Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: qBoqrSJqrpTSYBhCEePY9FYtSEIitWkl+r3oHIaf/XU=
Subject key identifier: FD:76:22:B6:20:51:E8:97:67:A1:A5:12:B1:BE:F1:BC:8F:B2:12:BB
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019D051D071E0FF33B945A62EB6380EEA2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 1879
Signing time: Thu 19 Mar 2026 08:01:21 +0000
Manifest this update: Thu 19 Mar 2026 08:01:21 +0000
Manifest next update: Fri 20 Mar 2026 08:01:21 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: TieymtSgpkwmo5h6MWgM+6XwobTSQMKscfIoNHGh4XY=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:1d:07:1e:0f:f3:3b:94:5a:62:eb:63:80:ee:a2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Mar 19 08:01:21 2026 GMT
Not After : Mar 20 08:01:21 2026 GMT
Subject: CN=fd7622b62051e89767a1a512b1bef1bc8fb212bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:69:e1:46:35:88:b2:01:19:f5:71:af:0e:
22:c4:87:fe:e4:1b:c5:21:16:35:f3:8b:b2:93:a4:
6b:16:24:34:86:8a:15:a4:8c:54:89:d8:a8:a7:75:
fa:57:4f:33:3f:04:4c:d5:c5:c9:55:7e:aa:28:6d:
54:54:41:d6:20:25:50:f5:d7:63:01:57:31:7b:8b:
5b:ee:44:3d:3f:06:14:03:72:a9:29:3b:87:d5:09:
f1:ad:dc:42:83:e5:1c:0e:18:f5:a9:2d:47:5b:bd:
74:59:76:ae:b9:9c:3a:f1:7a:cc:ae:41:05:94:52:
29:d1:c0:99:d6:3b:1a:92:94:f6:53:2e:3a:2a:d1:
cb:23:bf:60:81:28:b5:f6:e3:d9:8a:62:04:eb:77:
29:29:ea:44:a8:56:ef:99:4a:a6:2b:dc:55:3d:9f:
ae:c2:6e:c1:ab:6c:ee:7c:5f:a5:4c:d1:7e:41:b2:
fe:a3:0b:90:4a:43:71:7a:b2:20:95:01:9f:0b:4a:
4a:a2:fd:86:d9:fc:a4:ea:85:af:18:ca:83:ec:56:
76:b8:62:f9:2c:44:f0:73:ce:c4:66:93:9d:f3:9d:
87:fb:38:c1:cf:e5:b9:e9:5f:b0:9a:d4:65:aa:1d:
ce:c6:17:20:7b:8d:d8:87:52:d9:b8:b7:05:5d:e1:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:22:B6:20:51:E8:97:67:A1:A5:12:B1:BE:F1:BC:8F:B2:12:BB
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1c:b4:6d:a8:ff:8f:21:48:11:bd:40:86:0e:41:84:d1:71:
2c:db:fa:0f:15:02:3b:8d:9e:9c:0d:ef:42:1b:ff:9c:17:e8:
20:ee:58:2f:c7:66:8e:8f:0c:e2:47:3d:31:7f:97:55:89:0e:
a0:5d:2c:18:5c:ae:42:01:52:e2:81:0e:36:2e:50:ce:b4:29:
b7:e7:56:5c:09:f6:e0:a7:fc:2d:64:d4:d2:29:d8:cf:5f:bf:
26:7a:f5:18:ea:4d:81:c8:63:45:4f:23:73:52:11:cb:3c:74:
32:96:0b:15:4f:cb:86:8b:de:42:86:c2:71:85:c6:c9:02:fb:
a5:a3:f0:30:67:4c:ce:40:be:3c:17:06:83:cf:1b:7b:0b:84:
ca:c9:cf:07:15:c9:03:89:f9:5f:6a:be:8c:6c:f4:9c:ee:49:
f4:ff:57:08:65:bf:8d:fe:f7:e5:14:9c:76:2d:61:c1:f9:c3:
f7:c1:f1:df:46:53:af:10:d9:02:f4:fa:7d:16:d3:cc:22:9f:
c8:42:1f:ea:1f:99:36:60:63:7c:c0:62:f3:a7:01:4e:af:fe:
87:5f:9a:81:8a:09:8d:bd:cb:bf:10:e5:49:1f:d4:08:72:dd:
aa:d0:7d:8f:57:26:18:b1:50:78:22:6e:b5:56:d5:2d:80:20:
8d:60:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:30:43 2026 by rpki-client