Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: IhBZ20xe75El8uTb4RZ/hDM2kqR/sHT0izDePPtdt78=
Subject key identifier: 26:71:FC:9D:4E:3E:98:14:3E:29:DB:D4:F2:74:59:AB:9A:B2:E2:85
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 019D27042FD8F1239C89A03B614F581F568F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 0B01
Signing time: Wed 25 Mar 2026 22:01:18 +0000
Manifest this update: Wed 25 Mar 2026 22:01:18 +0000
Manifest next update: Thu 26 Mar 2026 22:01:18 +0000
Files and hashes: 1: MdQ19d3eFkD78fJxuXq5iy-2rpM.roa (hash: rp9j2xxR/tRXFv1++j74kJ2PghVMO1/nSR5xC0/6LuE=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: OvAvTji0dWlq8mrJs3PYyF9Xek2bdOnqEc54qhZRErU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2f:d8:f1:23:9c:89:a0:3b:61:4f:58:1f:56:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Mar 25 22:01:18 2026 GMT
Not After : Mar 26 22:01:18 2026 GMT
Subject: CN=2671fc9d4e3e98143e29dbd4f27459ab9ab2e285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:6a:17:88:1f:2b:fe:b6:59:70:7c:a0:3b:
c0:fd:2a:c2:7b:9a:5e:db:0f:8f:c6:be:4a:21:6d:
34:0b:ee:26:6b:cf:6b:74:6a:bf:f3:6f:62:1d:a0:
2c:75:d5:a1:26:db:8c:d4:af:9e:5e:5f:a2:1a:c0:
6b:27:7f:ab:e4:82:4d:a1:67:fd:1b:87:ce:dd:55:
51:39:d7:b3:f1:0a:2b:55:47:72:8a:96:f0:19:82:
80:e9:22:62:93:59:a2:32:5e:18:48:30:61:9a:92:
3f:ae:aa:a8:8c:9b:fc:e5:f3:88:01:7d:f3:84:e8:
f5:98:71:e9:0b:95:86:5e:0b:5a:9c:68:c0:21:fa:
f1:44:d3:6a:77:9a:7a:3f:c8:17:ea:cc:9a:b2:f5:
ef:b4:2c:8f:b4:c9:b8:3f:b3:5c:de:ee:4b:65:c1:
3c:51:15:d7:93:63:20:9f:2f:24:af:ea:79:8b:b9:
f5:ff:7d:ab:c6:68:fa:7d:8a:82:84:fa:5e:9f:c2:
42:39:8e:37:c9:93:98:a6:98:4b:a2:f0:26:e7:c3:
2f:36:38:7e:42:b5:9c:59:f0:46:23:cf:0a:44:9b:
4a:e4:84:0d:3a:2c:da:1c:05:d4:94:8d:74:e3:22:
fd:6e:5e:01:f0:1e:26:00:ea:60:15:43:58:ec:13:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:71:FC:9D:4E:3E:98:14:3E:29:DB:D4:F2:74:59:AB:9A:B2:E2:85
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:31:bf:c5:39:1d:67:55:58:2d:35:7a:e8:bb:8c:d9:01:84:
42:30:74:15:4b:e3:25:f3:d4:5f:9a:98:91:68:a8:41:39:47:
d7:9e:5e:a9:79:8a:f3:26:c7:96:de:fe:6f:cc:74:66:fe:0b:
f3:56:d7:54:97:82:b5:ce:1f:ae:00:f9:7f:43:b6:b4:fe:14:
18:e3:bb:9e:09:a6:94:c8:78:87:19:da:c2:72:53:35:03:29:
2c:e4:56:a3:ab:9d:06:a0:33:92:1d:0b:f8:03:aa:70:96:2a:
92:05:54:24:6d:aa:11:30:23:dc:8d:77:e9:fc:2e:c4:f0:9f:
cd:a6:1c:0d:2c:ca:22:05:0c:b7:3e:8a:36:65:dc:91:1b:49:
09:9e:6b:5f:85:c7:f0:bc:88:6e:d6:f8:4d:9d:66:4e:f9:e5:
2c:b1:d3:bf:36:8c:48:d0:60:a6:7b:7d:1e:14:b9:5d:a4:5c:
d4:72:20:c5:eb:b6:b8:8e:b0:ee:4a:22:de:fa:dc:ef:55:ea:
f0:2a:ab:24:d9:43:0e:68:ea:8b:86:e5:ab:0c:e5:d1:90:79:
bb:f8:3d:4d:17:d6:c6:2c:46:2c:cf:55:1f:44:3b:2c:14:6b:
44:04:3a:85:d8:58:f5:fc:b7:a2:c1:6a:8c:94:3d:6c:64:86:
08:61:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:50 2026 by rpki-client