Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
File: qhWXLPu3b6dqmjPaeXxnM8NItP4.mft (raw, json)
Hash identifier: vx0k26ael3yiZ7MCWNi/dpM6ld6Q6uHUR8q60x5g1VI=
Subject key identifier: 91:45:B8:80:5D:36:12:0F:EB:B1:36:81:15:B0:9C:4C:B1:FD:7E:B1
Authority key identifier: AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
Certificate issuer: /CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Certificate serial: 019D39E5E17BEF89158CEBA8B3C6E5852D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
Manifest number: 22
Signing time: Sun 29 Mar 2026 14:00:59 +0000
Manifest this update: Sun 29 Mar 2026 14:00:59 +0000
Manifest next update: Mon 30 Mar 2026 14:00:59 +0000
Files and hashes: 1: jrpa6ffgl6ZLg25PBip0s0JQIn4.roa (hash: V9w3w4fEjx0PYusw02oT6lMuGBaV9qjr55iLXhK3FqQ=)
2: n33TF7CHRYuKt_cM3pOrRGh_au4.asa (hash: b1MR2hUsjJe9qzx0Hps/De/mPnNIVGi+NurVTZ29rrY=)
3: qhWXLPu3b6dqmjPaeXxnM8NItP4.crl (hash: 2dbL5vzun72x+33N0dr7k7w2qDMI4tQJSb3q67W/TZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e1:7b:ef:89:15:8c:eb:a8:b3:c6:e5:85:2d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Validity
Not Before: Mar 29 14:00:59 2026 GMT
Not After : Mar 30 14:00:59 2026 GMT
Subject: CN=9145b8805d36120febb1368115b09c4cb1fd7eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:de:13:43:84:95:45:b3:ee:64:44:b3:b8:
8e:7e:dc:0b:27:eb:1d:e8:23:38:10:56:0b:e4:39:
9b:56:91:96:b7:fa:26:e6:a8:22:3f:f1:9a:9f:93:
e9:77:43:94:3e:da:25:9c:88:26:75:05:94:33:c2:
a3:f8:1c:cb:a7:ee:56:5b:37:ea:20:50:23:97:19:
39:fe:cd:38:b7:1f:0a:a8:4f:4e:69:c1:91:ab:75:
4f:ce:97:05:58:cd:37:ab:e0:13:41:30:57:08:b2:
66:6e:8f:78:62:52:0a:2f:43:1c:e1:07:e0:20:b0:
75:f0:60:77:25:34:93:c5:ae:c0:78:af:49:f6:32:
6d:1c:ce:38:7f:ea:07:cc:2f:7c:4a:9c:7c:03:ec:
9a:d4:cf:59:cd:56:0d:29:5c:0c:d9:93:af:e6:73:
a4:fc:92:f6:ac:06:d3:62:a1:22:e0:c2:7e:28:68:
b0:7c:c4:1a:31:4e:20:5f:0d:fa:fd:2e:d5:8c:eb:
35:15:ee:d3:45:76:ad:41:e4:2b:5e:db:2d:4f:d7:
d4:4c:5e:d2:8d:e1:f5:88:9b:a2:05:27:8a:d5:1b:
4c:01:a7:a3:f8:57:46:72:57:ab:9c:dc:67:ed:46:
98:a6:09:72:07:f7:35:09:5f:e9:fe:2e:a2:dd:6b:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:45:B8:80:5D:36:12:0F:EB:B1:36:81:15:B0:9C:4C:B1:FD:7E:B1
X509v3 Authority Key Identifier:
keyid:AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d3:f7:03:9a:58:18:22:28:99:9a:82:c4:c7:68:95:95:f4:
58:63:f5:92:45:f3:08:52:59:40:9d:f9:a2:62:41:b7:85:a1:
43:89:e2:30:4a:6a:f5:ab:44:47:e3:da:ef:d8:f9:09:87:b2:
4c:24:12:43:e5:2a:81:54:db:06:08:aa:55:12:67:13:c7:0a:
08:4c:3c:42:d0:ff:28:05:b1:69:29:06:aa:a1:aa:a9:df:ef:
66:f5:8c:cc:3b:a1:9c:26:32:35:eb:4e:02:62:16:d5:38:5e:
39:ff:1c:bc:da:c8:b3:95:b1:72:8f:a1:f1:9d:0e:6e:71:23:
d0:ef:a1:dd:27:f1:ad:99:1a:80:b8:55:73:97:17:48:b5:50:
0c:ec:be:ee:5e:e4:ae:82:f7:82:93:f1:9c:43:6d:c9:1f:83:
74:d6:51:10:24:26:56:9b:ba:0b:9f:52:01:c4:c5:a3:72:ed:
ef:28:1b:30:ed:ab:8e:bf:72:6e:0c:22:88:64:75:d0:8a:a1:
8e:4b:60:03:4c:72:2d:0f:a1:82:86:d4:a9:ec:05:fd:32:16:
c8:96:9a:fd:dd:e4:e4:19:cb:4e:43:b2:55:7d:19:25:d6:21:
e2:ae:38:69:22:a3:bb:cf:04:68:a6:20:f8:c1:75:a3:13:7a:
7f:c3:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:26 2026 by rpki-client