Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: PdT9NzPcPMcHXHG23nHBz2rhPdRqSOIx43XyccHYxkI=
Subject key identifier: A7:61:77:D5:E2:3E:1C:3D:60:FC:E8:91:D8:F7:71:70:7C:B1:94:D2
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 019CACB4C112A1EB27F15EA00846E8495433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 06A1
Signing time: Mon 02 Mar 2026 04:00:52 +0000
Manifest this update: Mon 02 Mar 2026 04:00:52 +0000
Manifest next update: Tue 03 Mar 2026 04:00:52 +0000
Files and hashes: 1: X29-SsmJR9k5fDOjjkh75Kg4cpc.roa (hash: +euzTLNo94RLGMAt+aTDFJ+R3lTEiHq3dfTEgVifPSc=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: be2tOg0Pvw6u384JlnCqCWFyolkUip4ZOLIoyr9bBcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c1:12:a1:eb:27:f1:5e:a0:08:46:e8:49:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Mar 2 04:00:52 2026 GMT
Not After : Mar 3 04:00:52 2026 GMT
Subject: CN=a76177d5e23e1c3d60fce891d8f771707cb194d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:8f:7e:26:ea:c3:f6:c4:17:d2:e4:8b:25:
02:e1:15:ac:dc:a3:30:c2:bb:e9:03:89:bc:d4:dd:
27:1c:fe:4e:d2:fe:2b:11:87:67:21:8a:1a:b3:9e:
9f:73:2c:fa:3a:7c:94:4a:c5:39:11:ee:44:c3:27:
d7:ee:88:51:b8:45:ad:9b:7b:0b:eb:eb:a7:78:e0:
51:ab:e9:75:10:92:ef:d4:fe:b2:99:64:be:34:9c:
66:f4:5b:ce:ac:52:5e:64:e1:91:44:a1:66:c6:2c:
67:51:f4:d8:e5:08:17:08:3b:ed:6b:11:93:7f:2c:
f4:b5:82:f7:82:bd:9c:04:b8:39:4c:dd:2b:93:83:
ca:34:7a:c3:5a:20:e7:9f:ba:00:38:86:a0:01:37:
23:af:9e:b0:71:71:8e:34:a7:2e:51:de:fa:bb:69:
14:7a:e5:b5:14:70:20:80:d5:01:41:61:15:d8:0d:
0e:4f:47:93:9c:f8:98:7f:ff:1e:f3:70:2f:8e:45:
c7:e0:87:1a:8b:e9:ba:c2:19:a5:0c:0b:cd:28:8d:
b0:b4:6d:99:56:bd:3d:74:20:d7:95:13:dc:86:70:
85:35:48:4d:cd:33:1b:0b:72:de:63:96:62:26:f4:
5d:3d:58:95:91:93:1b:da:9f:0d:26:9d:8d:e8:18:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:61:77:D5:E2:3E:1C:3D:60:FC:E8:91:D8:F7:71:70:7C:B1:94:D2
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:08:03:99:76:b0:ed:ac:26:3e:18:39:dc:42:8d:0a:84:32:
6d:71:d0:48:94:bc:9e:7e:1a:ff:77:2f:0e:b6:af:db:97:e4:
48:c8:44:13:35:7e:50:34:15:e8:9b:b1:a2:ab:30:c0:67:d7:
20:0f:81:0f:ba:d2:f3:fe:2a:fc:e7:e1:be:c4:d2:ff:df:71:
2b:7d:cb:5e:b5:bb:c7:79:4b:e4:7a:76:71:96:f0:82:f1:1f:
c6:91:ba:89:c1:97:fc:73:33:0a:7e:a7:ef:47:54:29:1b:f4:
84:a2:ff:c2:b0:22:e5:5e:73:a2:db:d2:b8:3c:1f:de:45:dd:
38:a7:59:46:82:fc:b8:78:63:6f:41:6e:1e:06:13:fa:06:b3:
c9:f6:71:83:74:f0:43:b1:26:d7:50:ad:88:ff:ed:7d:6c:ec:
70:ac:ae:a6:bc:5c:ed:8b:f8:49:10:37:e2:5b:9b:b7:0b:88:
bb:68:58:c7:e9:03:f4:d7:66:39:9f:fc:16:27:d2:69:e5:11:
85:5f:50:5b:e5:1d:66:71:f2:80:32:bf:41:00:42:07:cf:29:
8a:96:54:e4:44:28:bc:92:f6:76:2e:1b:ef:15:d1:6e:29:94:
49:ea:51:b4:73:0e:34:f8:21:30:be:93:07:ea:15:95:f4:e3:
71:3e:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:59 2026 by rpki-client