Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: aGVtVfCbu/vVg6HlYWRhE7UiHyxOlE2UBID2Vw/8C1I=
Subject key identifier: E0:81:A9:94:68:95:DE:19:5E:C0:F1:F3:CA:80:E5:35:E1:B6:DB:47
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 019CACEB76D9F7140D13827CACBD95408971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 039E
Signing time: Mon 02 Mar 2026 05:00:38 +0000
Manifest this update: Mon 02 Mar 2026 05:00:38 +0000
Manifest next update: Tue 03 Mar 2026 05:00:38 +0000
Files and hashes: 1: A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa (hash: CndX469kMgFnIGnFVgAv1uwBMzZ+jqdPFxwbzTu/wnQ=)
2: Trft0mfWMMwOx--8rqClEKwipxA.roa (hash: 3nok9je6KT8Wv4gKkH7HIrIIK5LI+Nl8LWES2R/jXQc=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: UsEuhmmYIfnkxnAXBDSi5BiG6iNTkSwb6JyQYtCxTm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:76:d9:f7:14:0d:13:82:7c:ac:bd:95:40:89:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Mar 2 05:00:38 2026 GMT
Not After : Mar 3 05:00:38 2026 GMT
Subject: CN=e081a9946895de195ec0f1f3ca80e535e1b6db47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e4:5b:e3:35:ea:c4:c0:4b:f8:5d:b2:e8:5c:
ea:6e:be:31:a0:c5:21:24:83:0b:59:c7:f6:53:23:
eb:c7:42:bb:31:7e:a4:71:60:ad:b4:4f:0f:a0:30:
24:5c:ff:de:f2:56:4b:c5:ac:f1:43:ff:bb:94:6f:
0c:e8:95:56:72:0f:49:b8:67:6a:d1:f3:76:31:e0:
90:ad:b8:5d:4d:e8:ec:bc:57:51:34:40:e0:36:b5:
b9:80:f8:28:e2:23:ad:6f:f8:07:1e:42:b6:14:3a:
4a:87:2e:53:4d:29:01:36:67:f5:d6:e0:94:b8:56:
42:48:5b:48:aa:56:e3:03:0d:0d:b3:b9:7f:00:92:
c9:ec:9f:83:57:ef:c9:21:10:44:cc:49:73:b2:b2:
6c:f3:24:90:a2:22:84:c8:68:a8:fe:5e:66:00:93:
b6:9c:1f:af:0c:9f:b9:5e:3d:91:8b:f2:9e:0d:a2:
25:70:aa:72:b6:09:61:66:4c:61:f4:48:f0:41:07:
e2:62:0c:d0:02:98:b6:e9:58:14:a3:f1:d5:15:ff:
a4:a4:84:2a:c6:16:3a:4b:f8:e3:8d:25:c2:f7:7a:
4a:64:63:25:70:6f:30:3f:d8:37:89:09:c0:1e:f5:
38:54:3a:9f:ee:43:34:86:4b:7e:7f:80:08:aa:b4:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:A9:94:68:95:DE:19:5E:C0:F1:F3:CA:80:E5:35:E1:B6:DB:47
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ef:6f:71:06:87:53:c0:6a:8d:85:db:9f:6f:40:60:00:0b:
f0:90:46:cf:f5:4e:d2:60:8e:06:c2:3c:51:c6:c8:ac:a8:12:
02:f2:9c:db:dd:57:b4:37:36:f8:9e:f4:04:a3:c7:b3:d0:b4:
93:e8:2f:60:71:06:7b:95:99:d8:b8:3b:7e:25:df:71:48:85:
2e:8b:77:dc:0d:6a:76:23:28:77:31:0b:32:f3:31:8d:97:ee:
92:94:cb:01:bf:5e:4d:95:d0:7b:05:ee:c5:6c:0f:4c:10:30:
f5:d1:16:bf:f8:56:67:26:bc:ab:50:28:7a:e3:cb:c3:e2:3e:
6d:52:79:90:84:56:37:da:a4:5a:c8:8a:6c:62:10:1a:39:c2:
90:01:39:56:07:3f:89:48:4f:d7:95:16:ce:2c:54:bb:95:66:
cf:48:b6:22:a4:27:d2:78:c5:ea:99:fe:9b:25:67:a3:07:dc:
1c:b0:21:ab:24:a4:0f:8f:04:a1:ac:eb:89:76:24:08:b4:78:
92:b7:63:32:9e:1f:23:e1:4a:20:ba:78:03:a7:d5:28:05:00:
0e:f0:21:80:8f:c5:c0:fa:f9:af:7a:e0:60:cc:26:ae:e8:82:
8e:9e:2d:f3:97:f4:7d:6c:23:4e:cf:2f:77:14:1f:08:89:4f:
3d:af:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:58 2026 by rpki-client