Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: 9Zz9qhzidN6gUnv+s7p1WxwMKxIdDF4fQ5g0ndMMqag=
Subject key identifier: 7F:F0:12:03:F5:C5:08:BA:75:44:0E:F4:5C:00:29:AF:91:6D:7E:9F
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 019CABD9CB01B05ABF222909A8A38D52B697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0EFD
Signing time: Mon 02 Mar 2026 00:01:43 +0000
Manifest this update: Mon 02 Mar 2026 00:01:43 +0000
Manifest next update: Tue 03 Mar 2026 00:01:43 +0000
Files and hashes: 1: eRjL7bmUuZoWQUIbq4eEp3CN-0M.roa (hash: y5sRxVzTyv3q+thLaOje2bsBoe1cBCrXQcLT//6Uj0k=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: auomCOc8HRmjR7blJpzVAhr6j3W2EvRvjvagwU32u/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cb:01:b0:5a:bf:22:29:09:a8:a3:8d:52:b6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Mar 2 00:01:43 2026 GMT
Not After : Mar 3 00:01:43 2026 GMT
Subject: CN=7ff01203f5c508ba75440ef45c0029af916d7e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c1:85:7f:6e:4e:ec:a1:94:47:76:1a:cb:f6:
ea:ad:a7:ae:e3:93:73:46:18:10:84:22:1a:80:ff:
ff:22:49:55:74:e7:f3:f3:e0:6a:c6:38:55:76:01:
5e:60:9d:0c:58:8d:97:32:93:39:c9:42:58:ac:b2:
55:4f:03:90:e0:90:48:87:07:bd:09:09:0d:63:17:
dd:fb:63:93:9f:0e:46:dc:ac:60:0e:ea:d0:06:1e:
00:bb:c7:4f:52:ec:68:fb:86:ab:09:54:8d:7d:4d:
ff:bd:fa:56:30:f5:0e:56:7b:27:cd:a1:f9:d7:89:
a7:14:ac:e6:ef:7e:f1:28:0c:9e:47:33:52:61:ac:
3f:48:de:68:81:d2:70:80:a5:62:4d:23:8f:49:86:
84:8a:8b:22:d9:1e:95:ff:16:76:0f:15:f2:64:da:
71:74:66:b5:13:af:12:1f:ab:41:41:08:67:80:a0:
31:32:97:01:81:65:1a:1b:6d:fb:cb:e9:62:bc:49:
fd:a5:c7:b0:14:7f:fa:b1:cb:72:b2:1c:7a:7b:57:
f2:d4:6c:ae:f3:d4:ae:7e:e2:8f:b5:a5:fc:65:09:
98:fb:83:e3:90:2f:03:85:df:ae:39:84:3b:5a:d1:
b6:20:ee:50:8b:b2:f7:24:1a:8a:ac:e1:55:e4:c5:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F0:12:03:F5:C5:08:BA:75:44:0E:F4:5C:00:29:AF:91:6D:7E:9F
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8c:77:cd:47:32:65:b3:38:21:6d:ed:ee:68:f2:52:6f:11:
79:a4:77:e9:99:7a:31:97:2b:ce:fe:d7:8b:c1:67:87:a8:31:
72:28:ca:2e:4a:ce:08:94:9d:fb:3b:a8:e2:5e:8d:02:2e:f2:
75:cd:76:3b:4c:7d:ed:f4:48:3f:e9:16:f7:9a:70:56:b4:8a:
4f:bc:76:11:d3:11:6c:d0:05:fa:c3:8f:7c:e8:9f:9d:50:6a:
9d:30:bd:e6:44:cc:42:53:95:bd:76:63:82:30:6b:d5:4a:c3:
7c:d7:2f:c4:ee:af:3a:df:32:b6:b5:86:f4:21:e4:44:01:b8:
9a:38:2b:4a:cc:51:79:06:0a:96:07:b7:52:44:ed:e7:22:62:
e4:36:2f:2c:55:33:d3:21:c3:97:45:8e:32:2f:9e:ba:b4:0c:
9b:5f:3e:51:0b:4f:8d:42:14:3c:c3:89:03:fd:76:73:71:9f:
a7:ff:96:95:81:c1:2e:17:3a:0d:08:f5:d7:bc:e9:c4:56:37:
e6:b7:1c:24:bf:e3:65:92:0c:e6:ff:c4:d1:7b:ab:c7:65:a9:
d9:dc:ec:45:99:0b:d9:67:ba:0c:06:c9:16:c9:0e:64:9a:09:
52:f0:60:a3:dd:83:26:61:f3:28:5b:8f:c5:1a:02:63:9e:3a:
5d:f8:b1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:28 2026 by rpki-client