Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: txtd/kDSC7q/t1Ec/7t4OFYm0Jl7H6UvRABY4gGLD3s=
Subject key identifier: 41:41:52:C9:FE:EF:89:16:B5:82:4F:BE:77:48:93:36:5F:B1:FC:14
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 019D27DFF9CD310A8E96CED79C1D2A7138A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 02:01:22 +0000
Manifest this update: Thu 26 Mar 2026 02:01:22 +0000
Manifest next update: Fri 27 Mar 2026 02:01:22 +0000
Files and hashes: 1: La2WPm3LYF79MEJ5dmUf5iwdqMk.roa (hash: RkxUiCmpQV7nr6FWYwJ2GApRVYq0umpCRpKV/azNpzM=)
2: acmzZO4WdYbcbfIVT_LX9qTPV78.roa (hash: pEP2EoeuhTQlSixvaPnjA7Q75y0GUPve3N+3u4ET3rs=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: KWRDYV3a/NFy5YO6/c8ny7uNO7ZOzN0lTXvqS4M6s7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f9:cd:31:0a:8e:96:ce:d7:9c:1d:2a:71:38:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Mar 26 02:01:22 2026 GMT
Not After : Mar 27 02:01:22 2026 GMT
Subject: CN=414152c9feef8916b5824fbe774893365fb1fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:e4:1a:6b:cd:16:87:f7:f6:dc:75:87:52:
b1:de:19:05:38:a7:10:b8:66:ec:66:a3:bb:4f:3c:
e9:7b:0b:5e:25:87:05:97:18:8d:58:0d:3a:db:53:
93:12:2e:60:4e:a9:b0:d6:11:c1:80:7a:90:d3:93:
c5:77:6e:5a:ab:4c:af:af:18:1f:0a:c6:be:98:4e:
c5:45:53:8b:e2:c6:5c:62:9d:6b:5b:2c:2b:51:67:
cb:d3:26:c5:69:07:c1:54:a3:f9:c0:8d:1a:eb:d7:
00:a2:1a:b2:67:a6:97:3c:3c:74:75:9b:7e:c0:a5:
d1:7e:a6:28:dd:c0:08:7e:cd:24:f0:55:50:16:c1:
81:29:1b:c4:c5:6a:7c:fd:a4:6a:3c:ab:2e:4b:ea:
98:fa:f4:a9:61:a3:34:c2:98:9c:31:29:fa:29:46:
f1:2a:ab:79:2b:6c:d9:6f:66:07:9a:e4:2d:02:90:
b0:29:fa:81:f3:ff:a9:f2:80:b2:21:7f:94:4c:73:
d7:74:65:71:4d:74:3a:d0:d4:31:bb:44:46:79:a1:
a0:ad:f4:39:28:cf:e4:48:a0:01:17:6f:e8:62:f1:
be:c3:3e:66:5c:5b:57:5e:44:92:ee:67:e1:e6:86:
ef:dd:ac:fb:a9:64:eb:d5:a8:b0:08:e9:6b:ea:8d:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:52:C9:FE:EF:89:16:B5:82:4F:BE:77:48:93:36:5F:B1:FC:14
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:10:7d:c7:f2:85:26:3f:f1:8d:94:d7:53:d9:8c:5f:d6:cd:
0c:39:90:69:07:2a:ea:bf:03:c9:ad:1c:70:01:05:15:81:e6:
b5:a6:90:af:60:25:e5:7d:ad:dc:0c:18:9d:b2:4c:dd:8a:19:
1d:91:dc:16:fb:d1:1b:2a:62:7a:38:89:f5:38:e0:96:6e:dc:
70:c0:a0:44:9b:d3:1f:8a:c8:86:96:f2:8f:e5:cb:c5:6f:2b:
04:55:02:de:ef:da:48:7d:f8:1c:18:45:92:fe:c6:44:aa:90:
c6:60:cf:e6:32:55:ab:23:64:b2:b0:33:98:13:49:e4:89:b7:
57:6d:bb:14:a6:8a:22:4d:62:a5:f8:87:32:c5:6a:85:8b:76:
5c:b8:94:46:10:80:56:91:9c:90:5f:95:55:ea:9e:c3:78:e2:
8a:93:da:20:01:ad:be:b0:0f:ed:ff:ea:e3:ad:bc:0e:5c:51:
16:4b:99:81:9f:c5:ad:b5:92:33:cb:25:88:fc:da:b3:eb:cc:
46:99:03:85:3f:70:d0:d4:49:05:c7:2b:2c:ba:c5:d8:05:26:
ca:db:f3:f4:af:16:e6:f0:b3:4f:4a:4f:9c:01:51:b7:8f:0b:
64:07:69:87:49:02:92:2b:0b:a3:ed:b5:c7:2f:10:12:2e:7f:
4e:70:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:27 2026 by rpki-client