Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: WY6Q31r8UMEYdghfLdDLBsxzxJAxpqlOMDFZbzgb45g=
Subject key identifier: 02:FF:F9:99:57:64:12:5F:22:97:08:D7:A5:3A:59:F0:AE:02:D9:63
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 019D2B4DF85BD2AC317DFF471F0904B8C700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 0972
Signing time: Thu 26 Mar 2026 18:00:23 +0000
Manifest this update: Thu 26 Mar 2026 18:00:23 +0000
Manifest next update: Fri 27 Mar 2026 18:00:23 +0000
Files and hashes: 1: Zq0MFv-zigl29QjEhRxZZ3ciMl8.roa (hash: hYDRJ/YZvWpX6EoU2ePQIZV0D6A8L2Y7jJBr+AftG3w=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: RVl0M1QVrSQDIMdysszmcELvcE/itoAXw12kTPyAutg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:f8:5b:d2:ac:31:7d:ff:47:1f:09:04:b8:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Mar 26 18:00:23 2026 GMT
Not After : Mar 27 18:00:23 2026 GMT
Subject: CN=02fff9995764125f229708d7a53a59f0ae02d963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:00:cc:e9:7c:2c:40:27:42:8a:e0:42:b0:
a1:07:21:c5:9a:05:1d:7a:46:c2:f4:8c:3c:0d:08:
be:4d:35:35:7a:ef:2c:c2:3f:cd:07:3d:aa:a9:e9:
65:7e:13:9a:78:df:0b:22:99:31:21:cb:d1:b5:97:
b2:7f:06:12:bd:c8:98:f7:70:f0:fd:56:cb:41:ab:
ad:5d:4c:97:26:ab:1d:ff:0e:1d:eb:60:86:2e:c6:
0d:d8:e1:ff:38:76:f2:26:75:3b:b7:ea:cb:4c:84:
d5:32:a8:2d:72:5d:04:02:34:e6:57:2f:9b:cf:d4:
53:48:da:ae:90:09:81:f8:92:e1:1d:c2:8e:91:6b:
33:8b:d3:c4:c1:7e:86:4d:43:8d:48:b6:cb:1f:f5:
ca:de:82:68:a2:b0:53:89:d6:a9:ed:8a:70:44:26:
81:cb:d4:7d:da:fb:c0:ce:14:80:33:25:99:fc:d5:
42:b2:d2:f1:be:5d:2a:bd:46:d5:78:50:ba:de:42:
96:6b:af:c2:d7:54:2a:5a:0a:bc:3e:62:19:60:8e:
79:f9:cb:43:b5:ca:3b:fc:c0:72:21:74:29:1c:e7:
83:61:d3:a7:5b:2c:67:03:9e:0f:5b:ee:29:78:45:
5b:8f:85:76:62:5b:7b:db:b2:2e:31:03:87:f3:5b:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:F9:99:57:64:12:5F:22:97:08:D7:A5:3A:59:F0:AE:02:D9:63
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cc:80:b3:b1:79:77:5e:93:d9:29:64:8e:3c:5e:5e:58:84:
bb:6a:dd:b4:42:94:a2:62:90:b0:28:ef:57:1b:e0:78:3c:1f:
1e:1f:0e:64:c0:a2:6e:00:28:a8:26:58:a8:08:5c:27:31:af:
c5:3e:a8:88:df:d6:64:90:fb:5b:76:07:d5:cf:e5:78:4f:0e:
32:2f:80:78:89:37:09:02:e7:10:27:5e:1f:d3:0e:b5:aa:9f:
15:14:a7:98:f1:82:51:ac:3d:73:03:39:33:8f:4e:69:15:cc:
52:54:17:9a:d2:e1:be:97:0f:f7:e1:ef:7d:2e:cd:1d:04:48:
08:c4:b3:f7:67:e3:96:b3:81:8d:83:0c:f2:bb:a5:22:a8:4c:
bc:2a:53:ac:c5:d8:6f:85:dc:b3:ee:86:53:48:78:80:1f:3d:
14:17:38:e3:1e:b2:63:de:28:11:d0:ff:a7:df:b8:c9:98:f5:
5c:4d:a8:49:91:c4:74:83:fb:14:bc:f3:07:39:a2:25:93:16:
86:cb:9b:3a:e2:8d:03:2e:76:c9:31:31:d8:07:c7:ad:04:98:
c8:cc:c4:84:8e:83:a6:bf:a5:1f:3d:db:9e:02:99:86:32:b9:
5c:81:cd:ca:29:fe:b2:0f:db:56:6b:b5:a7:ad:dc:4c:b8:04:
ee:ef:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:19:45 2026 by rpki-client