Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: 3R9InR406px4OnIro1M+1T2TACpgxku1oJauoNGi6sk=
Subject key identifier: F3:69:34:93:93:EB:6A:2C:E8:60:0D:33:8E:81:0D:93:70:28:A6:82
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 019CD87AB98322C5A5358BB22E528E8BAACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0968
Signing time: Tue 10 Mar 2026 16:00:47 +0000
Manifest this update: Tue 10 Mar 2026 16:00:47 +0000
Manifest next update: Wed 11 Mar 2026 16:00:47 +0000
Files and hashes: 1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: XJQLLLRWw4vcJao4OaZJuZ4aL3rtGdRuHjOHcb1BFZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:7a:b9:83:22:c5:a5:35:8b:b2:2e:52:8e:8b:aa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Mar 10 16:00:47 2026 GMT
Not After : Mar 11 16:00:47 2026 GMT
Subject: CN=f369349393eb6a2ce8600d338e810d937028a682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:24:1b:db:ad:1b:ef:54:75:a0:8a:9a:f8:
33:bc:a9:6e:b9:db:86:3d:14:c6:8d:ed:3a:98:08:
5d:c5:63:ac:f0:f8:ff:9a:c5:ce:88:90:ae:29:2a:
e2:f5:5e:f0:71:3a:75:3d:ea:4e:25:2b:30:4e:ff:
3b:77:fe:ee:ad:9b:02:bc:39:3d:f9:b3:87:5e:fe:
c1:1b:9a:7f:53:2e:d5:3c:30:73:85:73:e9:95:80:
13:c0:f3:ae:1c:e4:70:45:02:64:03:a0:77:84:04:
c6:64:8a:74:a8:93:35:38:e4:fc:be:7c:5a:ec:88:
65:12:1c:05:4b:6c:c2:e3:d4:ef:8b:25:97:23:c3:
b5:3f:97:f9:ac:63:a9:49:17:c9:81:79:77:55:d3:
93:ed:94:b1:b9:c3:eb:ca:a2:91:24:77:e3:d5:7c:
8d:24:d3:55:e1:9e:26:07:48:f8:7b:c4:03:43:5e:
44:be:2a:35:e3:fa:48:85:c0:61:98:0c:50:18:d2:
53:5a:a9:dd:9e:c5:f8:be:ee:bd:3c:7a:62:e3:41:
f1:8d:77:f4:c6:ba:42:b5:0d:04:e3:47:11:4f:2f:
61:04:f5:7b:00:8a:7a:b6:06:c9:e4:6c:8b:e4:b3:
2f:d9:cf:d8:3f:4e:e3:b1:4a:99:cc:f1:a5:42:21:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:69:34:93:93:EB:6A:2C:E8:60:0D:33:8E:81:0D:93:70:28:A6:82
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:56:44:38:e7:4e:72:2a:c3:ae:61:01:33:15:86:15:5a:6e:
98:1a:6a:2b:ea:0e:64:42:52:41:ec:02:b2:3d:01:40:cb:a4:
eb:ff:d8:05:31:2b:70:b7:3c:16:bc:02:98:f3:81:b6:61:65:
a3:a6:e6:4d:d5:88:26:8b:f5:e3:a3:f1:fd:97:41:46:81:dd:
cc:e7:38:94:dc:83:6b:cc:24:be:a7:bd:95:91:1b:8c:2a:74:
e0:2e:54:ca:fc:d0:fb:dc:50:07:d7:4f:8c:ba:a4:c9:fd:5e:
7d:d2:1a:39:3e:8a:33:17:f4:65:ed:cc:46:8a:79:35:df:2a:
9b:ee:cb:16:19:a4:29:63:34:31:48:ea:f7:2b:74:71:16:12:
da:ec:6b:7a:33:23:0b:3e:74:c0:ec:69:a7:a7:4b:6e:42:4e:
a7:89:13:08:55:be:b1:b4:5f:f1:b0:f2:ef:ee:d1:79:0b:4c:
91:ae:15:ec:a6:5a:bd:8b:1d:23:db:7f:99:fa:43:eb:42:29:
34:a8:a0:fc:da:4e:69:0f:a5:91:94:14:13:65:ff:10:22:67:
42:fb:83:a1:08:06:17:84:08:ea:11:1e:40:69:8d:6b:dc:ff:
3d:22:27:61:48:5d:9f:dc:13:a8:b2:bd:8e:1d:7d:8f:54:73:
f3:e7:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 18:28:17 2026 by rpki-client