Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File: qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier: S9mtEJSJIYWC7i3lvcLqeS77437aH2J9Tt0r1RxxJw0=
Subject key identifier: 3E:D9:CE:B6:44:45:CA:FB:61:26:C2:56:E4:30:7F:C6:89:C0:DD:53
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer: /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial: 019D25BA0D5EA15131A06007FE1A3294DC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number: 0D08
Signing time: Wed 25 Mar 2026 16:00:43 +0000
Manifest this update: Wed 25 Mar 2026 16:00:43 +0000
Manifest next update: Thu 26 Mar 2026 16:00:43 +0000
Files and hashes: 1: 1y4mjCjd3yaeU16gh_uU_xDclvA.roa (hash: akVEsaylTtagPHzHitk7WCUHGfvzfwDTl/6FhQXu8p4=)
2: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: ApAvhVV3s29umqwfaLl3HfnkVxMm+5v2Z41RsuYV1b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:0d:5e:a1:51:31:a0:60:07:fe:1a:32:94:dc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Validity
Not Before: Mar 25 16:00:43 2026 GMT
Not After : Mar 26 16:00:43 2026 GMT
Subject: CN=3ed9ceb64445cafb6126c256e4307fc689c0dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:83:74:c2:53:8a:22:37:8e:f6:37:06:f3:
59:d1:d0:72:42:97:88:8a:15:70:5b:89:96:c5:cb:
49:c7:ef:9c:cc:12:4a:cb:4c:18:4c:ef:e5:a0:1c:
7a:26:4d:c1:1d:a8:c0:4e:38:ee:41:a0:52:9c:cc:
f9:aa:b1:41:8c:ce:d3:62:f6:81:b0:81:26:b3:96:
91:55:90:db:ae:8f:45:66:ae:3e:7f:71:77:de:67:
21:e7:71:8a:e2:ab:e9:77:0c:40:1b:ec:66:3c:6b:
6b:0f:e7:cb:77:c4:0f:57:ad:56:03:d8:c6:aa:10:
44:87:03:24:02:bd:6f:85:62:59:05:dd:53:85:4d:
14:44:e6:53:25:00:3d:4f:bd:fa:39:49:c8:80:6e:
c4:8c:5d:3f:30:b8:82:b2:37:e1:8c:93:77:97:30:
22:a2:79:14:f0:42:c7:72:57:5d:c4:7d:d8:96:68:
a3:a4:14:d6:a3:cd:63:78:86:d8:08:92:47:70:81:
6c:ba:87:87:47:ab:59:c4:89:2e:de:69:fb:b4:32:
ac:ee:4c:70:c2:6b:ae:34:93:2e:4d:d4:25:57:51:
68:95:6e:f5:65:ba:77:7e:50:81:21:c4:59:61:40:
bc:7e:cd:fc:bb:24:80:63:91:0d:a7:61:10:1a:55:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:CE:B6:44:45:CA:FB:61:26:C2:56:E4:30:7F:C6:89:C0:DD:53
X509v3 Authority Key Identifier:
keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7f:f2:86:a7:96:f3:07:8c:fa:86:9a:45:68:d0:ab:1c:aa:
18:0a:98:16:3f:a5:0b:92:5f:63:20:5b:19:3b:69:e3:49:f9:
5b:8d:38:30:51:68:73:78:a0:91:93:b2:72:c6:44:ac:23:69:
ea:8d:32:7a:9a:ed:a5:10:cb:e2:46:12:a8:5c:80:38:a9:a3:
8e:91:65:f8:87:10:00:c7:82:61:e7:be:8e:24:aa:bc:09:c4:
4f:03:84:40:13:36:da:77:99:27:fd:3e:af:fc:ef:e7:4e:a4:
49:f0:fc:61:ae:8d:79:f8:eb:30:35:e8:3f:ba:88:cd:b7:c4:
b8:5d:be:de:6d:d3:77:41:c8:48:18:0d:1b:3c:d5:69:96:aa:
8e:92:1e:46:f4:4c:95:41:46:ad:8b:e7:11:05:b1:63:bb:aa:
ff:85:d2:bd:ca:65:eb:59:5d:75:51:04:0e:2c:07:27:56:bf:
8f:db:1f:5f:01:2e:7a:2b:cf:be:53:a9:c0:c0:d0:cc:1d:c8:
7c:ad:b9:b5:a8:13:b1:10:1e:bf:27:b6:5d:c3:8d:5b:ce:97:
00:0f:3f:83:3a:ae:fa:aa:2e:ac:cc:ed:60:65:f7:a5:29:37:
f1:98:04:ce:08:ec:ea:e6:56:9e:21:82:8e:72:ea:ee:55:bf:
58:4e:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:32 2026 by rpki-client