Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: dhj9EgE1Aur0Le7EoUGpvDs1xEvALugkvnMDN3pvT7s=
Subject key identifier: 0B:32:36:4D:5E:55:0D:7D:A1:5E:1D:0D:7C:B2:26:32:9B:C3:3A:21
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 019CB926E4F169DE10A1128D06115E607E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0DBE
Signing time: Wed 04 Mar 2026 14:00:59 +0000
Manifest this update: Wed 04 Mar 2026 14:00:59 +0000
Manifest next update: Thu 05 Mar 2026 14:00:59 +0000
Files and hashes: 1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: 8/PE8f18A8grHr2kY83Nh4Ld3xDCLm+8z6x8IxNPMdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:26:e4:f1:69:de:10:a1:12:8d:06:11:5e:60:7e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Mar 4 14:00:59 2026 GMT
Not After : Mar 5 14:00:59 2026 GMT
Subject: CN=0b32364d5e550d7da15e1d0d7cb226329bc33a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:dc:80:fd:ca:69:82:ee:3d:d9:12:05:ab:
9a:39:5d:ec:f4:cf:bc:cc:c1:ff:cc:c2:22:84:b2:
73:46:70:94:de:72:64:cd:17:36:be:15:a4:b7:fd:
fa:e5:e6:f0:31:16:f8:e7:01:6c:b4:e1:aa:bf:89:
2b:1c:33:ca:08:af:d8:3b:aa:4f:ef:93:f1:26:8b:
cd:63:37:b9:43:36:2b:21:b1:0d:7b:8a:0a:8d:01:
47:e9:da:9a:a9:8b:eb:d4:7a:22:68:ed:4a:e3:93:
26:35:11:d9:ce:b4:bb:ce:03:5a:61:43:3a:c4:02:
1e:43:60:d8:2f:68:f0:35:71:c1:7f:2a:a8:e7:ef:
34:ce:f2:ec:1c:0e:5c:dc:5e:a7:ed:22:1d:ce:a4:
59:7a:a4:04:2e:5f:8a:9f:a3:42:95:6e:bb:05:33:
8f:4d:ca:56:95:9c:17:ee:2b:20:c3:12:0d:05:67:
85:f6:7f:fb:58:83:24:57:7c:97:92:f5:84:ea:a3:
f3:3d:72:41:df:7a:f2:39:1b:3c:84:81:dd:39:00:
5d:54:f9:d7:62:12:a9:fa:27:b1:83:a1:ec:0e:31:
29:80:29:95:6d:01:eb:0d:51:98:0d:0f:81:5d:2a:
6a:70:c3:ac:f3:e1:39:cd:c7:44:c6:8a:6b:3e:0a:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:36:4D:5E:55:0D:7D:A1:5E:1D:0D:7C:B2:26:32:9B:C3:3A:21
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8d:24:ab:1e:7a:f9:ab:4b:3d:bc:d7:75:12:10:ad:5e:87:
cd:01:59:95:f6:e1:fb:ef:a8:23:87:f1:b1:22:81:25:a0:7a:
d2:95:63:30:94:9b:d6:76:76:80:a6:fa:53:54:33:0a:6e:e3:
97:44:98:6c:ff:d2:49:e6:99:c1:da:cf:1f:f4:43:7c:d1:08:
de:8b:36:da:fd:7b:d9:4d:9d:e8:f1:9f:e1:e4:79:0c:8b:47:
c3:49:12:b7:12:49:4e:16:37:ca:b5:fb:95:9a:5c:ee:ce:bd:
35:f9:5c:ff:77:32:b4:18:98:b9:4a:76:cf:ef:fa:f0:57:19:
3a:eb:6d:7b:89:ab:11:d8:4f:8d:f9:33:0a:e5:12:be:f6:61:
f5:9a:f3:63:b5:9b:c3:81:a1:18:e1:cc:35:c9:b2:f9:7a:e4:
3f:1f:77:18:1c:0d:b8:01:ca:40:20:ac:08:56:28:31:58:41:
c3:aa:33:45:ed:95:b0:2c:9a:88:55:96:e7:62:12:6b:ce:4c:
b9:cd:7c:09:3e:35:8e:9d:6d:f7:97:ea:bb:1f:d3:46:11:0a:
94:f9:74:68:7f:c4:9c:ed:cf:22:17:19:9f:24:38:36:75:14:
dc:16:55:75:41:cd:37:71:d4:69:a4:94:39:5c:05:68:ad:43:
01:58:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 23:40:39 2026 by rpki-client