Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: 0csPVc03ACNG5TrT0S2AhYJS0gEvUyCWMqtQq02f7P0=
Subject key identifier: EF:F8:94:A2:32:63:04:35:68:D8:01:BE:48:5B:B7:6F:3B:B3:F0:EF
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 019CAC478B0E07BD8C4AF30D242421166A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 0BBB
Signing time: Mon 02 Mar 2026 02:01:35 +0000
Manifest this update: Mon 02 Mar 2026 02:01:35 +0000
Manifest next update: Tue 03 Mar 2026 02:01:35 +0000
Files and hashes: 1: 21R_t7vKnYEIDQebm-7zjxxy-lo.roa (hash: uGSGk5iT+FrqnBLQlW6LsLr35tMh1jia+p+sY2P//70=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: e5UUZ7NuRdqv6IHWyqha0WaiRKCt5DcMINIw58bZuoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:8b:0e:07:bd:8c:4a:f3:0d:24:24:21:16:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Mar 2 02:01:35 2026 GMT
Not After : Mar 3 02:01:35 2026 GMT
Subject: CN=eff894a23263043568d801be485bb76f3bb3f0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:ee:55:a4:79:69:1a:f6:88:b5:e9:e8:4b:
f5:23:69:b2:68:6e:96:61:c4:a0:6a:39:30:07:73:
5f:e6:e1:5a:2a:cd:2a:c0:c8:2f:7c:b4:64:ed:2c:
2b:23:df:5f:81:df:17:e9:f1:6e:ce:e5:d0:ad:2a:
a4:c0:90:3b:76:9a:71:61:e0:2b:b1:78:2b:f3:fe:
ea:d9:f4:ad:64:0c:a0:7a:26:5f:e0:de:91:5c:cd:
47:b9:c5:67:b1:b7:6b:fe:82:e9:68:bd:35:4b:c1:
d1:ea:77:31:24:0b:fd:d3:9e:51:15:24:e2:ed:73:
c0:1f:f9:55:51:2c:87:5f:68:87:dd:4e:7a:21:f9:
38:d4:f9:10:48:a3:54:51:63:3e:96:fb:3d:6b:ce:
d8:1d:ab:14:70:8a:47:9d:27:30:50:cf:75:26:11:
e8:f1:20:9c:c2:d3:95:b7:6d:2f:60:f3:e1:26:63:
0e:8e:6c:0a:15:ca:ea:12:00:33:e4:63:87:93:3c:
c8:0c:8f:14:f9:94:41:7a:34:22:71:44:4a:e5:2d:
57:69:be:c8:e9:fe:c3:32:01:05:05:e2:93:a3:4f:
78:b7:f9:33:42:c1:e8:48:ca:89:09:9c:f9:40:0c:
cb:45:5e:2b:9e:af:06:00:91:2a:a5:88:8c:b6:a2:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:94:A2:32:63:04:35:68:D8:01:BE:48:5B:B7:6F:3B:B3:F0:EF
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c5:1f:a8:7b:cd:5f:f8:76:e4:62:22:29:57:5a:e6:e1:23:
52:10:52:4c:77:03:8a:08:b2:1e:c6:da:b2:97:7b:7a:63:cc:
35:a2:ac:24:6f:5b:b0:81:85:35:a1:da:f2:14:b5:4b:d8:e4:
1b:c5:03:3e:a3:cd:05:55:2f:a1:f2:f8:e8:7d:86:54:a6:83:
27:0f:f3:da:55:1b:36:37:94:b0:52:f6:dd:2f:fe:74:fa:f6:
2f:10:99:6b:00:87:29:11:5b:ed:0a:69:5a:dd:2a:e7:4a:e1:
be:5e:80:c7:4f:80:90:d4:36:49:70:db:d3:7c:ed:6c:94:cf:
a0:19:49:ef:4e:1e:cd:d4:ae:0f:b8:da:d3:df:1a:b4:8c:51:
99:cb:0a:21:d7:c5:46:01:04:da:48:ba:99:ac:39:92:be:0f:
d7:8f:aa:14:e6:53:8e:34:2e:f2:43:00:fb:46:02:2c:df:6d:
d3:10:74:2d:6e:64:81:e6:6a:75:db:c0:80:8f:5e:61:7c:d3:
74:29:ab:aa:44:c6:18:dc:e4:8a:2c:27:5c:5e:21:8c:97:b7:
b7:2c:85:56:78:ab:e1:53:77:b0:38:2f:23:d3:07:4e:27:9d:
79:bf:4e:b5:63:14:6e:9d:32:c6:e9:0b:f1:76:78:f0:29:17:
31:7e:49:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:26 2026 by rpki-client