Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: BS17afaidXDd3ZH+CbBG/6SB6uvpQkbF4ob0rcgzLuw=
Subject key identifier: E3:09:C0:89:CC:F3:17:7D:17:05:C2:E7:E3:25:2E:7D:E7:37:CE:52
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 019CC9ACB0ED0E552C827DF93BD8933AB4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: 0258
Signing time: Sat 07 Mar 2026 19:01:03 +0000
Manifest this update: Sat 07 Mar 2026 19:01:03 +0000
Manifest next update: Sun 08 Mar 2026 19:01:03 +0000
Files and hashes: 1: TvCeC-CTMvUOvfqvZDepdi4lqnQ.roa (hash: ESVtJ3kouBpjTr4WqJWzhzotaZoW4Cj/KB3SLHg/1MA=)
2: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: CaO6cqFw5raIVZDbD05pFKYqc+nXNtiRV3XUYR3/Res=)
3: yQ4lwVZKtZ37ncDrw-J5ETPGiug.roa (hash: YOCERM8UiZIP0yKzgGY8Yras8dDVp4zqydgV9vmHZ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:b0:ed:0e:55:2c:82:7d:f9:3b:d8:93:3a:b4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Mar 7 19:01:03 2026 GMT
Not After : Mar 8 19:01:03 2026 GMT
Subject: CN=e309c089ccf3177d1705c2e7e3252e7de737ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:b7:b0:e3:a4:9c:dc:f9:08:3e:01:8a:87:
d4:9d:4a:34:3c:6f:0d:da:f2:ec:9b:18:c1:fd:8f:
28:2c:8a:34:e8:8e:3f:5e:94:c7:d3:31:a4:67:dc:
de:03:11:e5:64:7d:5d:e1:83:e0:36:12:33:57:c4:
2d:a5:18:2e:2f:87:dc:0d:33:d7:37:c4:f7:be:cf:
ac:74:d7:5e:3a:6b:da:46:ea:a2:41:fe:c2:cc:64:
10:65:ec:fd:0a:f3:81:34:e5:ac:62:df:12:45:d4:
ab:11:b5:d3:c1:16:87:18:19:31:90:19:b8:3c:92:
3b:a0:44:93:35:dc:6a:db:16:67:34:56:2a:85:c6:
ed:b0:15:e7:64:c9:fa:fe:ca:8f:c9:c2:59:1c:4c:
d0:55:13:58:e4:ba:32:00:39:cc:c5:d3:ff:be:a8:
a4:ca:bd:01:c4:50:eb:c5:3d:92:96:46:07:44:57:
b7:5f:9b:4b:73:4a:1a:ea:8d:3b:05:5c:fb:db:49:
5c:88:95:5c:61:91:f3:11:b2:68:7b:72:ac:80:56:
ab:f5:d3:63:3b:48:4c:67:86:38:a8:10:b5:4d:45:
ab:7d:02:98:9e:23:20:61:45:2c:f2:3a:0e:6b:cb:
57:22:94:ec:a5:b5:39:a2:d4:77:95:96:c9:d0:bc:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:09:C0:89:CC:F3:17:7D:17:05:C2:E7:E3:25:2E:7D:E7:37:CE:52
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fe:5e:41:5e:eb:1e:30:21:d0:fb:de:05:27:7e:00:1d:ee:
69:45:b8:90:7b:69:04:7d:87:48:e2:23:c5:ec:36:1f:1a:74:
01:49:d9:6c:9d:ab:2c:f4:69:08:e7:9b:fb:d2:c2:8f:a0:82:
cd:90:ec:85:2c:9a:6a:ea:e0:c8:9c:3a:14:cb:88:89:ed:45:
57:a3:ec:d6:2d:d4:34:86:67:18:e6:d6:06:f2:d6:11:26:ab:
f0:4d:6b:ee:df:f1:53:f3:4a:ad:11:a2:74:7c:1a:9a:30:9f:
be:30:90:c8:3d:1b:00:66:71:85:58:dc:f4:e7:74:43:7a:5b:
92:e5:9a:6d:cf:a0:3f:73:78:af:52:86:15:98:8a:d0:16:47:
a2:82:83:db:83:19:f1:86:f2:5e:c2:41:38:51:94:ce:9d:a2:
0f:c8:90:50:0c:c6:d8:d2:52:ba:b9:d2:5e:7c:ea:a6:48:98:
21:0e:52:d6:23:19:bd:0a:e6:8e:7d:f7:13:ee:43:92:ad:b5:
53:f4:8f:1f:2d:f3:7e:1f:65:de:e4:66:6e:d9:d2:72:75:70:
8d:4d:ae:ba:7b:4e:5b:f6:e2:a0:c0:75:bf:9a:78:be:99:0e:
27:f2:6f:60:57:96:7b:88:d2:d3:85:ed:66:cb:51:5f:0f:9e:
1f:47:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:26:51 2026 by rpki-client