Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: 8+SkiTAXAobYDhnCd07xH5LTI97eJe0/xuBK85t6YSA=
Subject key identifier: F2:64:3F:6C:B0:EB:40:D6:BA:A7:6E:F3:E8:3C:3F:49:4B:F7:F3:89
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 019CABD8E6DDCC9BB774F469CCB3CB6DBD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 177B
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: CitPrvEbL3mSkhY-h3ajKHpia-8.roa (hash: /+PG4/PPRJ0jxjBwjO3qbLw0M09UhMzUiGb+7CaKzGg=)
2: lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa (hash: ik5LzxvVAt9iL2/7h4zp/cur7V0L47uoz6AFvyo0fRE=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: 15EFZqoLwSM2i4rbFfudD7uvgIqpzN56OM82sovmrI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e6:dd:cc:9b:b7:74:f4:69:cc:b3:cb:6d:bd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=f2643f6cb0eb40d6baa76ef3e83c3f494bf7f389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:dd:02:07:d9:ba:a0:1f:2a:65:a6:cc:fb:
84:c5:cd:69:27:9e:8f:a6:d3:3b:0d:99:af:fe:b4:
1f:e6:0b:b9:33:f1:b5:aa:28:3f:03:5f:83:e8:a8:
47:85:4d:3f:98:9f:5b:0a:54:c1:16:66:f6:2f:d3:
a7:e5:fa:e2:d0:ba:19:9b:2a:b7:18:ff:60:fc:04:
ba:15:3b:6b:cb:57:48:86:90:90:70:5f:eb:61:6a:
8f:e3:a0:1e:84:bf:08:de:cf:b3:01:ab:75:f0:da:
e8:38:cf:46:9e:f0:47:02:b4:ca:f5:a9:50:21:e1:
74:d0:a6:4e:a5:18:5b:e7:7b:13:4a:63:e9:75:80:
92:05:5d:6f:c8:3b:b3:be:7a:84:3e:d5:a9:37:bc:
4e:de:3a:5c:f3:9e:fe:62:55:72:54:a3:70:d8:fd:
03:d2:7c:68:99:2d:e6:ea:0f:e2:8e:61:7f:48:59:
a0:9c:1c:dd:ad:50:c4:97:a5:5b:1c:e6:82:ac:d5:
30:8e:c2:43:c7:4a:8e:3e:3a:6a:fa:8d:6f:bf:cb:
ae:14:a0:5e:ea:a1:49:99:f3:59:df:2d:ad:52:fc:
1a:83:09:2a:e7:ad:e1:2d:f7:69:9a:ff:41:92:6c:
ac:31:ef:fb:0f:33:f6:1c:9a:86:74:32:11:5b:9d:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:64:3F:6C:B0:EB:40:D6:BA:A7:6E:F3:E8:3C:3F:49:4B:F7:F3:89
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:99:db:92:8b:22:e1:75:82:79:73:3b:b0:82:27:12:ed:8f:
4f:80:03:09:1c:3f:54:31:5e:70:f9:4a:69:41:a5:cc:fa:28:
6d:f2:4e:00:56:c9:40:7f:e4:42:36:27:e3:f4:3c:07:a5:27:
1a:b2:6f:0a:40:c1:31:4d:7c:f6:ef:08:04:3a:0f:aa:79:20:
d6:29:05:a0:4a:aa:68:fc:34:79:8c:1e:e4:e8:5f:7c:f9:91:
77:68:1c:25:9f:88:32:a2:82:98:63:7f:c3:29:ae:64:3f:70:
ec:99:3d:68:d9:1e:15:ec:a3:77:36:4d:51:0b:ff:b3:8f:9d:
d0:39:b6:32:0b:2a:01:90:76:7e:b5:f3:0e:db:89:f6:2e:89:
19:62:cf:d4:7f:4a:d7:d5:14:67:88:d9:ed:4f:4d:ea:cd:f8:
6d:c2:2a:c0:2e:99:d4:54:63:4a:29:84:ae:d7:8f:4a:14:c9:
bb:e7:f1:57:93:28:db:e1:e4:2c:10:fc:b5:1a:74:7a:14:f9:
09:30:08:25:fb:c6:b5:26:5b:19:08:27:d0:9b:6e:01:2b:75:
83:22:c0:36:f1:3c:8d:a5:4f:fe:37:55:f7:33:d9:b3:c7:fa:
a5:99:9d:fd:98:34:16:25:95:53:41:db:d1:d2:56:c9:7d:c4:
b0:8f:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:34 2026 by rpki-client