Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: Zp+NbKjpbxfFAz3M4xYBlIjZdhzn02trIiHrBT4My1U=
Subject key identifier: 36:15:4A:2D:4C:57:47:D8:E0:33:CD:5F:DE:A6:65:7B:84:08:F9:9C
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 019CC7BEEDBA2BA80FA80FF34AD41340BB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 0C94
Signing time: Sat 07 Mar 2026 10:01:44 +0000
Manifest this update: Sat 07 Mar 2026 10:01:44 +0000
Manifest next update: Sun 08 Mar 2026 10:01:44 +0000
Files and hashes: 1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=)
2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=)
3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=)
4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=)
5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: Ckvoes97mcryUNXH7Vmv9maNu5MAgmyVM+kOcUCR6PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:ed:ba:2b:a8:0f:a8:0f:f3:4a:d4:13:40:bb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Mar 7 10:01:44 2026 GMT
Not After : Mar 8 10:01:44 2026 GMT
Subject: CN=36154a2d4c5747d8e033cd5fdea6657b8408f99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:9e:cc:68:d9:f0:ab:f7:c6:c9:97:de:11:
22:89:ac:d5:97:18:22:79:5b:f1:ad:ac:d7:01:d6:
a4:cf:aa:86:40:73:ec:16:5b:fe:9b:fd:4a:60:d0:
76:28:3d:19:00:2c:36:1f:d9:47:ac:7b:43:0d:d9:
58:27:68:9f:e4:6b:c7:e8:92:be:73:81:05:08:91:
dc:87:ab:7d:d0:46:f8:0c:e5:87:cb:c9:e1:56:73:
d1:23:dc:18:19:86:b5:8a:d6:15:85:94:62:5c:e8:
14:33:7f:7c:21:2e:d9:57:ca:d2:ce:d1:74:c0:71:
68:48:2e:a3:cf:78:d3:a7:67:7e:f6:12:82:f3:43:
16:55:52:df:a9:fb:b6:37:c6:8c:99:f3:59:da:cc:
29:a1:67:3a:cf:f9:66:fc:d7:80:f5:3c:dd:ee:90:
2d:92:5a:6f:61:9a:a3:9d:2e:1f:4d:d8:84:ab:33:
61:f2:e4:af:9c:7c:4e:97:9f:ca:67:4e:2a:b9:9c:
5d:0d:2f:c8:13:5f:34:35:15:c0:81:68:74:3e:3d:
d1:dd:25:7d:c1:6b:44:f6:63:91:43:25:fd:39:63:
66:e2:a1:71:9c:e1:0f:c5:29:8a:57:df:99:7f:e2:
14:dc:63:4f:f8:a8:5f:a9:f1:f4:a8:c9:41:6a:63:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:15:4A:2D:4C:57:47:D8:E0:33:CD:5F:DE:A6:65:7B:84:08:F9:9C
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:58:a1:94:f1:7f:de:95:c4:7e:70:c3:ca:9f:f4:ba:42:ba:
b3:7d:0c:0b:c6:8c:c7:39:98:d4:82:05:68:88:cd:25:38:85:
e0:d5:c8:dd:14:f5:7f:2c:4f:7b:af:0e:00:e6:15:df:4b:06:
3b:70:a0:ea:73:b6:8d:9c:ce:8e:42:d5:b5:9f:20:4f:0c:d2:
b6:20:8e:61:7b:ba:04:80:f0:9b:88:3f:f3:c3:69:48:d1:6d:
cc:f9:23:97:7a:c0:78:f9:0a:14:a5:11:96:0b:c5:d5:75:e0:
40:7b:56:ae:f8:d3:00:13:cd:1e:23:c0:4f:66:82:79:50:33:
93:78:cb:62:b1:28:b0:6d:7e:8b:b3:89:8f:9c:16:ea:d1:fb:
bd:d2:d1:f9:ae:49:a1:9f:f7:c1:95:fb:e1:e2:6d:5b:23:85:
73:dd:cb:77:b5:03:5c:9b:bc:40:55:90:85:9a:03:36:ab:6c:
f2:4b:e8:e8:a7:e0:bd:4f:fa:b7:4f:74:6c:05:b4:3a:df:29:
de:7a:5d:49:08:cf:82:1c:ef:34:c8:67:b1:77:6a:10:9d:3a:
15:67:b1:55:be:a1:08:a7:52:07:e9:23:67:ac:bd:72:9e:0a:
d6:5c:a5:37:ea:36:d2:42:74:9b:19:fb:2a:70:d5:f9:2b:c2:
48:51:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:53:41 2026 by rpki-client