Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: 6712EaPKqWffUtQw4vzOsf2XSdN0H3RZ8mz3szmjdds=
Subject key identifier: 96:45:96:BD:79:42:66:73:10:29:8D:F7:6F:05:69:7A:14:C8:71:E2
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 019D265F96D19B4FC2186A76E850E08C3D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0DA3
Signing time: Wed 25 Mar 2026 19:01:31 +0000
Manifest this update: Wed 25 Mar 2026 19:01:31 +0000
Manifest next update: Thu 26 Mar 2026 19:01:31 +0000
Files and hashes: 1: A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa (hash: 0Z1tKMjOQH8GDFQdN2zkZ1XfpKKTrB+7t0AWIQlWOsU=)
2: nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa (hash: SFQUWNNE8spFBp4DjpdKZ/dLlID0cBvRZXOgsiCgoVM=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: MnNz++ymP26oTa132frhObIlAy9Kd5KJbCt02goZA3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:96:d1:9b:4f:c2:18:6a:76:e8:50:e0:8c:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Mar 25 19:01:31 2026 GMT
Not After : Mar 26 19:01:31 2026 GMT
Subject: CN=964596bd7942667310298df76f05697a14c871e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:8b:09:61:de:eb:50:02:ff:98:15:7d:1b:
18:35:95:70:19:6a:2e:b5:13:22:ac:fd:27:d5:6a:
ca:f0:e8:60:e9:59:c7:01:fb:a7:cd:78:59:87:d4:
b1:c5:3f:a5:0b:11:55:99:8a:9d:90:75:38:07:17:
c8:32:6a:24:83:75:fd:62:f0:a1:e2:d3:e6:4f:82:
f9:81:9b:b0:ab:1f:ad:4d:d1:e3:9b:e8:d5:8e:19:
0d:39:df:63:54:0d:c0:7f:a1:29:80:13:13:1d:38:
4c:3b:36:71:f4:da:7f:83:ec:b6:38:82:62:55:ca:
c0:79:0d:cc:0f:39:83:3c:96:b6:1b:e7:e5:b9:30:
01:b7:0c:ec:58:ad:37:96:99:4b:53:44:c6:ff:b5:
ce:44:e3:4b:00:f5:71:f4:aa:5f:ce:71:0f:1e:03:
fa:ca:2e:72:e0:2b:5c:b7:0b:cf:e0:cb:27:37:6a:
70:ac:e3:bd:03:ae:3f:07:1b:fb:f1:35:df:b9:dd:
3b:86:83:d0:46:41:c5:3e:6c:64:df:bd:8e:b6:5f:
18:d1:d2:49:19:42:98:d3:52:ce:7f:db:9f:9a:e9:
0d:f1:ec:8d:66:4f:02:63:68:04:6f:8f:8b:5f:52:
75:1a:af:2d:71:14:0a:63:a8:d3:f8:0e:61:ea:fc:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:96:BD:79:42:66:73:10:29:8D:F7:6F:05:69:7A:14:C8:71:E2
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:be:76:cf:4f:ae:fa:7f:d2:d2:6d:aa:d5:43:61:20:7d:17:
3d:3b:d4:d2:ef:e1:fe:2f:52:ed:d9:e2:de:18:a7:00:98:a5:
26:e4:99:b9:52:7e:8b:73:61:4f:a1:87:d5:fd:00:6c:b6:02:
8b:1a:84:b1:5e:cf:69:7b:be:31:c7:34:e8:ef:69:61:ce:3b:
10:4e:95:e9:ca:56:4b:83:6e:a6:91:a5:f5:64:61:21:b3:71:
18:e7:2b:47:26:06:c9:58:62:56:35:2f:78:95:dd:a9:3a:98:
7a:63:4c:83:15:a2:99:31:1a:c0:e5:10:22:f0:94:81:19:2d:
eb:e5:b3:c0:6a:3b:5b:af:96:b8:62:3b:4c:2a:87:98:08:6c:
e8:eb:64:29:4b:1e:42:28:be:47:ba:b2:44:ab:04:6f:85:38:
32:f6:b1:5f:42:0b:71:35:75:43:97:15:35:e5:f0:36:07:b6:
07:78:13:58:4f:99:dd:f6:f0:0b:5c:b8:c1:25:fb:4f:a9:e8:
cc:54:0d:bc:12:43:11:83:47:b1:35:c1:da:c1:13:94:02:7e:
e7:86:74:7e:94:aa:0e:60:bf:dc:c7:db:85:1e:00:f1:cf:11:
11:3d:aa:07:d1:ff:9c:c4:16:2f:31:e6:8a:10:f2:92:d1:b4:
0e:54:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:55 2026 by rpki-client