Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: wzGYJupA4FrFcsgGhI3thJAvzXlWLSEj8D3iQUU6XRM=
Subject key identifier: 9F:BF:4F:88:B7:25:0E:D9:D7:8E:AA:04:20:B3:9C:AD:C4:5A:2B:05
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 019D26CD0F257205B94FFEDF50505FA7C1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 0C1F
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: kUzQjhLo2G6JI_dgKaScwOHdOPY.roa (hash: 5Mxtgv4b+Zf5ryrgeJIOrybvkQo9Xz3usdN2WR4EOAc=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: xkHldrc2CA11Kc7lKwvmsi0ibxSRsSJuCBWaMsrUzyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0f:25:72:05:b9:4f:fe:df:50:50:5f:a7:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=9fbf4f88b7250ed9d78eaa0420b39cadc45a2b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:e2:c8:84:b7:bc:ed:09:f2:50:f1:fc:ff:
69:85:46:76:83:1f:43:44:4d:89:a9:0d:93:d9:ae:
0d:6b:ab:72:75:9d:a3:a8:3f:95:23:8e:3a:1d:cd:
56:39:b5:6e:9f:41:ac:eb:78:15:3d:fc:1b:02:64:
4e:27:c5:ae:1f:b2:b1:9b:5f:57:96:9a:cc:cf:ab:
2e:73:95:13:ef:bb:c2:80:90:58:e7:50:a1:b1:c1:
b2:7c:a1:0e:71:58:03:df:a5:5a:74:52:3d:03:7b:
8d:4e:4e:97:48:d2:ce:c6:f9:09:a2:72:1e:87:fd:
d9:17:c2:bd:29:15:e3:c3:76:75:15:98:b8:18:36:
51:a5:89:9c:a1:2f:47:35:97:a5:a6:d5:fb:b9:e8:
02:44:60:80:a8:3e:c7:af:ea:b5:cf:c6:fc:13:94:
1d:ac:49:ad:dc:26:a4:2b:39:af:e4:12:77:0f:29:
56:d1:cb:e5:d3:8e:08:a7:ea:87:1f:96:b9:20:d6:
ad:47:0c:b1:6c:34:e3:1e:57:d2:17:4f:d3:81:05:
97:d5:48:be:a3:c2:57:bf:36:0e:4e:33:4e:de:6e:
24:e3:f7:3a:19:f6:58:4c:e2:dd:9e:6c:c8:66:2b:
00:b8:9d:14:d4:40:ee:b1:35:70:28:39:e8:8f:b0:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:4F:88:B7:25:0E:D9:D7:8E:AA:04:20:B3:9C:AD:C4:5A:2B:05
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:59:cf:df:02:61:42:ec:e0:6f:53:d9:37:f3:c2:f9:ae:88:
e0:32:a7:15:7f:75:9c:87:f8:18:39:f3:1b:58:06:ca:44:57:
6c:11:90:06:ea:7d:38:09:a5:6a:6d:7a:e5:fd:45:7a:8b:0b:
78:d0:5a:e1:12:44:f4:20:5e:e6:03:23:b4:44:e3:07:75:8c:
57:92:3c:ba:f8:53:9c:22:c2:c8:f4:99:ee:e4:74:45:dd:a8:
48:de:33:b9:e4:80:1b:a4:a3:86:9c:c7:94:ac:44:e5:4d:1f:
86:45:77:7b:b4:6a:4e:a4:8f:e4:43:d7:d2:2b:f9:91:dc:df:
c5:20:11:b2:1e:3d:90:ce:70:8d:ba:13:f6:50:08:d8:ad:62:
8d:3c:40:4f:95:ba:5b:bd:72:a0:b0:e7:62:0b:ee:cc:14:e3:
fb:82:8c:f5:16:43:ad:9e:3f:17:e6:04:c5:aa:6c:45:67:12:
f9:a2:8f:ef:43:1e:74:9b:bc:59:92:51:9d:37:74:19:64:66:
25:f4:75:7f:41:5c:ef:1f:eb:fb:1d:47:9c:9d:f5:65:bc:dc:
e4:bf:4e:66:19:24:12:25:dd:50:4a:82:30:5b:bf:5b:cd:16:
96:06:65:06:cb:38:0b:ff:15:3c:af:4b:18:b7:17:d6:2a:04:
c5:bf:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:51 2026 by rpki-client