Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: A3yLlNiuiI+vOpx6KPpOv55nWt4NcKVtWMy+3u02ZBQ=
Subject key identifier: 09:0E:97:0A:6B:CA:04:4B:50:71:A5:86:D9:4D:4B:22:6D:BF:DC:67
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 019D284E4E71C25C424949A670FF7C6B7207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: HyQmJzqnKNsyI3fs8wsXXo5JYlA.roa (hash: K4YLNNf5d2hU3VOcsfWG70mXY/0b7/Wb9z62jzKngps=)
2: kJXa9fRydrgc3PEgKj6e_ZPgJOw.roa (hash: vXw4a1fcUv1ExZN3oTfaxQy9guZhkfoKZDMFzMPNNx0=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: i1DlpU2hAzUvKhIeFustOmW5Var8lXOKqGpSsU65+8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4e:71:c2:5c:42:49:49:a6:70:ff:7c:6b:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=090e970a6bca044b5071a586d94d4b226dbfdc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:1f:25:a5:c5:0d:ac:41:de:a9:8e:ea:6d:
f5:35:30:de:ec:32:81:fa:b9:4e:06:d0:e6:ec:56:
8d:d0:50:f8:c6:6b:25:16:40:a7:8b:87:0c:b1:b6:
e3:4a:a7:01:81:42:a3:fc:f4:f9:a8:64:b7:72:3e:
7c:64:54:66:3f:99:74:a2:04:ef:d4:97:0a:02:95:
65:9a:61:fb:c2:3b:8f:e2:9f:01:f4:0f:0d:a2:8b:
3f:6d:0a:dc:2e:62:40:94:e9:9a:63:15:5a:98:5d:
ef:42:92:bd:c2:a2:bd:2c:26:de:a3:3b:02:db:09:
68:8b:26:c6:5e:92:87:b2:31:3c:bf:ec:0a:7b:d7:
51:7b:08:28:90:97:42:ad:3e:d3:dc:65:ab:bf:37:
e3:ae:91:e8:b1:9d:68:6c:04:63:df:72:49:19:86:
ee:50:9b:2b:b6:9d:88:60:1a:10:41:f0:7b:f8:28:
59:d3:ea:8c:83:ba:fc:69:61:df:10:d9:99:7a:f8:
c1:26:5c:df:93:d0:42:3d:a8:80:50:ad:71:d9:63:
3d:8e:3f:4b:46:d4:e8:ad:99:f8:31:97:dd:bd:9a:
00:f3:36:49:4d:4b:0c:b3:40:cd:bb:a0:3c:29:df:
a0:a9:95:ad:b0:aa:94:7b:d5:1c:02:8d:04:7c:f5:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0E:97:0A:6B:CA:04:4B:50:71:A5:86:D9:4D:4B:22:6D:BF:DC:67
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:62:a7:de:e5:3d:2d:ca:38:51:84:46:df:de:6c:cc:64:93:
1e:57:f2:c8:09:30:ff:af:cb:62:dc:a9:c6:da:00:d7:88:81:
a6:33:cc:0d:f7:7a:8f:df:3d:90:e8:5d:67:92:c1:e9:ff:b1:
3a:58:7c:7b:b5:c6:22:f2:6f:a4:02:59:58:29:00:d8:9f:89:
d8:e5:79:f2:07:78:d8:5b:77:9d:c4:6b:04:0e:18:41:a3:6e:
e3:9c:02:f6:23:2c:2d:d5:57:1f:76:7d:a3:aa:58:f4:bd:d3:
48:4c:d3:d7:30:47:32:f9:e3:45:3a:70:cb:b3:b2:0e:17:74:
cf:c6:fe:d1:6c:65:0e:10:63:55:14:b2:f8:a7:01:fe:59:21:
29:b0:f2:12:27:3f:ac:d0:31:13:8c:51:69:d2:bd:ef:af:e3:
9a:ba:ed:25:78:af:8f:82:eb:18:48:24:59:90:14:e5:ce:3f:
ed:85:a8:fb:b7:4b:93:6f:c3:29:1b:2f:c3:74:ad:c2:33:ea:
15:b1:4b:7e:13:2a:44:c8:4c:ea:f3:90:a5:6a:6b:65:f9:fa:
85:73:5d:85:85:9b:9e:47:42:ec:94:ec:38:bb:27:14:04:98:
1a:2f:40:a3:4d:f5:63:7a:cb:fd:4b:71:86:31:f4:57:16:fd:
73:a9:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:14:08 2026 by rpki-client