Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: aCNucQVdhHUyPaws1G0oiuUX0z3P3AlWtf7ZmklYmh0=
Subject key identifier: 24:96:EB:7E:21:D8:FA:A8:6F:09:16:0F:E3:04:2D:7A:4B:DE:40:93
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019CADFE18CF8398F0E4A67D5427093B286D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 10:00:36 +0000
Manifest this update: Mon 02 Mar 2026 10:00:36 +0000
Manifest next update: Tue 03 Mar 2026 10:00:36 +0000
Files and hashes: 1: hLY2--5SKTnZ1QC36Cf-E8Iq5ho.roa (hash: lfg0kzyvgHw2ZfZ5eS4nTJ7bYAVmeebrxL6dhvaG0Ms=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: UnOo3101JrABAHQm6pZodpTu+Q+QOhFQStCmjd96ehE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:18:cf:83:98:f0:e4:a6:7d:54:27:09:3b:28:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Mar 2 10:00:36 2026 GMT
Not After : Mar 3 10:00:36 2026 GMT
Subject: CN=2496eb7e21d8faa86f09160fe3042d7a4bde4093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:3d:33:15:0d:4d:81:4e:04:f8:11:13:e2:
95:c9:46:5c:57:b9:dd:8f:2e:3e:1e:05:90:0e:2e:
ea:44:dc:eb:11:c7:b0:e2:4f:98:88:32:4f:d5:8f:
c0:a7:ef:11:e8:98:50:ed:e3:d1:37:6f:33:f9:bc:
e4:e4:de:06:ab:eb:10:fc:8a:92:ff:de:97:31:12:
bf:33:19:b9:04:45:9c:86:ce:87:8f:e0:75:52:05:
55:a1:b8:fc:9b:27:ed:3b:a0:20:d3:12:2f:29:a9:
af:60:a5:cc:c6:04:19:88:57:50:ab:18:d2:b5:f9:
14:18:ce:85:98:0f:88:db:12:92:cf:8c:9c:2b:bc:
d5:ac:d1:6d:a9:5e:fc:16:b2:b8:5b:09:c2:98:c2:
94:22:7d:6b:f8:93:2e:66:2b:3a:10:c5:6a:8d:5b:
7a:8e:de:0c:d4:fe:45:cc:80:7c:d2:07:b6:50:ae:
eb:3b:5f:88:da:0d:dc:41:2c:d5:48:67:d9:db:92:
7d:8a:86:54:08:29:66:98:67:f3:4b:b5:f5:8e:17:
34:bc:4e:ad:dc:1a:a4:45:10:6c:21:2c:3c:22:91:
1e:1f:09:97:8e:99:b5:94:d6:e5:cb:8e:cb:fb:35:
ba:f6:65:04:cf:5c:7c:20:90:87:ca:5d:33:a9:fb:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:96:EB:7E:21:D8:FA:A8:6F:09:16:0F:E3:04:2D:7A:4B:DE:40:93
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:99:94:28:68:94:e0:1f:3e:14:0c:6c:12:e1:49:84:53:b5:
c1:74:ef:37:ec:f7:1d:bd:a9:79:04:c7:61:60:14:af:f2:f9:
81:73:84:ec:ac:2b:f3:23:94:ff:fc:aa:d1:f2:47:c2:6c:0b:
13:a9:87:ac:7d:ee:65:68:18:8d:80:ea:b7:7f:f7:0c:34:30:
c6:70:e2:5e:a0:95:be:fe:27:c0:ec:9a:b6:44:63:23:d5:1a:
9e:5c:43:b9:52:40:16:bf:fc:09:65:13:fb:d9:d2:da:b1:49:
36:f0:7e:1a:8e:66:6b:d0:99:27:d5:ac:aa:b2:d6:1d:0a:6c:
88:a7:83:ce:cc:c7:03:a4:63:ad:41:5d:7f:54:7b:12:a8:03:
d6:f8:06:44:a6:a2:cc:ba:e7:ec:d0:d4:bf:42:6c:83:ce:8c:
95:6c:62:45:7e:cd:41:6f:42:bb:88:28:3b:19:5c:05:28:30:
85:c7:6d:8a:7e:fe:dd:25:f6:5f:17:cb:9c:59:56:04:03:f2:
65:fa:9b:2a:20:87:8d:37:48:b0:db:b6:e7:d9:3a:62:c2:8b:
bf:da:b9:b5:4d:24:7a:64:3f:09:47:02:e4:3e:d9:8a:30:7a:
a6:99:05:65:95:2e:41:67:49:37:79:5b:6f:7a:1b:ab:47:d0:
3a:1a:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:52:01 2026 by rpki-client