Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: ngt5uLVybhYNyYr4q0XMMExNZpnxBvbipcuBSYtMVhE=
Subject key identifier: 0A:EB:C0:2D:CA:AF:F6:1F:26:14:82:5C:B4:39:2E:D9:AE:BF:CB:6C
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019DA90C23173BAD73B09C0B6903C37B993D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 0342
Signing time: Mon 20 Apr 2026 04:00:37 +0000
Manifest this update: Mon 20 Apr 2026 04:00:37 +0000
Manifest next update: Tue 21 Apr 2026 04:00:37 +0000
Files and hashes: 1: ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa (hash: 11RGKugOQUaTnt/hJwS9BTO4yUW3mvsWT6IHYcZEL9U=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: SbgFwkh7Ay3yaH199wSY3Koj055HS/+DHiqjBhusa/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:0c:23:17:3b:ad:73:b0:9c:0b:69:03:c3:7b:99:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Apr 20 04:00:37 2026 GMT
Not After : Apr 21 04:00:37 2026 GMT
Subject: CN=0aebc02dcaaff61f2614825cb4392ed9aebfcb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:04:c5:eb:e8:d9:30:29:59:99:28:5e:19:
00:e2:10:2a:d9:18:82:d7:84:59:49:b4:a5:12:7a:
cf:e6:7d:f6:41:01:de:c6:1a:66:7e:e9:a2:bf:42:
fd:64:85:f8:21:bc:cf:28:89:ab:1a:6c:47:03:ee:
04:71:37:b7:ef:89:10:ba:11:b6:22:1d:f8:6a:89:
cb:2c:00:b6:ad:ae:01:01:16:a9:78:2c:b3:26:23:
ec:29:e5:a8:06:81:a2:a2:a4:c5:07:12:2c:35:eb:
d0:aa:e1:ab:9b:5b:a5:d8:fe:f3:4f:9d:8e:fa:d4:
3e:f9:a9:6a:bb:01:fe:03:cd:50:6b:92:d8:5e:ab:
9c:95:05:cb:49:02:27:60:6f:d7:6f:5d:b4:46:93:
96:5e:9d:3f:24:2d:34:08:9b:8f:f1:5c:a1:dc:9e:
74:63:0d:85:e3:0e:08:77:1f:32:03:45:f8:c7:80:
52:41:ad:b3:a8:22:a9:dc:0f:da:45:0b:96:26:32:
b9:1f:dc:f7:bc:d0:2d:b8:0e:46:64:22:ac:4d:d3:
11:35:06:09:f7:a2:77:b1:4a:e8:54:83:54:74:1c:
58:f7:4e:3c:a0:43:ed:ac:04:bb:d5:31:4f:28:ec:
b1:44:90:34:ad:fb:f6:ab:ff:4a:a1:b5:a2:80:0b:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EB:C0:2D:CA:AF:F6:1F:26:14:82:5C:B4:39:2E:D9:AE:BF:CB:6C
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fe:4d:8a:9e:75:fe:9b:9d:54:d2:70:c7:4d:bb:20:5a:bf:
f6:f4:14:86:64:75:b6:bf:8e:05:2e:a7:8f:0b:53:4f:91:db:
37:b8:23:24:dc:b3:ea:42:84:f8:0d:fa:74:33:4f:ab:2c:6e:
7a:cb:a5:84:98:f3:5a:27:02:2d:62:7d:f9:66:a9:15:53:5d:
7c:7a:9e:d2:69:e0:e6:20:4d:df:11:1b:fa:37:33:8d:d8:09:
d7:86:d5:c6:36:30:f1:33:a7:7b:59:b3:76:da:5b:60:34:b5:
5c:69:5e:8a:78:b0:04:78:37:48:2a:84:bd:7c:ad:4e:9a:23:
1d:24:8e:2d:e9:f7:70:6d:90:67:fc:bb:89:7d:1c:ff:c1:c6:
9b:b1:5b:7c:f9:56:47:5d:8c:c8:33:2d:eb:d3:46:61:47:1f:
ae:71:36:3d:ce:10:b5:c3:97:6f:0e:9f:aa:dc:3d:6d:c5:7d:
3b:81:52:38:2b:51:c5:5b:19:df:48:2b:3b:a8:df:4c:d2:d7:
15:c2:57:6f:6d:3a:38:ce:39:a3:e8:f1:7d:98:8f:22:5e:b5:
92:d2:f8:12:ad:20:e3:bb:55:f4:79:8c:1a:e7:fa:f2:fc:52:
ff:46:8c:9d:99:26:91:ab:23:88:91:c1:ca:e8:4d:0a:4e:72:
f3:87:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:42:44 2026 by rpki-client