Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: Y4oHrrvqVSzXMg0DPG2EWaou99wiHqz8J+4Je7Ry1pM=
Subject key identifier: 3C:FF:B9:C5:30:47:53:F0:C7:16:8A:9C:02:66:54:01:0A:8D:99:04
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 019D26CCF496B66C80F9940861FC67F9E8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 21:00:59 +0000
Manifest this update: Wed 25 Mar 2026 21:00:59 +0000
Manifest next update: Thu 26 Mar 2026 21:00:59 +0000
Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: 5ZtIpfoMVvU/WPxLMwZ70cV2EVfVQIC76LXIwOafYSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f4:96:b6:6c:80:f9:94:08:61:fc:67:f9:e8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Mar 25 21:00:59 2026 GMT
Not After : Mar 26 21:00:59 2026 GMT
Subject: CN=3cffb9c5304753f0c7168a9c026654010a8d9904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:b4:67:cf:92:7a:db:a7:12:fb:11:16:77:
0b:c8:d2:c4:98:96:29:bf:72:52:fb:31:a4:f1:8d:
a8:11:73:03:d0:00:36:a6:6f:4d:03:e0:00:ab:7f:
44:0c:98:72:da:06:5d:0c:b6:89:b3:8a:7d:58:16:
25:d0:4b:c7:76:4a:08:5d:05:41:17:fd:c3:3e:46:
a9:3f:78:90:e1:3a:a2:d2:65:74:ae:38:b2:58:62:
14:dd:1c:4f:50:fa:5f:f0:4b:48:7d:43:d9:19:df:
4b:d1:4c:ac:6b:43:f3:bb:ea:f8:4b:4f:0b:a8:35:
75:9c:a6:28:63:c8:58:97:e4:34:fb:28:86:de:0d:
76:e7:79:51:d8:78:63:f5:ae:55:54:a5:02:07:76:
18:82:7b:9f:d1:b8:d7:5e:81:36:8a:d3:3a:17:2e:
a2:71:a5:de:19:5f:7a:da:19:46:14:82:5b:95:65:
c5:48:46:58:85:01:9e:e8:06:20:d0:2d:ec:49:53:
c5:59:92:2b:d4:b2:f5:44:54:f4:dc:87:20:7a:41:
ad:6d:27:c2:6c:a4:61:ca:1d:c8:ed:41:3d:24:03:
18:97:4b:05:7e:5c:e7:84:7e:d3:bc:1a:9e:f1:75:
0d:2f:2f:ef:94:11:2c:08:a1:19:45:13:c4:71:bf:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FF:B9:C5:30:47:53:F0:C7:16:8A:9C:02:66:54:01:0A:8D:99:04
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:83:9d:5e:34:01:60:29:22:71:ec:f0:b1:37:bf:ae:eb:6f:
cf:49:a7:e7:44:5a:5a:73:00:28:8c:d6:d2:ce:4e:9a:b8:b5:
81:1d:2d:ca:b7:31:31:a4:a6:3a:65:c4:30:14:26:00:5e:84:
fa:23:7e:09:fa:42:1e:79:f5:6b:32:3c:fc:7a:32:15:73:5e:
41:0e:57:61:26:58:ee:08:0c:2f:69:56:6a:39:24:f8:2f:f2:
1a:63:97:fe:18:c1:ba:fd:92:5b:1b:93:a0:e7:45:25:d4:e9:
b0:01:85:05:95:3d:7d:0b:5c:40:b3:4d:34:cb:f7:d5:d1:2b:
73:2f:f0:c7:ff:d5:d6:e7:10:3b:06:c5:f6:ed:33:72:01:6a:
b0:67:25:ac:33:c3:7e:2c:60:cc:65:42:50:4b:df:f8:e0:86:
d6:fc:e2:91:ef:21:13:8e:25:08:39:73:bb:8a:75:da:2c:7b:
cd:be:2f:70:30:e9:5f:e5:c1:5d:18:f9:88:35:ec:82:72:e3:
29:76:8c:8f:12:25:6a:32:0d:cb:a0:d2:8e:56:84:0d:f2:53:
58:9c:98:5a:8b:11:8a:ab:72:37:b5:97:b3:a5:fd:17:86:06:
13:b3:62:08:2a:73:08:f8:99:dc:6d:0a:6a:33:38:2f:35:d8:
92:a6:8a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:41 2026 by rpki-client