Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: lRC6VCbslapNxs6buGnxBNWH9l/Miu9ssxCbdnQBR0o=
Subject key identifier: 96:BC:99:E7:5E:BE:52:29:EF:7E:6E:30:9C:21:B6:7B:42:A1:60:06
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019CB2499407EB1B18DACDFC55DCC7C471DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0EDF
Signing time: Tue 03 Mar 2026 06:01:32 +0000
Manifest this update: Tue 03 Mar 2026 06:01:32 +0000
Manifest next update: Wed 04 Mar 2026 06:01:32 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: VIgaiDc6I6FGeg2mYnKlhToR7WdJQ/oaebJr8MFCS1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:49:94:07:eb:1b:18:da:cd:fc:55:dc:c7:c4:71:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Mar 3 06:01:32 2026 GMT
Not After : Mar 4 06:01:32 2026 GMT
Subject: CN=96bc99e75ebe5229ef7e6e309c21b67b42a16006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:44:48:df:6f:90:c8:0f:93:d1:3b:ae:5c:
f1:ba:21:24:b6:50:26:45:f1:e5:d9:33:6c:3a:72:
00:96:c1:ad:b4:57:54:ca:83:1b:80:d1:7b:7b:9b:
8a:44:22:de:8d:0d:35:dc:9b:6d:d0:fd:cb:ac:50:
bb:18:f3:12:93:af:c9:04:77:35:f2:92:a2:8e:73:
5f:60:93:00:12:50:01:75:bf:3e:85:89:4d:86:6e:
bd:1e:1e:63:c4:af:c1:49:da:31:d2:36:37:88:d1:
af:f7:a3:59:8e:80:54:bb:72:9d:b3:87:e0:bc:f1:
5a:89:b7:75:00:9e:72:2a:6f:b9:1c:95:5a:f9:bb:
d1:60:0a:4f:33:0b:be:82:d1:34:e1:5d:3e:e5:cc:
da:f9:43:28:23:55:8e:a2:4d:d5:c9:fb:bb:c7:08:
11:12:d5:ff:71:a2:55:53:1d:50:fc:61:51:7a:35:
d8:ce:b3:e2:3f:8a:30:b1:ea:98:2e:a1:d5:d9:e6:
38:5a:23:c5:47:9f:70:d9:05:2e:2f:ee:b1:8e:3f:
a0:da:ec:c7:b6:8a:be:38:70:b2:b3:81:4b:e1:58:
1b:ba:2a:26:b8:dd:53:08:36:6e:94:27:77:c3:08:
79:a0:8d:0d:d7:9f:60:bb:9e:1d:bf:64:f1:37:96:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:99:E7:5E:BE:52:29:EF:7E:6E:30:9C:21:B6:7B:42:A1:60:06
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2c:40:56:a9:9d:e9:8d:4a:0e:75:49:78:f3:40:87:0a:7c:
f0:61:21:51:39:8c:a2:a2:45:30:b4:e1:b3:58:30:84:56:5f:
51:0e:89:4f:af:f4:7b:f7:3a:5a:b7:07:6b:f7:40:db:d4:7a:
f8:1c:a7:f5:c5:94:30:12:2d:72:61:55:fa:49:29:d0:4f:11:
0a:e1:39:f1:30:da:18:6f:61:09:d1:22:1d:b0:f3:cc:62:35:
10:7c:43:4a:8c:0a:c0:67:ad:f3:e3:27:c2:2d:44:04:40:41:
52:85:5f:60:7d:ca:76:bd:49:26:17:57:d9:dd:89:d5:0b:7c:
ad:3e:2b:3f:a1:2b:aa:20:33:70:63:cd:d9:32:60:07:30:b1:
42:39:ec:f3:e5:27:30:34:e3:b9:4e:5e:ec:d7:3f:5b:8b:94:
94:0b:03:e1:4e:76:f8:ad:08:99:4f:f5:35:bc:a0:56:38:39:
5f:73:2f:3c:8d:3c:2a:35:8d:3b:bf:d9:10:b1:f8:d2:06:52:
f9:0c:1b:a0:8f:58:6b:16:ec:37:b9:ab:83:fe:e9:20:d8:cd:
df:4b:3a:a1:73:1d:cc:99:63:3f:8b:67:7a:36:f0:db:a7:48:
26:96:fc:9a:e5:cf:4d:d8:3e:9f:40:7f:c2:a3:e8:f1:5a:d5:
4f:83:62:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 12:54:34 2026 by rpki-client