Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: PYU3CbeFz7v3JhqVjivnJJFbOCmgZeseJSDehMCaoFo=
Subject key identifier: AC:23:A3:6E:5A:8A:E3:C6:FB:A5:48:2F:1F:E8:1E:B5:FA:CE:2E:A8
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 019CAC7DE190E28CB056107B784D213DE743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 0A1A
Signing time: Mon 02 Mar 2026 03:00:56 +0000
Manifest this update: Mon 02 Mar 2026 03:00:56 +0000
Manifest next update: Tue 03 Mar 2026 03:00:56 +0000
Files and hashes: 1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=)
2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: 05u3Sv9ohkElF7/L9aS3PzIfM51XGcaOEozGiabF6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e1:90:e2:8c:b0:56:10:7b:78:4d:21:3d:e7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Mar 2 03:00:56 2026 GMT
Not After : Mar 3 03:00:56 2026 GMT
Subject: CN=ac23a36e5a8ae3c6fba5482f1fe81eb5face2ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:83:5f:65:c6:e1:01:d8:81:62:c6:5e:7b:
84:bc:5d:3b:c0:dd:43:41:47:ff:16:79:46:b4:95:
96:de:cb:64:b4:79:6b:89:d9:10:7c:54:a2:04:66:
42:98:37:da:bd:a0:b7:3a:67:ae:65:03:ca:e1:c5:
17:bb:43:e1:ef:03:3e:31:18:28:2a:8e:fe:5e:8f:
6b:75:b9:d6:be:1b:4e:62:29:58:4f:d2:d3:d9:59:
84:91:15:ac:81:d5:9e:31:c4:0d:ef:bb:84:8f:e9:
43:25:ff:64:5c:bf:7d:7c:78:23:51:d1:1f:ae:9a:
13:b4:be:12:f4:b5:6d:5d:cc:39:6b:b1:70:93:51:
95:4b:f5:02:61:4d:4e:41:e6:34:ce:af:2c:85:64:
ff:50:b2:0d:6f:e0:58:e4:13:19:34:a8:6e:d5:1c:
87:97:57:dc:86:3b:69:a1:b6:6d:f5:1a:a1:33:fb:
00:10:6b:1b:26:63:59:7a:ea:31:8d:9a:86:8f:f3:
7c:3c:0e:98:e4:22:b6:d3:49:92:e8:e7:a4:62:d4:
46:7c:99:42:d0:c3:c4:e4:13:bf:5a:65:dd:7c:11:
19:79:08:e6:48:ef:f3:2a:b6:38:19:48:20:59:0d:
e3:21:c8:e4:b0:42:b9:04:b8:60:b1:8b:71:f6:b3:
97:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:23:A3:6E:5A:8A:E3:C6:FB:A5:48:2F:1F:E8:1E:B5:FA:CE:2E:A8
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:52:f9:ae:7c:ba:37:43:6c:c3:f4:b9:23:33:dd:41:be:
d2:2a:42:fa:a5:1f:73:be:d6:d7:ec:84:14:d1:67:be:4d:66:
12:6e:af:48:4b:dc:2f:40:4c:49:cf:31:47:83:9b:e2:73:11:
d6:3e:37:64:63:d5:e9:62:76:a8:3f:c2:e8:92:5c:7a:1f:ed:
a8:1f:de:ae:f3:70:1b:24:af:fa:52:13:80:50:3e:49:5f:a5:
96:fd:e6:1a:1e:20:f5:c8:8a:d8:19:83:af:1d:f5:3c:77:01:
76:eb:d5:4a:bd:af:c3:aa:98:61:37:ca:23:2a:9d:bc:37:2c:
eb:33:5c:4d:61:a4:0e:2b:ad:c5:52:e7:79:78:c3:97:39:bc:
1e:6c:c6:2e:55:fd:78:d9:5f:37:17:72:a6:ed:71:4d:01:e1:
af:e3:e3:6a:b7:66:b3:fd:49:e0:52:c2:31:48:7d:c8:bb:8e:
50:32:46:cf:e7:b7:fa:64:b7:a4:b5:f4:a4:5a:96:e1:46:14:
7a:2f:f1:71:22:92:4b:b3:bd:c1:e1:c4:0a:32:f2:50:8c:af:
32:d0:ad:be:3d:8f:7e:da:0e:23:c9:44:d4:78:d6:b4:49:a8:
df:96:aa:08:03:af:f9:04:d5:17:68:66:cf:52:97:e2:33:8a:
90:02:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:49 2026 by rpki-client