Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: 5xK2+dvDPl4mH60xY7FWBbMvIyZKBbn5XYeTDiTsZ4g=
Subject key identifier: E1:8A:30:01:BE:80:93:E4:A3:1C:C5:8E:95:3F:81:81:17:68:8B:F9
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 019CAAC6E186FF0950A79D861ADB3FC8F4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 1163
Signing time: Sun 01 Mar 2026 19:01:26 +0000
Manifest this update: Sun 01 Mar 2026 19:01:26 +0000
Manifest next update: Mon 02 Mar 2026 19:01:26 +0000
Files and hashes: 1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=)
2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=)
3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: /7E2etP9ZEOHHv0yMNuWtOu0mH0SeH+Z71Nf3RrOYsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e1:86:ff:09:50:a7:9d:86:1a:db:3f:c8:f4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Mar 1 19:01:26 2026 GMT
Not After : Mar 2 19:01:26 2026 GMT
Subject: CN=e18a3001be8093e4a31cc58e953f818117688bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:00:69:9e:81:a0:a8:d0:ae:d2:5f:b5:34:
0e:58:dd:03:1d:4f:84:25:be:92:3d:d2:5a:c9:98:
be:53:70:8f:34:51:0e:e5:8b:1e:cd:a5:30:4a:31:
45:9a:53:f9:3d:ff:99:f1:cc:a1:97:ab:a5:18:a2:
e9:14:ad:7c:b3:24:1a:a5:ca:7f:e8:8a:ab:b4:df:
59:25:ea:aa:ca:32:63:49:2f:bf:7e:14:5e:cf:27:
95:48:66:57:6d:58:5e:ff:11:8b:aa:ed:18:46:e7:
1e:a3:5b:78:4e:34:7a:f9:49:76:56:5d:c7:e5:69:
7e:5f:9c:b5:be:43:12:c3:79:30:2e:d6:9d:ac:f5:
05:43:3d:37:e6:78:e5:6a:2d:b2:3c:d8:48:bd:56:
c7:61:54:a1:01:ec:1e:9a:91:7a:6f:a9:f2:20:82:
61:25:6c:ba:24:c7:5c:06:6e:37:4d:2c:3a:0c:4d:
7b:de:08:20:32:2e:a3:95:2a:3b:2e:b9:f9:d6:58:
dc:15:9a:28:ff:66:0c:98:f7:2b:31:e2:03:e4:5f:
a6:d4:23:25:93:f0:b1:61:1c:96:88:21:b4:48:91:
5b:ab:ca:92:ff:1a:07:c0:a6:ea:01:c1:2b:47:d3:
0b:dd:5c:6b:f6:3d:f0:60:30:c7:e2:90:e1:27:62:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8A:30:01:BE:80:93:E4:A3:1C:C5:8E:95:3F:81:81:17:68:8B:F9
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:78:ba:6a:5a:46:68:a7:5b:df:50:22:c8:d2:73:8a:6a:3c:
6f:cf:5f:76:0a:bf:c7:02:a1:67:44:b8:d7:a3:c4:71:25:8a:
3c:b6:de:d5:8c:cd:6d:c1:95:37:0a:04:d6:4b:35:5e:b7:0b:
57:cb:75:c6:e1:fa:cc:d3:d6:c2:c8:10:d8:fa:5b:10:e0:4f:
95:94:b2:6e:03:1b:59:a2:9c:a9:dd:1d:15:0c:41:aa:83:83:
73:97:09:44:80:1c:a4:93:ae:af:ed:42:f4:d3:94:ff:ef:fb:
0d:bf:f5:19:6c:f3:98:b6:ee:37:7a:a7:e4:4e:9b:0d:1d:08:
ec:69:2e:65:2d:34:96:9e:03:67:a3:5a:72:78:c0:42:11:8b:
2c:d1:ec:3f:03:4a:4a:e8:ed:e1:d3:03:61:ff:17:b3:fe:59:
8a:2f:89:3d:cb:97:66:8e:6f:ce:6c:96:95:46:8b:38:89:63:
6a:4c:12:ba:83:fd:71:cc:ff:01:63:e5:9d:0c:0d:b9:41:04:
73:c6:b1:ef:77:38:9d:9a:f2:a3:6c:5b:a7:df:05:4e:34:e9:
5e:fc:39:93:1b:9f:2b:a9:9a:99:83:1c:58:d3:d8:a7:19:fd:
42:87:82:0b:d0:c1:d0:a0:62:81:a1:82:c7:28:7b:a0:8b:38:
bd:07:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:37 2026 by rpki-client