Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: XevBC5MHo5YBiVbkIP5IHlcXcUW46UVVQlaM62aIJiU=
Subject key identifier: BC:BC:5C:16:A4:3F:88:F0:0E:0A:2C:BF:D2:8A:7B:6C:6E:12:4C:1B
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 019CBF2914F07D51EA2CA6C78856233C161E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 021E
Signing time: Thu 05 Mar 2026 18:01:06 +0000
Manifest this update: Thu 05 Mar 2026 18:01:06 +0000
Manifest next update: Fri 06 Mar 2026 18:01:06 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: JtLsm4Bb3ScwT/Jg6LxYvemrqm8xoNV7FhCBuhfzJ5U=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:29:14:f0:7d:51:ea:2c:a6:c7:88:56:23:3c:16:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Mar 5 18:01:06 2026 GMT
Not After : Mar 6 18:01:06 2026 GMT
Subject: CN=bcbc5c16a43f88f00e0a2cbfd28a7b6c6e124c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:01:17:1d:ac:c9:4a:cf:b9:b8:96:0d:e8:
d1:70:4b:e6:99:2b:07:67:2f:7b:14:5b:34:60:61:
bd:a9:41:52:16:83:ae:ff:73:28:f7:74:6c:c8:96:
c0:00:35:2b:f5:3a:fc:99:40:9e:96:0e:73:d5:bf:
ad:b0:38:cc:b3:69:c6:e7:ec:cd:62:e8:b0:0f:5a:
2e:6c:dc:8a:00:d6:fb:f6:44:73:ad:8a:68:8c:ab:
d0:e1:be:2a:9c:90:4c:bd:32:85:92:5a:c8:97:da:
4a:65:3b:5c:85:ad:88:07:1f:45:ce:2d:51:56:09:
22:de:2f:f7:7c:f4:37:a4:43:90:2a:f5:06:a7:6c:
1b:c7:d1:44:e1:85:34:c2:cc:93:cc:e2:3a:11:fa:
8f:75:59:16:05:28:05:9b:1a:02:af:53:43:90:81:
e9:c7:27:ad:ed:6d:40:3a:ca:d4:d8:13:5b:9f:59:
15:fb:4f:e8:c7:d8:46:f7:e3:8b:45:66:90:13:85:
60:24:f5:14:d8:28:a0:19:1a:e7:e7:38:b7:7e:a0:
d5:c5:b6:57:38:b1:1e:57:d2:7b:4f:c8:5f:7a:83:
92:f8:e2:28:9b:05:9c:fc:6f:ef:0d:e6:e6:97:61:
a9:f7:a8:0f:3d:4f:20:91:1f:9a:7e:ca:5f:40:35:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:5C:16:A4:3F:88:F0:0E:0A:2C:BF:D2:8A:7B:6C:6E:12:4C:1B
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4f:a7:92:ba:e5:88:c2:4e:20:cd:ad:f0:c8:20:44:76:c3:
c8:fd:1f:92:2a:44:eb:34:dd:a9:ba:86:be:c9:55:78:8d:7c:
8a:b5:41:eb:71:b6:c4:ba:3f:ed:2c:58:46:ef:e2:79:ca:6e:
7e:a9:af:1a:52:6d:a4:ae:d7:81:3a:08:b6:68:9c:ba:34:89:
0e:d5:cd:85:4f:f0:5b:ca:16:ca:a3:31:36:fd:5e:d1:ec:cb:
52:44:bc:03:d2:2b:64:d4:f8:09:f4:4a:fe:ac:0b:a9:47:e8:
06:f6:e8:37:fa:ac:49:f6:d6:90:d6:3e:70:05:38:9e:02:9d:
06:12:62:59:20:40:7b:bf:e0:b5:71:4f:8c:60:47:2d:f7:ce:
95:8e:d7:17:28:6d:e2:3c:80:fd:bc:f4:5d:95:c9:44:0c:23:
b5:05:c6:45:c5:f8:0b:73:d1:19:fc:04:39:08:48:7f:29:da:
5d:91:54:8c:b5:57:f1:e5:f5:3c:bf:db:94:0e:8a:b8:89:9c:
07:21:a3:fc:e9:f1:05:ac:17:00:44:81:7d:81:08:ea:97:09:
9c:f4:fd:fb:a2:3d:69:a6:bf:25:66:76:5f:40:33:80:02:85:
59:48:c2:70:2a:9a:2c:48:c8:8a:6c:0e:bc:84:02:a7:05:da:
32:80:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:42:29 2026 by rpki-client