Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: 2GgZBGg9+Zi2S9UiT9fzr+Gh61GxOVzZrzHGaY9LOfc=
Subject key identifier: DB:C2:A1:15:C4:7D:FE:97:6B:CE:C1:3B:08:7B:ED:3F:84:F2:54:A5
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019CABD92FE19FAFE7AF8D291F430D9FF193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1809
Signing time: Mon 02 Mar 2026 00:01:03 +0000
Manifest this update: Mon 02 Mar 2026 00:01:03 +0000
Manifest next update: Tue 03 Mar 2026 00:01:03 +0000
Files and hashes: 1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: eOH5WtYJHKUdFRPJthmgaPsRlReZ4EE8k3YflFvsb3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2f:e1:9f:af:e7:af:8d:29:1f:43:0d:9f:f1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Mar 2 00:01:03 2026 GMT
Not After : Mar 3 00:01:03 2026 GMT
Subject: CN=dbc2a115c47dfe976bcec13b087bed3f84f254a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:5f:d7:09:c8:44:e3:fc:03:97:11:33:ae:
73:99:55:41:a2:75:b0:f1:9d:f6:11:ce:af:92:60:
8d:5b:31:59:0a:4e:97:ff:42:ec:11:c3:1a:6e:9c:
06:f5:4c:c5:9d:f2:c9:e7:f9:cb:a3:6b:25:b7:77:
9c:db:c7:12:cb:5a:90:77:df:d0:e8:98:d5:72:c3:
d5:f8:fb:ac:2d:a4:7f:e3:e0:c3:3d:91:2e:2d:68:
f1:43:e7:91:3c:3c:61:26:86:ae:ab:8b:bc:ff:cd:
a8:1b:13:da:ea:aa:fa:70:65:2c:f6:38:37:30:92:
1d:40:93:ee:5f:57:27:1a:e5:5a:cb:88:5a:36:4c:
22:08:6e:60:17:87:b3:32:91:81:5c:68:95:b3:34:
c3:26:a5:d0:95:82:dd:91:8f:5a:8b:23:29:48:aa:
1b:6f:02:98:e8:09:dd:6b:d3:a9:60:21:b2:3b:0c:
e9:16:6f:c9:65:05:7e:fc:56:f6:85:c9:aa:37:c8:
ea:f0:71:67:79:03:d9:b1:b2:f2:e3:9e:27:96:28:
31:c0:46:01:5c:a4:01:4a:2a:de:98:cc:06:ea:e8:
2d:ce:e4:c5:d9:bf:cd:a7:41:8f:9a:f4:c9:fc:65:
0e:45:dd:90:a5:e4:98:fd:8d:d9:f0:a2:5a:d5:d5:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C2:A1:15:C4:7D:FE:97:6B:CE:C1:3B:08:7B:ED:3F:84:F2:54:A5
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:56:ec:40:fe:84:0f:7f:6b:e2:c9:e6:0f:39:4b:bd:22:43:
32:83:c5:e7:09:a4:78:cc:4b:ca:97:cd:70:97:ea:43:62:86:
cd:49:be:7e:a6:60:4d:96:86:62:89:ab:5a:b1:59:8f:88:2c:
93:ef:ca:ae:03:2d:ab:54:16:56:4c:70:5d:b2:e9:c0:e2:bd:
68:6d:38:83:d0:3c:7a:c5:01:ca:27:32:35:ff:fb:57:67:ac:
70:38:c1:e0:68:8b:5f:08:c3:f8:00:9f:25:9c:e8:c5:09:e0:
a9:cf:b0:08:fd:0d:83:e5:b7:4a:19:58:61:fc:57:d6:c0:f4:
27:79:20:12:d3:c8:fa:e5:55:0f:69:e3:3d:51:f9:2c:36:c1:
28:d4:c9:11:0c:14:06:8f:62:9b:78:f8:df:3c:8e:58:38:bb:
8e:72:5c:ac:a4:4c:7a:f9:01:d9:22:c5:1c:b8:71:5f:47:c0:
81:4d:53:2d:28:f2:7e:76:07:71:90:93:ba:81:e1:c7:cb:39:
b7:10:8c:24:8a:37:f1:2b:ed:53:80:ac:4a:ed:ca:63:79:1f:
24:66:cc:7f:80:0d:69:fc:42:a1:61:ce:ac:b0:f6:c0:f6:3f:
78:a0:6d:43:22:3b:df:cb:3d:ca:d8:cd:b2:78:d2:75:b3:47:
a9:a8:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:22 2026 by rpki-client