Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: FCyO/w+klXZdqqqoOf1HEbGFEWf1werPRoJ/iLE6maQ=
Subject key identifier: 79:C8:C9:1C:39:D8:B9:CE:C2:13:BF:FE:3F:A8:B7:E9:03:B4:BC:99
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 019CAC103FC467A707DD1FE4263DD24EC738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:01:11 +0000
Manifest this update: Mon 02 Mar 2026 01:01:11 +0000
Manifest next update: Tue 03 Mar 2026 01:01:11 +0000
Files and hashes: 1: WlS5ojL7gDl1onOWJD5o8wyANuo.roa (hash: NX+jbIhhBEnEZTj9qhHO6FgUtaMrjfCgiQz82eLbv/s=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: bZ8xHq8JxRpEuRTeWhdXHicxdwL1kXLqnd0qkvBOZIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3f:c4:67:a7:07:dd:1f:e4:26:3d:d2:4e:c7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Mar 2 01:01:11 2026 GMT
Not After : Mar 3 01:01:11 2026 GMT
Subject: CN=79c8c91c39d8b9cec213bffe3fa8b7e903b4bc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:45:2b:13:18:5e:8e:77:12:2a:41:87:36:bf:
a7:1b:99:23:fc:2f:b9:22:55:26:ae:50:a0:b0:56:
d8:7f:f9:1d:78:ad:22:55:55:98:f4:c3:16:73:35:
7f:5d:b5:a0:38:67:39:1a:8b:4d:35:13:e1:02:22:
7b:83:cc:df:83:fc:52:62:72:39:82:37:04:7e:0d:
0c:36:0a:cd:29:02:99:77:c3:c7:67:df:3f:17:c9:
e1:37:a2:03:30:58:8f:64:ac:44:72:0b:4b:3b:56:
90:49:15:4c:60:28:3a:ba:46:15:a1:4f:a9:e4:cb:
87:fd:9d:34:2c:5d:2e:7e:a4:d5:07:b2:97:14:33:
a6:97:71:c7:72:89:5c:40:e9:4c:97:4f:b6:59:c3:
ec:7e:ce:fd:70:67:4a:4a:df:04:08:7c:8c:2f:1d:
f1:a2:22:ff:6e:41:c5:9b:8f:92:e1:ac:be:32:bb:
d5:6c:94:56:5c:6b:6a:5e:45:0d:fd:f2:42:36:1e:
77:fa:3a:da:e3:d5:62:13:0f:82:d4:48:a7:f5:8a:
20:c3:ee:7f:d6:2c:65:1f:05:15:0b:af:48:3d:1c:
05:15:f4:4d:9f:54:20:11:1e:12:4a:c9:aa:1d:52:
1d:35:2b:2f:02:00:a5:42:d7:1b:f1:08:26:67:20:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C8:C9:1C:39:D8:B9:CE:C2:13:BF:FE:3F:A8:B7:E9:03:B4:BC:99
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a6:10:f2:db:6d:7b:71:3a:46:9e:e0:8b:08:b2:32:6d:e5:
fa:3e:57:a7:ee:ca:54:09:16:7a:d1:d4:3d:c0:44:01:39:e3:
eb:d9:73:be:0f:8d:27:96:8c:d4:ac:98:e1:1f:83:d3:6f:34:
86:93:09:9c:33:50:c0:01:c0:e7:59:cf:f6:e8:87:88:ae:c1:
d2:91:24:17:b7:e7:a0:38:fa:90:95:6a:03:f9:33:f5:c0:92:
6f:56:1c:54:1f:cb:35:94:f0:1e:41:30:01:2a:86:cc:c1:a2:
84:c4:1c:25:63:70:f7:eb:76:58:da:75:19:24:ac:83:78:dc:
39:eb:47:cd:b1:85:1d:97:28:88:e8:b8:4a:cc:16:83:ac:db:
3b:fc:1f:cd:bd:ac:df:60:c5:8b:e5:eb:72:4e:55:72:4a:f1:
1a:6b:b0:00:52:43:8d:a7:49:e2:a8:5f:dd:49:d1:40:9e:db:
09:6f:83:c5:95:7d:0a:25:84:4d:e1:5b:b9:03:95:79:f1:98:
d0:ec:48:fd:8a:5b:12:e3:2d:b8:2a:b9:b8:e0:f4:44:26:bd:
26:50:43:c9:11:db:86:df:a4:78:55:f6:25:22:65:2e:16:67:
47:3e:04:78:86:4b:69:71:19:7f:09:b0:24:ba:f9:89:88:a6:
64:09:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:52 2026 by rpki-client