Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: aVgdc1wyxUNZ9A996mRqv171YQzOkKAmRVT+qPXNV2o=
Subject key identifier: 54:41:4E:BE:F9:0E:8B:CF:FA:3C:0B:F3:54:F4:6F:91:54:C5:1A:23
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 019CAA583543EF731273305024D7B7E67A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 16A3
Signing time: Sun 01 Mar 2026 17:00:33 +0000
Manifest this update: Sun 01 Mar 2026 17:00:33 +0000
Manifest next update: Mon 02 Mar 2026 17:00:33 +0000
Files and hashes: 1: X6N22azmZ7YvfwKicSHtrRRzv2A.roa (hash: nYHkLqVvvIjj1RReDJNi6r7lmu+SNXIeDPrdh2zqSZA=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: p1TtN7rubX6et30cCTADTCquRvbzRtue/I3+k0z8o/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:35:43:ef:73:12:73:30:50:24:d7:b7:e6:7a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Mar 1 17:00:33 2026 GMT
Not After : Mar 2 17:00:33 2026 GMT
Subject: CN=54414ebef90e8bcffa3c0bf354f46f9154c51a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:b4:7a:97:e2:44:ad:fb:a9:67:7b:6f:30:
5a:2f:4b:e8:12:c1:96:9b:36:d9:f3:1e:27:ca:0a:
5b:76:7b:97:9c:57:5e:06:b4:b5:39:69:9c:9d:6d:
bf:07:10:c9:62:06:92:43:07:10:95:8c:43:dc:28:
8c:5e:c1:f4:06:7c:ce:ac:e2:50:7e:0c:33:f1:66:
e4:87:a0:5c:48:29:37:3b:13:86:9f:42:64:dc:cd:
cf:14:78:ab:1e:fa:61:69:8c:2f:97:fb:60:57:8c:
d6:1b:90:d1:a8:e7:d5:07:af:fb:90:a4:e7:37:4b:
a2:e6:5e:2a:12:67:3a:53:bc:c6:df:2e:cc:91:40:
93:7a:e1:ff:52:b9:72:a8:65:3b:70:11:2b:f9:1d:
ef:63:b9:ac:49:b3:c3:c5:93:31:56:10:86:80:de:
dc:97:02:03:b6:fa:84:80:41:66:96:23:c4:36:97:
50:77:8a:4a:e7:a9:cd:8a:f4:cc:0a:0b:47:4e:ab:
59:99:5b:70:42:af:23:00:c1:8b:cd:16:b3:4d:59:
bc:ef:c3:0c:a2:8a:c2:b3:ae:14:9f:f0:45:bb:28:
18:6f:9c:a6:e5:64:45:c4:31:3b:f7:92:10:d1:da:
4d:e3:4c:01:9c:b0:c5:2d:fc:c4:fb:d8:1f:37:94:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:4E:BE:F9:0E:8B:CF:FA:3C:0B:F3:54:F4:6F:91:54:C5:1A:23
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:d8:a8:46:62:20:52:e3:df:99:a1:8c:01:e8:bc:06:5b:
b8:55:b5:e0:ce:85:ab:db:20:03:a6:fd:93:05:b4:51:e5:57:
e1:71:62:51:bb:8e:e3:c2:ea:a8:dd:ad:f4:fd:bd:08:11:b8:
da:6f:c3:85:08:a8:22:9b:82:95:2c:d8:51:6b:95:4c:07:8a:
bf:a4:2d:3f:43:61:8c:34:f0:3c:04:25:e1:17:29:5c:37:05:
96:3a:54:3b:67:00:18:84:1e:dc:23:86:f8:03:b3:11:da:53:
2a:5f:7f:1c:c9:b1:bd:55:7f:87:01:67:63:ab:2d:8b:3c:da:
4d:81:c0:c8:02:4d:b5:56:41:7d:e4:88:62:28:28:54:61:87:
6f:ab:fe:79:57:92:be:ac:85:08:cf:ef:fb:71:44:63:50:7c:
ca:47:da:50:d3:62:e1:00:7c:a2:86:67:11:6d:26:89:93:93:
24:bc:ec:6b:48:82:19:a6:ae:e1:87:30:03:74:0c:39:af:19:
29:26:51:fd:7f:a0:ea:af:19:bc:cb:63:ee:f3:e9:52:cf:19:
e9:f8:40:49:2c:6d:58:33:77:c4:88:21:98:e4:4d:60:c8:3d:
56:85:bf:5b:95:7e:35:a3:c3:b2:d3:5d:4e:6a:ba:2b:14:73:
9f:d6:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:53:08 2026 by rpki-client