Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: bdci+G3D0rXYoENWya+HLwN4Ttq0u2W6tj0xqo7qoT0=
Subject key identifier: DE:16:84:9B:83:E1:92:3D:41:F5:9D:6F:E2:6C:10:28:D6:A7:EF:2E
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 019CAC4737AC5BEC85781B0DCB39A73E960D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 052E
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: U7czUOTZqayV5F4Km_Oxj_WlDUo.roa (hash: WcGm9+GdN6IqYMN7rk3gbjv/CZUu9hkDi4qO4kHYeVw=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: naFHNagi/kuY9XG2sY/cdX6oqqXlo4Te0bdWywM/+Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:37:ac:5b:ec:85:78:1b:0d:cb:39:a7:3e:96:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=de16849b83e1923d41f59d6fe26c1028d6a7ef2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:8e:de:d5:2c:cd:56:c0:bc:cc:cc:d4:e8:
de:04:66:75:f8:66:46:60:27:3f:95:c2:82:a4:32:
94:bd:35:d8:af:cc:73:a2:57:3b:e3:05:49:fd:04:
f4:3b:a0:d3:cb:1b:72:37:eb:ca:7b:89:e0:0e:80:
18:82:c5:6f:55:85:33:ce:81:9a:4a:2c:7d:80:a1:
d1:bf:49:7c:ef:61:67:60:9b:90:35:a3:43:a2:4d:
6a:3d:87:37:28:24:eb:b9:a2:3e:7f:7a:c5:dc:b6:
92:3b:cc:5b:5b:11:7c:1d:ce:9a:3e:b4:df:2e:5f:
d8:2a:d4:54:56:22:b4:ad:26:bb:37:26:61:56:6e:
ff:a1:ec:08:5e:c7:e6:dc:f9:95:7b:c0:b8:83:2d:
8c:9b:77:a4:7e:2d:51:26:db:8e:d9:60:cb:16:cd:
64:32:42:df:21:ae:7b:90:a5:d5:c0:7a:43:1f:47:
59:49:77:9e:9e:15:38:bc:2a:65:ea:e8:9c:a0:86:
aa:0a:9d:e8:13:06:65:91:41:fd:60:ec:24:a9:c4:
72:ce:10:01:69:6d:ee:ef:f9:7a:b1:0b:41:6a:8f:
d8:6b:40:42:71:e6:b5:5e:f4:da:63:13:1e:21:9e:
0f:63:ee:45:cf:82:12:6d:d8:35:45:71:70:cd:9c:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:16:84:9B:83:E1:92:3D:41:F5:9D:6F:E2:6C:10:28:D6:A7:EF:2E
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ed:15:be:8a:75:a8:27:9a:a3:d5:f5:eb:ce:81:c2:b7:4b:
62:40:42:48:b3:40:30:99:45:dd:18:39:78:86:87:60:b4:00:
8c:84:ad:1a:32:22:95:37:6a:8c:e8:b8:09:e6:56:a9:db:20:
cf:09:b0:f7:63:a7:90:be:d9:fe:38:29:63:1d:a6:de:33:34:
f4:90:a5:48:97:3c:bb:57:bb:27:b4:a8:43:23:c3:16:f8:b7:
7e:3d:b2:39:54:16:c4:95:a5:1b:87:4e:d3:66:04:25:6d:83:
6d:07:74:e6:16:a8:cb:62:b8:c0:6e:d8:d6:6e:d7:e0:52:b4:
d3:2b:0d:74:82:d0:75:f4:82:1c:bd:a2:4a:5e:a4:f4:af:53:
ca:da:06:52:38:da:fc:da:04:e1:16:28:3b:3f:20:96:53:96:
e9:c2:2f:9c:ba:9c:61:64:f8:0f:f0:d6:9a:69:c3:32:59:e1:
77:b3:3e:4a:f2:6d:a2:ed:6f:32:61:23:97:cf:9a:7e:80:c9:
39:ff:58:54:65:c2:aa:c9:7a:e6:f0:65:9e:04:57:55:4b:b0:
97:0e:fd:6e:c3:7e:de:d8:95:e9:4e:9f:05:04:24:17:3d:50:
97:86:00:b6:d6:59:c4:04:24:70:9a:c8:72:34:87:90:48:28:
96:81:20:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:32 2026 by rpki-client