Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: aIC9s/gVTr0dOJ0ZIs16iPPMSAYVrFoHWwMxEofkpRc=
Subject key identifier: 70:D4:F0:76:22:2E:CB:A8:47:CF:AA:4A:0C:10:9B:09:66:0D:D9:45
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 019D2884486997CEED78090B4A223E633430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 05:00:51 +0000
Manifest this update: Thu 26 Mar 2026 05:00:51 +0000
Manifest next update: Fri 27 Mar 2026 05:00:51 +0000
Files and hashes: 1: 9iFl9E0VgWNO_Nn27bQay-c817U.roa (hash: La1IKKEmOqIsMgjt9EJI2o3J371vdfvoBpTTdCWHcKQ=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: I8BKAs4pdbNO5Nv4/sWr51afsaBRopvUQPdDHVOlH2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:48:69:97:ce:ed:78:09:0b:4a:22:3e:63:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Mar 26 05:00:51 2026 GMT
Not After : Mar 27 05:00:51 2026 GMT
Subject: CN=70d4f076222ecba847cfaa4a0c109b09660dd945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:4f:46:c6:d4:5c:04:c6:7e:12:64:6c:b0:
f4:13:df:32:73:77:80:48:e6:de:c0:f2:f4:7d:91:
7f:17:1d:ab:24:d9:4a:38:99:28:d8:55:d8:bd:a9:
9b:0b:7b:04:b1:ff:55:f3:33:1b:a3:bc:c1:26:91:
3c:ac:5d:4e:e2:c6:74:85:33:3e:43:5e:36:18:53:
68:d0:fa:35:47:d8:39:23:fa:92:aa:0a:d7:e3:0e:
21:6d:79:ee:61:9b:16:73:c0:58:fb:28:4b:25:ae:
1c:2f:35:94:5c:63:87:ab:f1:0b:c8:7a:21:6a:c5:
6a:4b:a5:1b:c3:58:06:e0:ab:1f:ac:aa:cd:a3:49:
c3:64:ee:eb:c4:53:05:25:4c:61:ef:bf:f7:6a:65:
80:8a:43:66:c1:a9:8e:2b:98:7d:13:5c:85:1a:23:
c4:b5:c9:7b:a1:cc:aa:2b:37:4f:be:49:3f:8c:b8:
c4:67:03:db:af:6c:0b:48:53:91:ed:97:12:f7:b9:
e0:cb:dc:35:23:81:38:f5:2f:01:d9:8b:bb:9c:db:
f7:a3:65:92:7f:15:cf:e9:90:62:fc:d4:f2:c3:70:
fe:1a:6e:1d:aa:35:4a:84:e5:04:1a:69:33:2b:f3:
16:45:84:5b:41:75:19:39:ec:65:8a:d2:13:57:ba:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D4:F0:76:22:2E:CB:A8:47:CF:AA:4A:0C:10:9B:09:66:0D:D9:45
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a5:af:f8:6e:6c:ad:65:2b:75:4b:85:35:be:95:74:64:29:
9f:d1:97:73:f6:9d:fb:72:0b:fc:52:75:3c:9e:1e:a2:7c:28:
b8:dc:03:fe:e0:32:d8:8e:67:7b:75:47:2a:75:20:73:2b:87:
a1:a0:36:bd:74:34:d9:5b:68:d5:8a:52:a4:e9:73:b0:00:81:
8c:05:e4:07:70:61:e4:b1:a0:9f:c0:cd:d8:97:e7:e4:50:54:
d8:5f:68:47:c8:f3:40:60:49:78:2f:91:3c:b0:48:06:2c:a2:
e7:c1:7c:7b:f0:59:4a:a6:da:ea:ab:71:ee:f0:74:b9:99:e8:
71:c2:18:ec:40:b3:51:42:3c:fa:70:6d:15:4c:5f:b1:10:cb:
cc:a2:a5:96:91:b8:af:3e:38:1f:13:02:41:a3:a2:1b:66:ba:
05:65:15:60:cf:34:63:ce:b4:1c:3b:d1:1a:23:e5:b9:c9:57:
89:3f:94:df:3e:05:f0:b4:75:ca:6b:d9:29:2d:f9:da:0d:c0:
52:34:dd:9f:fe:50:5e:eb:19:4c:c4:bb:4c:50:7c:a9:82:41:
1d:44:38:4a:07:57:b3:7c:1e:cc:9d:3f:8d:aa:0a:4e:7d:c0:
d7:bd:c0:99:2a:f2:a0:2e:6f:0a:54:ac:ab:56:24:47:2a:04:
e6:5b:a3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:38 2026 by rpki-client