Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: yWy9GVxxzJGcMOIV9ZsCGh7sPMaY+rGaOfohGsRrsoA=
Subject key identifier: 76:88:FB:A1:0D:CA:DB:2E:1C:A2:14:5F:04:80:77:71:8F:42:75:59
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019D26283E8CDB67133130FED99C05D7FC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0C77
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: PfdJbG9izsbnqGNsBUeZHjDXjxZqAys4w7ULfNgkWO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3e:8c:db:67:13:31:30:fe:d9:9c:05:d7:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=7688fba10dcadb2e1ca2145f048077718f427559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:6c:55:23:f8:6c:c8:f8:dd:b7:94:ad:c3:
35:31:c2:55:ac:28:b9:c7:00:60:e1:23:65:db:41:
70:c1:a6:9a:48:bc:52:d9:cf:a3:e6:5a:82:87:79:
af:26:97:dd:97:00:6f:75:ce:92:fa:a4:61:21:18:
7a:e6:20:fe:dc:60:ff:0b:78:86:9b:f5:b2:9e:db:
ce:3f:69:f9:74:b2:cc:e6:f9:e0:d0:99:21:bc:ee:
b9:28:1b:3c:bb:33:7c:d3:12:2d:08:55:2a:d1:87:
cf:a7:9d:8e:57:88:d2:da:cb:7f:e7:75:32:a8:02:
4d:b1:8d:ca:dd:94:dd:d5:fb:66:b8:be:d2:06:95:
e2:ba:bd:af:f1:c6:83:a1:98:e4:42:7a:4f:18:1a:
c3:b0:8f:ed:bd:b2:cb:7c:e6:8b:16:e9:34:cc:82:
6b:4b:45:56:f0:c7:d3:a0:9e:4a:7b:b7:40:4a:b1:
04:db:d6:a3:cf:f7:08:e3:6a:e1:04:a9:42:1c:a5:
11:48:5e:11:ae:5d:da:cb:c0:18:e9:e6:03:fc:08:
84:7d:d6:9f:8a:ce:76:5d:32:c6:24:31:40:c8:32:
37:ed:d6:72:5b:98:a2:65:e8:41:f3:ce:d6:7e:d2:
fd:cb:07:ac:99:b7:35:db:e3:87:b6:de:6b:26:05:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:88:FB:A1:0D:CA:DB:2E:1C:A2:14:5F:04:80:77:71:8F:42:75:59
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e1:ae:b1:b2:6a:26:18:c5:f1:ac:ce:96:ac:6b:d0:4e:ae:
cb:cd:99:b8:70:0d:13:22:e0:a1:e6:60:96:d8:6f:1d:0b:6d:
65:25:df:43:9f:82:84:9f:ab:1e:49:3f:b4:ec:c1:6f:aa:61:
9f:c9:34:87:e0:6c:c1:54:ec:10:ee:f8:aa:ee:4a:f5:e6:2b:
a1:c0:7a:9d:17:97:9b:85:c3:90:45:6c:75:45:2a:12:54:7b:
78:7b:19:2e:49:d3:c1:d7:d3:31:10:cd:3e:14:cd:f4:1d:95:
c4:cc:84:15:f2:ae:af:c5:ee:95:0d:a2:19:81:5a:a6:66:6c:
f7:69:db:54:b6:90:92:c2:11:23:99:c7:f6:c9:d2:b1:c6:dd:
e1:47:57:93:39:6d:ff:c4:32:29:0a:f3:71:92:4c:7c:d3:44:
32:f7:5d:2b:8b:ac:59:30:e6:d4:14:ff:cb:f6:2b:8c:87:ff:
9a:1b:1c:5f:d7:78:3a:ad:55:45:d8:7a:8c:6a:2b:8e:d5:8d:
dd:e0:02:d1:0f:46:bb:55:3d:81:1a:77:d7:64:ea:d3:7f:12:
4f:61:98:c5:c1:1d:c5:9f:5d:d7:85:b7:7b:2a:75:de:25:0d:
1e:b5:d7:b8:74:fc:ce:c1:dd:ee:ef:56:12:7f:b0:e0:b1:9b:
2b:a7:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:04 2026 by rpki-client