Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File: qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier: AZaOl/A77L7i03NeOvYW8Vuy6vgtRq40scayZhMZwBg=
Subject key identifier: 67:43:CB:E1:D7:21:5E:FD:7B:D5:2E:7D:DD:04:15:06:E6:0B:35:26
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 019D25F14D34BC745E7866521B8945F11C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number: 12FF
Signing time: Wed 25 Mar 2026 17:01:04 +0000
Manifest this update: Wed 25 Mar 2026 17:01:04 +0000
Manifest next update: Thu 26 Mar 2026 17:01:04 +0000
Files and hashes: 1: W7Nqc3czjNAYZf0VQNvsKz30Xk0.roa (hash: hAWsOVPPXMqcq+BZ016Ik0VLGyZQz9IjdlVeqa+qtVI=)
2: mm9YPqzrw5zY5U3H2B6nLzTqSrA.roa (hash: g53CFeW1Ry00+6lkqgMlD1le2EyIkmKgf8pBvIsao8s=)
3: oph9L7tpSPraSSHMUNSUUs7Z0mY.roa (hash: R5tBSkoJyz/MYZ9TPqFABtYqxYHhHi1mRxsNEGxKEp4=)
4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: B6NkidDWRJP7UrQmQJhaEWVqZ1M6VqLy2L/l7lt8kCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4d:34:bc:74:5e:78:66:52:1b:89:45:f1:1c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Mar 25 17:01:04 2026 GMT
Not After : Mar 26 17:01:04 2026 GMT
Subject: CN=6743cbe1d7215efd7bd52e7ddd041506e60b3526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:72:20:4e:f0:33:b6:74:2c:2d:20:1d:6c:
01:c7:a0:49:b0:7e:ca:cc:09:61:58:97:56:27:92:
cd:04:8e:4d:5a:1e:43:50:76:f6:41:05:e5:73:e1:
25:20:92:fc:5d:b5:9d:c2:da:22:06:e5:5f:db:d2:
f9:6c:da:4a:fc:66:f9:c1:c0:9b:7e:24:16:71:ce:
0a:34:76:cd:a2:a1:55:53:91:cd:e8:1b:83:61:1d:
0f:47:ed:3f:23:09:37:11:77:55:7f:e1:7a:cd:c3:
9d:ab:2b:21:a4:43:13:c2:c8:18:4f:90:c6:93:5e:
77:5b:98:15:2e:30:05:1e:21:39:a2:2d:05:ec:be:
db:81:4b:9a:b8:91:09:3e:4f:43:b6:50:08:86:97:
21:8a:6e:99:09:d9:ac:75:ca:02:63:bd:a0:a9:01:
a0:0b:9e:fc:4e:89:d9:99:c2:c1:08:f0:8e:3b:02:
d3:86:28:ff:75:a7:d6:ac:03:e4:0a:87:6a:51:50:
9c:c8:75:63:f3:5f:7e:dd:2a:ea:02:8a:aa:8e:32:
22:31:bb:12:3a:13:4d:3a:ea:53:ab:59:80:93:2e:
2a:16:7b:d6:6d:f3:5e:cd:e2:22:1e:71:c6:12:48:
b1:be:c6:f3:13:f2:59:b3:7b:ee:2a:3f:d6:d8:3a:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:CB:E1:D7:21:5E:FD:7B:D5:2E:7D:DD:04:15:06:E6:0B:35:26
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ed:08:3e:e8:b4:c6:0f:13:40:72:21:e2:8e:78:e6:4e:96:
9b:04:32:09:5a:62:fb:30:d3:dd:41:56:51:e8:40:54:97:e1:
57:57:51:93:16:5b:c2:4c:e4:57:36:74:10:37:86:4f:9e:16:
26:d7:7d:8b:bb:df:e1:78:e5:29:46:75:b5:64:db:ef:e3:e9:
82:cd:37:f0:52:c6:24:d4:0d:4e:dc:f4:2b:f7:75:ba:31:cd:
44:0d:01:44:5b:a9:c6:17:63:b0:9b:28:65:ea:f1:d5:c0:0f:
e0:a0:4d:f7:f0:3f:e6:66:e8:19:3b:31:df:82:19:c7:c9:1b:
44:5f:ac:11:f8:56:68:ec:73:4e:5b:7d:27:4d:51:07:b4:a3:
5b:f1:39:d6:98:b4:9b:65:5d:48:b9:af:42:e8:8d:98:34:06:
a9:2a:eb:7f:5b:97:c2:b8:80:65:2e:98:78:4f:0c:86:1f:e5:
4c:9a:fd:b6:44:b4:2a:8a:8d:a8:11:2a:e3:5d:9b:64:dc:58:
b7:a2:49:99:a9:86:41:1d:d2:5e:8e:a0:5c:2a:17:47:f4:55:
74:a0:61:bc:ed:f9:aa:dc:08:95:ab:cd:d1:0d:13:a3:ab:86:
67:e2:b6:62:78:6c:d3:0d:62:d6:ac:90:5d:c7:42:3e:0a:26:
6c:47:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:23 2026 by rpki-client