Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File: qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier: +c9O2i/VFFKZDIu2sKoOCQusGHMQTr+2ImVlljZKXyY=
Subject key identifier: CA:7B:41:5B:08:97:B1:9F:E0:88:5F:0F:6C:E7:50:F2:E4:83:F8:37
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer: /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial: 019D25F18E58AF024F0869A14301FFE6DC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number: 0899
Signing time: Wed 25 Mar 2026 17:01:20 +0000
Manifest this update: Wed 25 Mar 2026 17:01:20 +0000
Manifest next update: Thu 26 Mar 2026 17:01:20 +0000
Files and hashes: 1: G8eQIv1ZyVjpN-q8PwZulOD35jE.asa (hash: 82e74gIKnzu42+K9y5BlxJ6cz/E1ltp9YHXbsYVhQ8E=)
2: YpBXBhkoKA6B8vn-SSW0uagBSZg.asa (hash: 6NDwm9dk0C3RTxSSU90zrNxDOX6XaM6xxTgSgc87I9Q=)
3: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: rc5zkDmKEE0WEsY4TnoU3nZb8kzeDDkQS4gf69LxL0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8e:58:af:02:4f:08:69:a1:43:01:ff:e6:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
Validity
Not Before: Mar 25 17:01:20 2026 GMT
Not After : Mar 26 17:01:20 2026 GMT
Subject: CN=ca7b415b0897b19fe0885f0f6ce750f2e483f837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:38:16:15:dc:c8:1b:e0:2f:01:7a:8a:bb:
3f:52:0e:9d:f3:4f:ca:f7:e4:a3:63:ab:73:cf:3f:
b7:7d:95:ca:ed:6e:37:c9:9d:b3:70:8c:d7:87:1c:
79:b1:57:ed:c8:88:0c:4c:6a:1f:0f:73:a1:b8:05:
ae:8e:57:5f:2f:95:06:dc:67:ae:0e:18:cc:51:65:
5a:ad:5b:72:6b:93:6d:91:5a:c9:2b:08:ac:51:cd:
63:cc:5e:1e:d7:e9:b4:46:78:de:4b:93:c8:f1:07:
b3:48:67:84:61:4d:e4:f7:12:a3:89:02:70:bc:fc:
a7:64:b3:8d:06:1a:3a:63:71:4b:d8:1b:71:53:6d:
4e:02:6b:5c:6e:53:bc:94:7f:b9:fe:52:c7:b8:7e:
3e:92:e8:30:80:07:b5:6f:c8:f2:29:29:39:8b:a5:
da:f4:7a:09:04:06:c0:d5:3a:b5:e5:43:2a:74:68:
95:9c:5a:67:49:64:33:aa:f9:c7:88:78:e1:dd:81:
ed:83:a8:12:1c:81:b2:7c:b6:3a:94:d8:e3:2d:f3:
ee:ae:39:46:1c:af:84:63:10:7a:0a:39:5f:5e:39:
17:91:b0:08:e2:40:b2:d2:ef:69:b1:bf:89:9c:4d:
8c:75:11:f8:c6:29:72:3d:92:f7:c1:58:cf:de:d3:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:41:5B:08:97:B1:9F:E0:88:5F:0F:6C:E7:50:F2:E4:83:F8:37
X509v3 Authority Key Identifier:
keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9e:61:c2:07:b4:8d:8b:cc:6e:e2:52:3b:e1:f9:cd:dd:74:
0d:c5:80:a4:07:bd:99:4c:84:7e:52:39:c6:91:01:2f:d2:cd:
15:ba:56:6e:b0:93:5c:83:2e:96:46:06:6c:fc:73:9e:02:b1:
fb:1f:37:e9:24:d2:4d:95:b1:81:d4:49:92:0e:f9:c5:0d:30:
6a:b0:46:41:99:d6:2d:c6:5c:8b:85:bd:cf:14:5d:40:b6:ac:
ba:b5:e4:d6:25:cb:75:c0:47:c3:52:1f:38:8a:be:6d:36:96:
f6:32:cf:5a:4f:9a:a7:6c:16:12:bf:ed:df:b8:d1:9f:19:b6:
c5:f1:a3:89:9f:84:a5:27:3b:f8:ac:fd:83:39:b8:6d:7c:58:
c5:c2:cb:92:d1:8b:e0:b6:f6:83:4f:58:84:db:6e:9f:3a:c2:
07:9f:db:91:9f:3e:6b:50:4e:38:74:61:eb:0a:25:9b:36:a4:
14:9d:9f:44:ed:a7:55:e1:3e:aa:65:90:a5:7b:62:0a:f7:ce:
fa:9a:ce:92:e5:a9:02:c8:78:2f:2d:f4:b5:fe:46:8e:e6:cb:
69:e6:eb:b3:e1:90:80:2f:84:51:bd:4b:57:da:6a:06:67:f2:
39:b1:61:2d:e4:5d:33:69:94:d9:f2:25:b1:50:3f:92:b4:41:
d1:25:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:56 2026 by rpki-client