Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: Dn61wYi8pdrqBUr642nSBSwXkyYKk9kdsgAons97Zg0=
Subject key identifier: C9:5A:67:2E:04:01:A5:43:24:DA:E9:8D:02:83:69:8F:A7:37:67:91
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019D25BA1EC6B626AC1E52B3FCD8DBDF14C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 02FE
Signing time: Wed 25 Mar 2026 16:00:47 +0000
Manifest this update: Wed 25 Mar 2026 16:00:47 +0000
Manifest next update: Thu 26 Mar 2026 16:00:47 +0000
Files and hashes: 1: ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa (hash: 11RGKugOQUaTnt/hJwS9BTO4yUW3mvsWT6IHYcZEL9U=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: ypcwGAvijzWKEqVYbtFB/VKOgK5Hw0IOazfEtkEo6qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:1e:c6:b6:26:ac:1e:52:b3:fc:d8:db:df:14:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Mar 25 16:00:47 2026 GMT
Not After : Mar 26 16:00:47 2026 GMT
Subject: CN=c95a672e0401a54324dae98d0283698fa7376791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:5c:8d:07:35:2e:aa:2c:5d:12:75:49:99:
94:8a:ee:1e:fe:df:38:08:ab:d4:61:42:5e:93:f8:
13:dd:f0:8a:e8:b0:3a:64:db:78:1c:8d:40:8e:d9:
e2:41:e2:e1:98:61:c0:44:56:ab:93:e6:3f:10:a6:
34:e5:bd:c7:29:37:a3:e8:65:f2:76:22:9d:ec:6b:
5c:5f:35:7a:86:9a:14:7d:a6:1d:97:a1:da:de:f6:
3e:3a:4a:43:ac:07:36:1d:3b:3d:d0:84:2b:42:b3:
ea:35:cf:63:1f:1c:c5:75:ae:64:7a:a5:e3:89:7b:
f5:c9:ed:83:83:b6:4f:75:eb:18:d1:bf:df:37:a8:
ed:31:4e:c6:7d:16:f3:f0:8e:c7:35:45:73:bc:d1:
f0:46:26:95:df:4a:dd:72:71:a8:5d:23:70:bb:ff:
81:e1:4f:0b:1e:2d:b0:e4:e1:21:41:df:e0:01:6e:
8e:d6:89:e9:26:8d:d6:80:b1:c1:db:6e:7b:c8:00:
37:48:cd:28:70:85:56:da:d0:88:f8:8a:cd:1d:db:
21:d3:44:1a:7a:66:c0:25:ec:e6:fb:b5:74:de:04:
55:99:ca:11:00:fd:97:ab:4d:17:65:50:2b:f6:25:
28:5f:f9:5d:67:d1:85:44:cf:2e:bd:2a:c7:d1:66:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5A:67:2E:04:01:A5:43:24:DA:E9:8D:02:83:69:8F:A7:37:67:91
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4f:51:42:67:c5:79:eb:7a:8e:ff:8f:f6:1d:e4:0a:2b:86:
56:2f:47:9d:b8:1e:04:dc:c3:56:a3:fd:09:3c:26:04:e6:5c:
0e:2f:f9:a1:5b:06:65:92:41:cc:36:59:32:cf:89:f4:e7:6b:
dd:64:47:35:f5:24:77:4d:2c:fe:dc:f3:83:7f:cc:87:92:fc:
5c:e7:b2:50:12:1a:ae:ea:a4:7a:a9:21:07:8b:a9:0e:2d:d3:
f4:eb:7b:b8:6e:09:8c:49:6e:f3:5f:4d:83:22:8f:d9:0c:2e:
0b:6c:7c:6f:7e:53:83:09:d9:79:52:35:d5:f0:9c:d1:56:a3:
57:45:50:8b:a0:50:3f:8c:d4:10:f4:15:32:21:a7:ae:56:7c:
32:64:61:be:05:df:b9:f6:c7:90:00:a7:14:bd:35:d7:a3:56:
10:2a:af:4a:f0:2d:f3:ef:98:c3:b6:c0:71:a4:51:4a:fc:57:
87:4c:a8:0e:e0:d1:ac:07:85:c7:9a:f1:fe:8f:63:f8:cb:9e:
51:2d:14:22:f8:df:6a:cd:00:56:aa:54:92:ce:14:70:85:7b:
d8:73:ac:b1:ec:9a:90:b7:37:5e:d8:53:44:fe:bc:01:9e:72:
60:21:ab:1f:01:8a:6b:91:07:ec:f2:b7:d5:9b:70:fe:e0:9c:
b8:33:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:17 2026 by rpki-client