Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
File: qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json)
Hash identifier: k1fm2bHNZZNcMeHNKgeFVTJQpJNzlY5KpU6phMfq+AM=
Subject key identifier: 8B:B2:72:A2:D4:F3:9B:F2:8E:76:E6:6C:15:BD:62:8B:B9:B0:EE:84
Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Certificate serial: 019CB8821B070ADCDCEA7894ED2D433330D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
Manifest number: 0102
Signing time: Wed 04 Mar 2026 11:01:00 +0000
Manifest this update: Wed 04 Mar 2026 11:01:00 +0000
Manifest next update: Thu 05 Mar 2026 11:01:00 +0000
Files and hashes: 1: 0Ls74XbMffGVDMxDWUzqk8rXfpg.asa (hash: ArBNl1lSF8AHI2rhog081GUWVnhBOxqLulK0sjaGNto=)
2: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: LoiRDOmmc+3dPB/N0ZWBeGwO6J2Urqaudo4R7jR0nsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:82:1b:07:0a:dc:dc:ea:78:94:ed:2d:43:33:30:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Validity
Not Before: Mar 4 11:01:00 2026 GMT
Not After : Mar 5 11:01:00 2026 GMT
Subject: CN=8bb272a2d4f39bf28e76e66c15bd628bb9b0ee84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:0e:04:8c:0f:3c:8b:e1:c0:c0:b3:cd:f1:
b5:46:f5:43:74:3e:ed:3a:94:36:e9:2e:96:7e:5d:
78:a4:ad:c9:5e:db:9c:42:df:32:0d:59:df:69:c3:
c2:1f:fb:7a:f9:22:98:10:62:73:c1:59:7f:0b:e0:
c3:c6:34:1f:e5:d1:3e:44:ef:8a:23:07:dd:65:19:
bd:21:db:c2:b8:96:3a:f9:ab:d3:25:2e:f5:61:f0:
8e:bd:4d:d3:4f:55:9d:4c:cf:74:5f:88:16:a7:41:
90:1d:f2:84:05:0b:8e:8a:e0:7e:95:d9:27:1e:57:
db:aa:04:bd:fc:54:c3:14:24:4c:99:26:30:cf:1e:
7b:e6:86:05:c2:c9:05:74:00:c3:0d:62:fa:ab:82:
5c:1a:08:a3:0d:e8:a9:a0:e4:a7:e3:19:ce:79:79:
70:37:bd:3e:9c:fa:36:34:f5:8d:56:2d:19:2b:ff:
d1:ba:96:1c:82:9f:4d:5c:90:7c:7d:e9:ae:de:d0:
1c:f0:4d:39:4b:bb:93:ff:83:be:e5:b5:92:c8:42:
70:8d:66:64:65:ef:22:48:79:9c:05:26:0a:3b:10:
70:17:84:d7:71:b8:7d:cc:ab:1e:7b:f5:5e:2b:ba:
0d:b7:18:64:c7:5c:1c:00:56:87:42:b4:7f:bd:f4:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B2:72:A2:D4:F3:9B:F2:8E:76:E6:6C:15:BD:62:8B:B9:B0:EE:84
X509v3 Authority Key Identifier:
keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0e:72:51:43:0e:cb:85:c8:b0:82:73:62:e4:bc:ca:b2:b2:
88:c7:f1:c9:95:8f:08:a3:df:bd:f0:af:e0:0a:a7:17:8a:56:
33:92:b1:bf:22:3b:cc:14:10:2a:94:ac:81:a4:93:1b:3b:b3:
7d:2a:6e:3a:6e:9b:af:06:db:d2:d6:6d:a3:9a:c9:a5:c5:e2:
ff:d5:6b:df:6d:5e:5d:2d:59:87:76:8a:7b:0f:2b:ef:b5:07:
49:41:d2:a1:72:22:2b:6d:ef:a0:d2:16:be:7d:29:db:40:c4:
fb:1d:b1:bd:44:43:9e:e5:88:48:69:b1:d4:fe:ca:ef:c6:fc:
9f:12:a5:b2:72:50:d6:52:fd:2b:ee:61:e7:b5:03:9f:04:53:
9b:34:2d:45:e2:bf:15:83:48:1e:35:89:d2:c5:e2:28:52:d5:
31:00:cb:bb:00:6d:08:d3:11:97:03:68:d8:ae:45:48:24:32:
21:95:67:65:b7:6a:8f:fb:98:a7:20:69:05:26:16:56:94:52:
2c:c3:a1:75:9e:96:d8:a4:a9:44:de:39:04:c7:d2:8f:33:d2:
87:4a:eb:d5:51:38:1d:6e:f6:7d:0a:1a:65:22:a9:91:97:72:
65:34:c5:4f:e3:03:02:e2:ad:d8:b7:87:0a:f1:1f:f1:32:c2:
f5:08:f6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:25:19 2026 by rpki-client