Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: bcoADMp+C8MMB2f7O8XR/xTbVnkZYba/kxvgw3XOjI4=
Subject key identifier: 08:8D:5F:16:92:66:5F:83:32:1E:05:4D:12:09:25:60:3D:4F:3A:99
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 019CE7B713E99F203F99CE3285E5ABFB2233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 179A
Signing time: Fri 13 Mar 2026 15:01:00 +0000
Manifest this update: Fri 13 Mar 2026 15:01:00 +0000
Manifest next update: Sat 14 Mar 2026 15:01:00 +0000
Files and hashes: 1: CitPrvEbL3mSkhY-h3ajKHpia-8.roa (hash: /+PG4/PPRJ0jxjBwjO3qbLw0M09UhMzUiGb+7CaKzGg=)
2: lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa (hash: ik5LzxvVAt9iL2/7h4zp/cur7V0L47uoz6AFvyo0fRE=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: VZ49BQeNUnwrTJyvoAVUtl+0Mq+hNQSMdBrpWEc9zt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:13:e9:9f:20:3f:99:ce:32:85:e5:ab:fb:22:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Mar 13 15:01:00 2026 GMT
Not After : Mar 14 15:01:00 2026 GMT
Subject: CN=088d5f1692665f83321e054d120925603d4f3a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:8b:de:3a:22:13:05:54:97:0d:7a:44:5c:
58:e9:59:9a:62:1b:e3:2e:e4:3e:53:a5:ea:52:96:
2d:6a:99:ae:49:3f:00:9f:e0:40:9e:a4:2b:58:9d:
58:4c:a0:5c:81:86:e1:4c:8e:6b:7e:07:d2:0c:4f:
59:cc:cf:b6:4c:bb:ac:21:ca:b6:7d:83:63:c8:c4:
fb:ea:26:10:83:3f:84:38:3e:43:7f:a3:51:d1:38:
72:94:f7:4c:cd:8a:90:f9:22:f5:f7:73:e5:de:83:
0a:25:5c:fc:5f:82:72:17:f1:80:9b:61:ab:8b:23:
bb:dd:32:15:ba:f4:a8:f4:3e:d8:ac:17:19:cc:01:
13:43:69:a7:3c:ed:84:fd:10:40:db:7a:94:a1:f5:
ad:41:94:04:bd:46:64:c7:66:a9:18:61:da:2f:12:
4b:b2:fb:c7:6f:ad:95:df:f6:45:29:5f:57:3a:83:
ae:ba:9c:ed:64:26:87:c3:db:3e:f1:50:23:75:2a:
f1:0c:d7:d8:a5:76:da:aa:3c:23:60:49:e3:5d:5f:
4b:97:3a:28:ba:1a:5c:79:cd:88:54:78:1b:ed:80:
77:af:9e:60:fb:96:15:80:19:8a:3b:0c:7d:32:d2:
d3:e4:57:c8:15:e1:9d:99:06:ba:58:26:52:f0:e7:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8D:5F:16:92:66:5F:83:32:1E:05:4D:12:09:25:60:3D:4F:3A:99
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:97:22:24:95:a7:a6:a9:a2:15:d4:c5:d9:3f:5f:05:e8:a6:
33:b4:02:b6:06:80:81:a8:97:ff:c4:1e:62:76:f6:71:aa:0c:
4f:6f:bb:2b:ba:2b:30:73:8b:83:af:b9:96:f1:2e:b3:94:bb:
cc:60:54:48:a2:72:ee:79:ee:85:82:02:44:79:8c:a5:d1:e5:
60:7b:88:f9:3c:6d:4d:ce:6a:4e:aa:d1:cc:18:c6:1b:1d:9b:
7f:a2:bc:1e:3e:32:96:29:a4:9e:0a:4f:ab:df:23:46:54:ba:
bb:7f:9b:de:97:82:87:23:d3:4b:5d:11:04:85:b6:07:55:f1:
e4:19:8c:b0:d2:84:cf:cf:08:98:2a:0b:53:f7:db:5f:87:5c:
90:2a:94:46:0a:fa:96:1d:6e:17:69:46:b5:3a:77:91:eb:f0:
e0:14:4b:e5:57:a4:52:9a:60:2b:03:a3:45:07:3e:fa:1d:d4:
89:12:af:19:33:7c:2a:86:b9:72:8d:15:97:26:82:ab:3f:03:
52:5d:8b:44:7b:14:56:af:45:93:98:44:97:9e:4b:34:e5:f5:
5f:19:49:ef:40:56:30:82:ac:09:25:48:bf:33:fe:c2:68:9f:
fe:3c:19:7a:57:3a:10:95:5f:c0:3f:51:6b:51:6f:6b:ff:83:
e5:5d:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:36:33 2026 by rpki-client