Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: K64EoC9r0XaZo3A+qn/oMNE1r5tLDm45XKyZwb/57Hk=
Subject key identifier: E8:8E:1F:22:4C:CF:98:D7:25:21:64:FB:99:55:90:59:80:09:24:C0
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019CB95DC068AD203989E995DD1F76B21C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 0201
Signing time: Wed 04 Mar 2026 15:00:54 +0000
Manifest this update: Wed 04 Mar 2026 15:00:54 +0000
Manifest next update: Thu 05 Mar 2026 15:00:54 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: 0rd70s5kBeHTcLY5xvk8hR+Ccu/no12Ju5ePgYmTGAU=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5d:c0:68:ad:20:39:89:e9:95:dd:1f:76:b2:1c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Mar 4 15:00:54 2026 GMT
Not After : Mar 5 15:00:54 2026 GMT
Subject: CN=e88e1f224ccf98d7252164fb99559059800924c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:ec:1a:d3:9c:9e:5a:50:28:ef:f7:26:9d:
41:c0:02:85:51:fc:eb:1c:27:a1:26:8c:1f:20:a2:
48:3b:b9:52:f6:8e:ad:c8:6b:73:06:49:c9:53:e7:
97:af:7b:1b:5c:dd:e4:8c:4e:ea:68:af:cd:45:77:
36:b2:25:3a:db:82:bd:20:44:0f:0a:61:52:9a:ef:
9a:a1:3b:d9:93:90:e4:2f:fa:79:f1:c4:0a:38:40:
88:91:04:cc:aa:77:fc:f7:81:1e:89:69:73:a4:d3:
66:57:d9:ac:c0:7f:d4:b2:1b:19:42:80:b4:d5:6c:
22:a9:8a:24:2c:b4:13:d4:04:6b:b2:98:ed:f4:97:
fe:26:7e:28:9a:c4:69:e5:8b:07:a3:a6:85:fe:96:
34:0a:d6:ef:3a:50:1d:20:5e:3d:b6:96:d0:57:66:
77:8a:fb:01:34:d2:75:3e:c9:33:0e:f1:b9:04:f9:
b4:b1:48:3c:2e:a7:63:8a:3f:dd:83:11:f2:ba:d9:
d5:a2:64:2d:23:9b:2f:a8:0e:50:79:74:5e:00:21:
31:44:0a:33:dd:5e:61:5e:88:56:bb:1f:6b:9b:8b:
41:b4:a2:48:1e:bd:3c:cf:35:d2:18:a3:e2:2b:a6:
11:dc:33:4c:cb:78:30:06:1c:72:a4:d2:90:4b:ed:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8E:1F:22:4C:CF:98:D7:25:21:64:FB:99:55:90:59:80:09:24:C0
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:21:74:78:71:56:43:cb:2b:7f:c2:f6:ef:44:88:fc:56:b8:
d9:12:84:b9:90:9a:f0:7c:62:9b:bb:7f:a5:0c:1b:9f:8a:49:
b1:3f:08:3c:b5:55:6b:87:b3:ba:38:45:71:04:15:0d:98:a1:
86:66:35:3b:20:23:60:1a:83:e8:b8:87:39:34:38:13:ab:f3:
ec:f2:fd:5c:84:5e:2d:07:af:dd:e0:b4:81:1f:f3:40:d9:26:
07:66:18:fc:d3:69:03:e8:e4:4a:a1:be:93:c5:a0:06:01:46:
0a:4d:71:f3:18:89:23:ad:3d:9b:d3:e8:08:2e:2a:e8:50:dd:
31:40:53:b8:82:1c:07:43:83:39:00:03:44:54:ff:34:15:cf:
3b:42:e7:bf:e1:80:3a:51:d0:5c:c2:52:7e:ac:c8:f0:d3:93:
88:db:70:13:f1:8e:ac:f8:6e:4d:39:99:4b:54:40:b2:39:fe:
69:8a:82:07:b2:04:77:dd:ff:e8:c7:e6:b7:a0:6c:6b:06:ac:
a0:c7:96:50:56:76:83:d3:c8:cb:0d:9c:d9:e4:ea:b3:44:af:
89:c6:ba:6e:16:7b:c3:47:55:0b:37:6e:63:6c:40:4e:7b:e0:
eb:fd:cb:66:db:41:2f:17:7a:c9:61:8d:63:2d:6d:0b:4c:94:
30:80:7f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:22:30 2026 by rpki-client