Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File: qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier: qbxxTVqgyco4Y9GXi2N9Lvk6ajgW2ICa9NtE4RgzflU=
Subject key identifier: 95:E6:C9:F1:B0:EC:BC:E3:B5:13:61:68:D4:ED:47:B9:16:F7:12:9E
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial: 019CABD9C645E5AA63ED83E0DCCA74E10D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number: 0AFD
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: Lp85AzzgoJEBoaNwZvfesux7tGQHXQoMbwp9RWLsHzA=)
2: uLVt8T3d78JYSpR4LeS6qWguKcM.roa (hash: rBNYvMK4p3Mahw6EVTteREy0VbAJzYePOU2yB1g4AWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c6:45:e5:aa:63:ed:83:e0:dc:ca:74:e1:0d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=95e6c9f1b0ecbce3b5136168d4ed47b916f7129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:92:0f:52:ca:e6:a4:f4:e4:1e:18:a5:1c:
ae:23:60:18:50:6d:e2:5b:e2:23:a9:c4:55:06:05:
ae:6f:79:b1:e0:44:65:97:41:0f:7f:09:0e:77:25:
9a:67:bf:12:9f:30:53:e8:92:e2:10:6b:da:62:26:
f1:32:cc:21:75:be:38:4f:80:51:4d:8b:37:21:4f:
b5:0d:bb:b6:33:94:b5:bd:74:3e:b0:90:ca:48:43:
59:c0:b3:ac:26:da:a1:e4:e9:62:3f:2b:b4:f5:bd:
34:d0:62:d1:43:d1:9b:dd:a6:11:b0:a2:2a:90:86:
19:98:a6:26:fc:b9:28:e6:f9:fb:3e:a7:5e:77:5e:
e6:0d:4c:9b:f1:c0:9c:d1:30:18:9d:36:40:4a:61:
73:2f:de:fc:a5:12:33:b7:36:9d:da:cb:a3:1e:bb:
f4:f3:e7:5d:c7:d5:91:45:34:97:da:48:77:5f:56:
3f:d6:ee:54:76:92:30:05:e9:9e:56:a8:3f:36:d2:
c0:6a:4f:c2:93:35:b0:68:fd:a8:f9:49:a1:a7:2f:
fc:68:e9:21:aa:08:a2:af:87:ea:6b:91:ff:0d:1d:
f1:cd:28:20:0e:79:a5:42:a1:a6:b3:10:fe:bc:42:
11:98:89:8e:3c:66:34:02:d3:47:02:65:b0:36:e4:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:C9:F1:B0:EC:BC:E3:B5:13:61:68:D4:ED:47:B9:16:F7:12:9E
X509v3 Authority Key Identifier:
keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:57:4d:a6:e1:9a:88:35:ff:3a:d5:17:e4:ca:45:e5:64:44:
53:78:0b:ed:60:00:ad:df:6e:f0:9e:de:c0:89:b9:a9:82:c8:
64:c8:cc:3a:c7:3e:a5:6c:b7:cb:ea:ab:f1:db:4e:fc:05:6d:
ff:f5:86:19:1a:e5:1c:55:c2:90:12:b5:76:60:1e:df:c7:08:
db:83:30:16:00:f9:18:68:d8:d9:c6:ec:f5:7f:35:c8:84:6b:
be:47:d2:e6:70:83:11:40:00:aa:c7:ae:7e:06:62:b3:29:f7:
b7:db:77:d4:ce:ec:a0:78:b9:96:66:b7:cd:63:20:7b:85:58:
9d:6e:a9:70:ff:e5:c5:96:f4:8d:be:4b:c3:66:4b:4a:8a:5d:
fa:63:83:6f:0d:7d:0b:25:cb:53:f6:52:66:b9:da:a0:17:5c:
fb:b8:46:d7:49:b5:73:8f:3e:18:54:b4:09:23:15:ed:e6:ad:
c9:80:7d:45:47:e6:c3:b0:f8:84:30:19:b7:ca:57:e8:c7:78:
12:95:2f:d5:96:e6:94:f2:aa:a2:b7:66:76:a2:6e:7e:a6:79:
c5:32:9f:06:3d:ba:f8:69:b0:f6:6b:d0:ea:a9:e9:95:d4:ba:
26:14:2f:ae:f7:da:ce:d3:7e:fa:cc:b4:f9:80:41:83:8f:28:
94:0a:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:43 2026 by rpki-client