Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: /TTcfEhSavXyX7nZHfHErZw74JM1XpKnKJVXvx6Iu58=
Subject key identifier: 0F:CC:26:C4:6E:C5:CC:99:6D:BA:2E:FD:90:7D:34:4E:96:11:F7:9D
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 019CA9B3AFECBDB21F5BC8FDFE947A214387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 14:00:51 +0000
Manifest this update: Sun 01 Mar 2026 14:00:51 +0000
Manifest next update: Mon 02 Mar 2026 14:00:51 +0000
Files and hashes: 1: 5DE_W6pAcWsoXSwOt7MJk1c52UM.roa (hash: xF+d5aYH+/051lwctUkQ5P94uH29GuKQimWqiTvacVc=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: MiyR6SdZFhC5j0a3/cWsqENdr1sLTDNX9ZQ4IA08/VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:af:ec:bd:b2:1f:5b:c8:fd:fe:94:7a:21:43:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Mar 1 14:00:51 2026 GMT
Not After : Mar 2 14:00:51 2026 GMT
Subject: CN=0fcc26c46ec5cc996dba2efd907d344e9611f79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:58:f1:c2:c1:41:76:44:5c:a8:5c:7e:e3:bf:
96:60:9d:79:99:35:c8:ff:d2:db:d0:ed:64:73:fc:
b7:00:cf:f4:f3:56:95:77:da:cb:11:1e:c8:1f:ab:
95:a2:72:f4:02:3e:81:c4:4b:58:27:4d:59:f7:c3:
3f:bf:a3:30:e5:f2:98:d2:d3:b7:8a:ac:c5:95:c4:
e6:9b:e0:13:a5:60:02:e8:66:f8:60:af:c1:1f:c0:
f1:04:48:e4:fb:3e:14:39:a8:05:8e:af:e5:c6:af:
ce:1b:f1:a1:a7:54:2b:17:6f:49:57:ef:e6:9a:22:
8b:9c:ca:7f:55:02:92:b0:e0:c5:ec:f3:16:e8:fd:
f5:7a:51:57:f5:f8:0b:0d:7c:76:a2:7c:25:f5:b3:
e8:af:e7:02:13:ae:4c:c0:eb:8d:92:16:1c:7d:28:
2d:1e:3e:f1:de:f3:db:2c:03:58:48:97:12:2b:48:
09:d3:ba:5c:c2:08:1c:f7:d0:5d:ea:f6:8f:ea:10:
96:f3:08:d6:b5:a3:d1:ca:3c:24:4f:71:48:e8:73:
c5:12:10:e1:ba:8b:99:32:e2:fa:19:d0:79:42:ca:
ae:30:f5:a4:60:a8:34:84:69:b3:7f:cb:c2:89:42:
2c:7b:bd:4e:06:44:3f:d4:64:5c:9e:ea:72:74:80:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CC:26:C4:6E:C5:CC:99:6D:BA:2E:FD:90:7D:34:4E:96:11:F7:9D
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:2f:a4:8f:ea:0e:fa:19:7f:d7:34:a0:b5:30:15:2d:18:
6b:71:74:bb:e3:3b:3a:b8:df:7b:94:31:3b:e1:a9:3e:d7:e4:
9b:27:6c:39:3c:dc:c9:9c:a6:ba:84:8d:69:d2:32:f3:f4:96:
88:f2:0b:e9:66:ee:d1:45:c9:78:26:87:eb:ba:4a:40:ca:5d:
28:4f:5a:7b:42:de:60:23:09:73:3b:7a:38:16:7e:77:de:26:
c8:31:05:11:ac:df:7f:fb:eb:56:79:9d:f0:d9:93:58:45:94:
52:48:cc:9f:53:a8:2b:17:0e:e5:e1:cb:e6:06:c4:90:cc:6c:
20:30:cb:a9:04:71:f3:e5:55:33:82:05:c4:c1:7e:56:04:07:
db:a3:29:b4:3a:64:d6:81:18:25:47:99:fd:0e:37:88:30:35:
b2:ca:bf:eb:f7:a2:9c:4c:c7:44:dd:8d:6c:32:51:b9:70:d2:
01:9f:06:9c:f8:f6:fb:9d:e9:33:cf:b7:fd:eb:d6:9c:f3:df:
90:3a:3c:ed:9c:b4:ae:90:ad:55:ae:8d:75:d1:82:f1:2d:3e:
50:ae:8d:75:1c:28:59:3f:2d:ca:34:c4:4f:a0:38:55:21:c1:
b7:79:09:4e:61:92:ee:6d:00:47:cc:83:ff:1e:2d:23:69:b6:
54:d3:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:32 2026 by rpki-client