Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: S6Vs6ugoGlVXrPjR5WbKO8ry2g1Q/wRWZnug+q9/HRk=
Subject key identifier: CD:C5:30:8B:57:7D:47:66:0F:5D:E0:C8:C4:77:A6:0C:BE:78:06:29
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 019CF918A76D98E0AEAF080ACA444720F1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 02BE
Signing time: Tue 17 Mar 2026 00:01:08 +0000
Manifest this update: Tue 17 Mar 2026 00:01:08 +0000
Manifest next update: Wed 18 Mar 2026 00:01:08 +0000
Files and hashes: 1: A5iuXW_cORbsvixFXow7PusXUbs.roa (hash: +5gLj6Wt4ZaNqfSC+m0HrIiKPOrW2+yDa66ixdPJ/8M=)
2: ih8GcxAhVwfWwQlPUzpQuVOLe-c.roa (hash: 3wfNubXgjKJ1/TUZb+D2ubigUZwrjebFGAnwYbZd+Zg=)
3: kovNbi9k6C5VS9TsNsh4WwyJcj4.roa (hash: wfzyhy6lTcFvyZ3aO38IsSFTP7CeDM/2TXk86k8bbkg=)
4: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: XwzaGJpRXJxBBVOf7CYkp3gNSyt3uyy0oSBmauEbU/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:18:a7:6d:98:e0:ae:af:08:0a:ca:44:47:20:f1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Mar 17 00:01:08 2026 GMT
Not After : Mar 18 00:01:08 2026 GMT
Subject: CN=cdc5308b577d47660f5de0c8c477a60cbe780629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:08:4c:b4:c2:b7:35:df:2c:bd:4f:6d:d9:41:
2e:e0:d8:5f:1c:90:56:81:47:b9:4c:d7:2e:f7:44:
7c:54:b8:85:6f:f8:1f:70:ba:62:81:d2:76:73:12:
81:a8:93:f7:2f:b5:11:3b:fb:52:43:11:66:e7:16:
62:00:9e:fc:0f:15:78:9c:9a:07:09:25:d7:22:f2:
6f:54:9f:71:cf:66:55:e2:b5:40:11:2e:c2:9c:cb:
c0:0b:1c:89:ea:19:f0:30:c0:3a:47:8c:6c:11:cc:
f9:b0:7c:f0:70:74:89:e3:83:1f:a7:3a:92:b0:f4:
99:6a:e6:ac:3e:1e:3d:0a:4e:4a:fc:56:62:1a:7a:
4a:55:5b:75:97:da:35:ca:58:a9:6c:e2:8e:04:45:
28:54:f2:eb:52:e7:3b:40:7e:ab:e5:95:b5:c0:40:
d4:8e:6a:42:45:1d:a4:60:e5:be:11:22:3d:4b:fe:
e3:cd:f8:57:84:89:cd:d2:72:9f:e9:54:28:34:bf:
55:76:7c:63:a1:03:18:4c:8c:d4:76:fe:c0:59:db:
19:89:84:01:0a:c1:44:f6:4b:5b:f7:b7:d6:11:e1:
2c:16:2d:0b:38:5c:c6:8f:9c:09:62:3c:c0:b9:4a:
bf:5c:2d:46:e7:db:f1:ab:1a:01:e5:98:a2:0a:64:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:30:8B:57:7D:47:66:0F:5D:E0:C8:C4:77:A6:0C:BE:78:06:29
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:35:50:91:f5:32:12:9e:cc:65:05:88:1e:1b:53:0e:3c:f3:
8f:6d:74:b1:00:9a:96:58:fb:b2:4f:35:7d:a5:0b:26:4d:a2:
f6:87:88:83:cd:34:c4:38:9a:e6:01:2e:f3:e5:3b:14:a4:21:
8f:9f:2c:30:37:88:ca:2f:0d:12:31:2f:b9:bc:a0:a9:a3:41:
cd:49:d9:9d:06:3e:f9:33:18:b6:e7:a6:a5:92:df:c5:bf:b3:
26:44:be:ee:39:80:ab:01:5e:a7:e7:b3:22:32:27:36:d5:59:
42:a8:0f:3a:ea:ff:84:26:b4:2a:ca:c2:59:2e:50:5a:79:0b:
7c:fc:76:5d:ef:a7:fa:f3:6a:1e:db:47:ae:fe:57:3e:a1:30:
5c:05:ea:ad:b5:94:e8:50:68:09:57:8f:a9:c0:af:14:3c:ef:
32:a7:e4:6a:39:95:3b:5a:7e:97:d5:30:08:98:45:3c:74:10:
5d:5a:4b:29:8f:0d:45:4a:85:ad:11:de:b0:d9:11:2e:a2:0f:
89:2e:df:91:90:77:3e:c8:e6:d9:56:13:8f:99:1e:14:27:3a:
61:5a:e0:04:bd:6a:d9:7b:ff:3e:7e:69:fd:14:4d:9e:8e:df:
1c:aa:bf:45:64:d9:29:1e:3d:9e:d5:1f:6c:d6:29:c9:09:0c:
b1:12:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 03:56:52 2026 by rpki-client