Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: 4MnTvrojN05LEkxPep9XrofIv1L89um5B5/iajLNYRU=
Subject key identifier: CF:FD:10:91:36:4F:F6:17:3B:15:74:D4:F4:66:98:E7:7F:7C:C0:2F
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019D284E1CBDC86EC05F7C153C05EBB51EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: Fh3fxSNW3QZEpIYUfBjx_kqS2o0.roa (hash: DQ4/igbo+rv2kpc7T7st9wWdy+ENKm7eM93V1cXm0hA=)
2: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (hash: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=)
3: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: vSxr9lz4RahzCBlsXSYd9RogBtS5GlPtRMUevmdXUvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1c:bd:c8:6e:c0:5f:7c:15:3c:05:eb:b5:1e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=cffd1091364ff6173b1574d4f46698e77f7cc02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:fc:43:df:a9:be:a0:4a:c9:53:fc:5f:07:
f1:de:0c:81:46:16:ed:73:61:ed:61:c9:ff:5b:c2:
e1:5b:9d:bb:bd:f8:15:33:da:3a:f7:eb:44:35:d9:
de:9d:69:40:aa:43:29:2f:0b:8e:0f:27:8d:75:7a:
37:d6:a8:c3:f9:26:1b:5e:69:24:33:90:03:f2:31:
ac:07:1f:e4:c1:06:7f:f0:14:f2:81:f9:7c:d8:95:
c6:d7:e6:14:95:2a:e6:18:10:e5:0d:d9:64:fa:9a:
d0:13:2e:ff:17:de:56:0b:23:37:ee:7e:88:80:4b:
0d:8f:ae:77:25:f0:89:7c:64:57:bf:3d:93:d1:66:
8e:55:4b:82:ab:13:2c:b9:08:06:d6:e9:4c:44:2b:
06:67:84:74:f7:95:48:72:f1:07:31:f1:75:a7:36:
be:0c:54:85:06:8b:9f:0b:99:7f:2d:fc:b1:8e:c8:
e2:3d:3a:35:15:fe:ea:b8:c1:f9:8d:1e:00:ec:c3:
ea:d1:d3:1f:68:4a:99:32:c3:61:79:13:84:1e:d1:
c8:c2:43:be:cc:20:fa:13:33:bc:c8:09:30:35:51:
ca:70:f7:11:02:24:40:e7:69:44:79:e3:f6:ec:7e:
ef:a4:fd:0f:9b:ae:66:db:b5:6d:a3:cd:61:d6:5f:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:10:91:36:4F:F6:17:3B:15:74:D4:F4:66:98:E7:7F:7C:C0:2F
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:8f:49:fd:ee:33:f0:24:81:fa:1d:ac:ff:4d:3d:31:6f:9b:
86:33:17:7c:8b:8a:bd:01:98:9b:a3:66:8f:3b:aa:d8:d0:c4:
8a:ae:0f:32:6a:4d:47:7b:d0:dc:2a:54:be:78:f5:1f:3f:8c:
3e:e2:af:3d:fa:0e:92:fd:83:e0:f6:5c:4d:05:d1:56:80:e2:
59:6d:bb:22:fc:d5:1b:e3:9d:26:78:53:7c:e8:d1:2b:17:13:
6f:c7:fc:78:65:34:9d:e1:bf:0d:5d:87:c7:53:93:be:8a:d0:
93:35:36:2a:59:94:9a:07:27:a5:0f:38:ee:42:aa:66:0b:1b:
1a:86:68:d5:38:46:5a:c1:7c:a4:3d:5b:7e:b1:48:9c:34:83:
67:71:b6:88:ee:6d:8f:71:88:5c:c8:3f:cb:19:83:a1:98:a1:
aa:6a:49:2f:00:ac:f1:6c:87:dd:7e:b4:75:50:04:1b:fd:86:
c2:60:8d:78:ba:32:3f:09:39:4e:d0:88:10:ab:12:77:21:fb:
41:ec:36:e1:dc:d4:da:04:53:34:bb:df:b4:bf:22:e0:5d:30:
4a:95:85:21:44:58:e1:69:f2:03:7d:8f:71:15:0c:56:dd:41:
33:06:6a:1a:92:b4:e9:20:ce:90:f5:b5:d8:4e:70:d2:43:e8:
1b:e0:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:56 2026 by rpki-client