Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: J0P7fGA32vlUkG1PGVepxA5q9CXP+pcmtGSutj1/qZE=
Subject key identifier: 6B:C3:4C:69:5F:99:EF:CA:06:0C:43:55:47:50:0C:42:38:9D:CC:5F
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019D37C077D1CE4B23DD1A51BF24664270DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 04:00:53 +0000
Manifest this update: Sun 29 Mar 2026 04:00:53 +0000
Manifest next update: Mon 30 Mar 2026 04:00:53 +0000
Files and hashes: 1: Fh3fxSNW3QZEpIYUfBjx_kqS2o0.roa (hash: DQ4/igbo+rv2kpc7T7st9wWdy+ENKm7eM93V1cXm0hA=)
2: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (hash: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=)
3: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: Q1rf7ruQMva+i969BSsn0hwg9YPUENH50gCiyTu2lYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:77:d1:ce:4b:23:dd:1a:51:bf:24:66:42:70:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Mar 29 04:00:53 2026 GMT
Not After : Mar 30 04:00:53 2026 GMT
Subject: CN=6bc34c695f99efca060c435547500c42389dcc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:07:19:5d:66:e7:7e:1b:4f:6c:df:e9:52:
fa:63:81:f8:08:18:80:90:f5:09:80:92:01:b4:9b:
65:fc:50:89:67:e3:1d:5c:8a:4e:3b:13:eb:95:b7:
25:6f:d8:a0:7a:7a:5e:60:dd:d6:ae:5d:fe:39:7c:
6f:27:fe:92:47:36:b5:e8:0e:ff:d6:c8:4b:2c:4a:
94:fc:0c:67:29:80:4e:3d:94:6d:d3:f3:c3:f7:76:
61:c3:2c:eb:1c:d0:3e:7b:99:a2:95:52:26:82:93:
e8:c8:24:cb:5e:5a:e0:9a:25:69:a7:1d:2b:53:84:
29:2d:c1:df:a6:4a:89:52:5a:f8:7b:5b:0a:fc:6a:
e9:a9:38:7a:c3:29:b0:bc:bd:e0:1b:73:be:97:2e:
51:92:4b:e3:c8:73:96:5c:e7:b3:74:fa:f3:04:34:
fb:78:21:08:c9:4d:74:55:5a:c1:a4:fb:4d:c6:0e:
e9:d4:d2:8b:e3:ea:62:4e:65:41:da:7d:e4:07:0d:
49:d8:f2:ef:b0:fe:4a:4c:6e:2f:cd:de:db:d8:ab:
dc:6c:74:a8:82:9c:b7:8f:ab:30:c3:e8:89:1d:6b:
09:4f:52:7f:c8:67:11:82:45:25:48:3f:80:d5:d8:
21:33:0d:99:62:a0:c9:91:96:39:53:34:26:8a:45:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C3:4C:69:5F:99:EF:CA:06:0C:43:55:47:50:0C:42:38:9D:CC:5F
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:a1:2c:6f:ac:8e:50:09:8e:c5:18:ea:2a:0b:8d:e3:f2:
83:f3:93:10:c5:94:c8:55:e4:57:b8:84:31:0e:77:b5:65:67:
df:d1:c4:fd:91:57:a4:bd:a1:f4:2d:68:3a:1a:ae:71:ff:67:
5f:73:1b:83:01:26:19:d5:c9:77:a9:3e:cf:a7:ec:46:58:30:
4d:76:e1:d2:32:4f:0e:cb:52:18:2b:c5:6a:80:cc:56:2a:12:
5c:4b:9c:4e:70:a1:6a:62:24:53:96:db:09:46:db:0d:72:17:
f4:b0:6d:bc:11:f6:44:19:bd:87:bd:15:e8:81:51:07:a0:c3:
93:b3:3a:b6:aa:2c:4a:89:47:cc:e7:10:23:27:b7:a7:32:96:
3b:9e:47:b1:1e:bb:30:0c:93:8d:37:30:c9:db:9a:49:15:e4:
c0:a3:2e:14:6c:f4:d5:44:a9:7b:72:76:a9:4b:34:f1:8a:d8:
68:a5:ac:6a:b4:e2:0f:81:5a:52:f3:f8:c3:ee:f8:8d:1d:e5:
2c:ce:5a:f5:37:f1:51:3b:b7:58:7f:03:13:19:3c:40:c9:21:
52:e5:7f:37:e8:a9:d9:92:3a:b8:ec:9f:87:52:63:07:dc:9e:
d6:4d:06:20:bf:af:7c:1e:5a:76:9d:d1:7e:7e:97:ea:90:d6:
0a:2b:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:12 2026 by rpki-client