Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
File: qag61DyItM5E6CDhFd6cU34qVKY.mft (raw, json)
Hash identifier: Szmwp1xSKpf0nqskNXrORz4BiHyQeLzhrBIbGMhLmn4=
Subject key identifier: 31:92:D6:BE:33:27:A4:C3:53:12:80:B4:40:96:49:C1:75:C3:4C:91
Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
Certificate issuer: /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Certificate serial: 019D26CD2BB17489866A3CFD68E48B2184FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
Manifest number: 0B26
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: ZgEA5wGHKIZhbV_oLVrM-OofTLU.roa (hash: CNNglVQfV0p+V6A8LfYI8FGlBdH7rmBxTJD4Vn5Agcw=)
2: qag61DyItM5E6CDhFd6cU34qVKY.crl (hash: kCrVCoAcbfGbRQJ9Dn6wZxjOEzNbKyuc28A8Vu62fbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2b:b1:74:89:86:6a:3c:fd:68:e4:8b:21:84:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=3192d6be3327a4c3531280b4409649c175c34c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:c6:a7:84:ea:0f:75:62:b4:ef:eb:43:8f:
7e:82:c9:61:d8:b4:34:d2:57:fe:a3:c5:33:cc:85:
e6:e1:28:64:cc:47:b4:b6:98:13:7f:4d:91:34:ab:
94:c4:1f:75:31:3f:34:86:71:63:a3:f1:df:95:be:
33:0e:e7:12:a0:0d:c5:32:dc:59:db:e0:ea:68:14:
24:21:8a:4e:10:ac:c5:71:0e:4f:e8:84:79:4b:97:
81:a6:9e:9d:37:16:ef:d1:16:30:97:a2:ba:9f:7c:
8e:c3:03:28:16:55:ba:c6:c3:2b:ba:a8:56:77:60:
33:e8:8b:4e:85:31:ff:aa:5f:97:7b:b2:67:ae:e3:
55:17:45:87:1b:c5:c3:f9:8d:b8:b1:43:89:dd:72:
a9:89:17:04:df:a0:15:1a:da:51:84:f1:df:05:a6:
b1:0d:32:ae:d6:3b:0e:46:5b:91:9e:46:81:2e:15:
50:6b:77:91:49:60:e9:ea:1a:e3:ac:e1:d6:f8:ca:
2c:73:77:64:78:88:ae:93:0f:af:5d:ac:25:61:41:
6a:f2:20:a4:53:f2:4e:4d:f6:a2:db:b4:58:f5:f7:
e9:ac:de:f7:cc:00:d0:c0:50:84:09:cc:92:1a:05:
5b:f4:61:6e:f4:ab:d9:fc:52:32:15:ed:b3:a3:ea:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:D6:BE:33:27:A4:C3:53:12:80:B4:40:96:49:C1:75:C3:4C:91
X509v3 Authority Key Identifier:
keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0e:59:48:c7:5a:f1:8d:d6:e7:1b:c8:eb:2f:25:cd:06:7a:
5d:56:97:e7:c5:f1:b8:ff:be:fb:da:2a:6f:a2:db:16:b5:08:
1b:b7:bb:6c:9c:58:e9:0a:45:61:44:44:4d:9d:ab:04:b8:f5:
b3:be:76:b6:11:b4:65:08:49:e0:55:52:fe:6b:bf:9a:a1:59:
68:6a:a4:bf:16:cf:08:a1:65:d0:66:f6:a3:ba:d5:2a:9f:16:
7b:5e:17:b3:06:15:fd:73:c7:7e:2e:69:7c:af:88:56:62:21:
44:e8:91:85:bb:1d:80:c0:2c:c7:73:e7:85:a7:2c:8f:24:3b:
f8:94:11:3e:0f:f3:22:03:be:f6:2e:04:2a:4c:a9:ac:c3:61:
40:6e:6f:d1:1d:b8:7b:81:aa:a4:40:2c:60:44:d6:7f:73:08:
18:54:70:80:0a:36:fc:d2:c5:ba:f0:5c:60:17:35:91:ac:32:
fc:36:95:2c:f4:16:d5:d5:a0:d2:b5:3a:a0:9d:42:e7:45:c6:
23:90:22:89:5e:08:14:d1:b5:f4:94:f9:e9:66:f0:b6:e7:39:
a8:81:c4:ac:14:e7:41:0c:36:92:49:2e:02:61:a3:48:05:c2:
9c:56:cf:ac:10:bc:15:25:42:42:87:c1:7d:73:83:a1:6e:35:
86:4d:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:02 2026 by rpki-client