c:a0:
20:d6:96:50:aa:5a:4d:e8:9c:c0:d6:48:22:21:55:be:16:25:
ed:31:8d:9d:da:b1:e0:d9:f2:63:ff:64:23:3f:2b:4a:72:6d:
0b:0d:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:31 2026 by rpki-client