Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: 5//4/Uwly1NjLIpxlNX0iM4U5Q3cYh/SyTqMBVKLGKU=
Subject key identifier: 9A:14:7E:C3:B8:15:03:A5:04:66:71:A2:4B:12:4B:91:CF:BC:EC:47
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 019CAF47F774EC2E7E45A44341E644704A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 02FD
Signing time: Mon 02 Mar 2026 16:00:54 +0000
Manifest this update: Mon 02 Mar 2026 16:00:54 +0000
Manifest next update: Tue 03 Mar 2026 16:00:54 +0000
Files and hashes: 1: LzYZHC-rjJGbruYM23VscVWulpM.roa (hash: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: 62CAIXlG5W+VzrQKBhbTpOV1h9VAardx2w7E29bKzuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:f7:74:ec:2e:7e:45:a4:43:41:e6:44:70:4a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Mar 2 16:00:54 2026 GMT
Not After : Mar 3 16:00:54 2026 GMT
Subject: CN=9a147ec3b81503a5046671a24b124b91cfbcec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:91:a8:b9:43:cc:7d:7c:80:87:8f:29:e2:
ac:be:b9:e0:84:fc:de:56:2e:64:08:cc:54:d4:2c:
dd:85:b8:04:21:93:e0:86:7e:c2:ea:0e:82:39:29:
44:7e:08:6a:fc:ef:66:49:f8:b1:73:29:2e:93:8c:
4e:a7:c5:f0:e7:02:0c:6c:67:78:f0:6a:c4:b3:e4:
2d:63:80:a4:bf:5d:4f:7f:dc:16:ef:17:c5:e5:bd:
88:3d:3e:71:fd:74:a5:79:0a:b6:cf:10:7b:7d:23:
9c:a9:58:15:84:87:25:d7:dd:03:90:bd:0f:8f:23:
84:17:29:18:21:c5:fe:e9:69:1f:c4:7b:5b:8f:e8:
3d:a2:49:9a:4d:92:4a:b0:1c:d4:a6:40:ec:e2:65:
69:a6:ef:4f:b2:f3:c8:e8:2f:87:2e:b4:5a:4e:91:
e7:44:44:b3:5e:d7:f0:5a:ca:bb:12:6b:36:15:f2:
4b:a5:12:db:0b:52:74:4d:c7:8d:0b:40:56:9e:fe:
20:6b:4a:09:8a:f9:a0:3f:57:6e:a7:a5:ba:ae:66:
7c:75:f6:79:3a:41:a3:f1:5a:8c:0d:ad:a1:3b:b9:
a4:04:32:77:74:f5:08:5b:c5:94:e4:69:9f:fb:69:
54:a5:fb:0b:9c:87:7a:6c:df:7e:52:b5:5f:8f:8c:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:7E:C3:B8:15:03:A5:04:66:71:A2:4B:12:4B:91:CF:BC:EC:47
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ff:9b:c6:5a:79:7c:ef:34:7b:8e:ad:9d:87:b0:5c:13:4e:
f4:1a:02:0d:e6:96:21:6b:15:ce:96:3f:b7:a5:a2:35:36:fa:
54:a6:fd:3e:1b:22:25:4e:c0:75:d0:77:ff:88:47:85:7d:ed:
dd:33:be:19:92:71:5b:e2:60:3b:2d:ec:0d:99:01:cf:94:1d:
8d:6c:5b:71:9f:53:0f:c8:98:65:be:d8:9e:97:02:4d:27:18:
2c:41:0e:c7:db:cf:0d:ac:2c:77:83:0c:6c:f9:dc:44:8c:04:
41:a0:93:98:22:b1:73:83:20:c3:4d:69:86:4f:85:83:4f:d4:
84:11:f3:a2:a7:59:f4:72:be:6e:13:53:e3:13:de:e7:92:02:
d0:6a:aa:9d:53:5e:e4:59:e4:aa:bc:36:29:4f:6c:5f:4c:e5:
ee:02:59:5e:85:12:03:a6:3a:35:9e:1d:89:d2:0e:b1:d7:60:
cf:09:e2:2a:df:f0:f9:11:c4:45:03:dd:19:dd:97:47:e4:9d:
84:35:35:5c:5d:12:62:e6:95:8a:43:a2:37:98:7a:8e:33:21:
95:cd:91:e8:7f:c6:42:9d:18:a4:73:6b:03:c2:9e:25:76:4f:
eb:7d:e1:72:1f:3e:37:c3:a5:d9:9e:78:84:bf:58:94:c2:c4:
ee:37:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:30 2026 by rpki-client