Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: Pjd8Minffk8sq4woLsKYKzDij5a+OCSqu23ZRP3vnDc=
Subject key identifier: 37:94:2A:A3:C9:F9:56:36:80:74:B1:A2:CD:52:0B:6E:1C:A4:39:19
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 019CE523C6CB9827F1A49A9AE15975423B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 17F5
Signing time: Fri 13 Mar 2026 03:00:52 +0000
Manifest this update: Fri 13 Mar 2026 03:00:52 +0000
Manifest next update: Sat 14 Mar 2026 03:00:52 +0000
Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: hwfJRZdk4jXaw8Eo1LkCeJi8kVEcQL4euSfUZnhfBDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:c6:cb:98:27:f1:a4:9a:9a:e1:59:75:42:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Mar 13 03:00:52 2026 GMT
Not After : Mar 14 03:00:52 2026 GMT
Subject: CN=37942aa3c9f956368074b1a2cd520b6e1ca43919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:6c:8f:59:34:97:df:9b:f1:eb:f1:44:76:
0c:00:7d:cc:f6:bf:82:62:b6:a3:9f:59:ef:43:a8:
02:06:3b:9c:90:7b:31:72:68:c6:03:05:c2:ed:9d:
58:8e:5a:76:96:69:00:08:60:68:7c:b7:c4:1c:8d:
54:cc:76:11:ca:be:ef:65:0c:e4:d9:42:9d:89:93:
3f:0e:c6:0d:5e:f6:16:a8:ba:19:0c:e2:63:f1:4f:
eb:0c:7e:40:13:cc:0d:96:67:0b:57:80:62:65:99:
44:24:48:1d:a8:d9:00:96:d5:e5:95:ae:7d:33:8e:
90:17:57:82:1d:74:32:ba:70:13:0c:dd:09:25:33:
a2:a9:1b:b2:e2:ee:b3:66:ba:3d:a6:c0:6a:0c:3f:
97:34:77:d7:54:ce:d1:63:b4:17:cf:5b:ed:47:da:
0e:a6:21:f8:a4:9d:40:14:9b:cc:1e:1d:c7:91:2b:
2d:39:de:49:bd:41:27:01:b8:86:fc:03:30:f2:d0:
27:ae:68:82:48:30:2b:51:6e:dd:13:2d:04:a2:29:
72:9e:7e:21:fd:e5:ac:fb:b6:b2:ac:6c:2a:17:49:
f4:c2:90:35:2b:3a:16:72:96:0f:8a:7e:28:fc:1b:
4f:c6:ee:1e:b9:79:08:95:c2:7e:51:f3:2f:fa:4d:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:94:2A:A3:C9:F9:56:36:80:74:B1:A2:CD:52:0B:6E:1C:A4:39:19
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f4:92:83:f9:19:54:d0:b3:02:3f:54:46:dc:56:28:67:c4:
fd:de:3d:95:9e:c4:b5:dd:a5:35:e5:44:0a:c5:c7:54:dc:3f:
38:4f:45:d7:3d:5a:c2:72:a2:8b:0c:d6:0b:1e:68:ca:bf:d2:
46:12:07:cf:60:15:cd:f5:51:8e:ef:73:87:82:fa:d3:8c:00:
b9:b3:15:06:95:14:07:a2:8c:82:60:6c:4c:0a:e6:09:38:03:
0f:84:41:39:a8:c6:5c:2a:83:0a:dc:6d:ab:8e:41:e7:84:e3:
b0:86:84:3b:16:79:16:9f:2b:8a:54:0a:dc:15:74:d5:08:bd:
28:eb:56:38:76:12:3e:81:3a:0c:24:3b:cc:71:e5:33:15:ae:
4f:3c:d7:21:32:df:c8:6d:e5:0b:27:5e:cb:6b:64:74:be:00:
00:67:a4:6b:32:35:25:4c:4b:d1:f6:fd:b4:34:5c:05:3b:af:
32:45:a7:02:4a:4d:f9:2e:49:0f:d4:d5:6c:e9:a2:60:07:33:
b4:c9:76:2d:8e:89:a1:6a:a7:1f:7b:82:ea:df:4e:86:7d:39:
2d:e7:59:eb:d3:7e:46:c2:e1:8c:34:02:53:8f:9a:78:da:ec:
e9:14:02:89:f0:3a:10:d0:e2:52:13:c5:1a:2a:f0:c0:85:ab:
e7:82:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:39 2026 by rpki-client