Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier: xihm7aimfCDJZmj7E2Lm2xvt7E03jQHQckb9/e2fHCY=
Subject key identifier: B3:F9:66:16:4A:6F:8D:1F:3C:F8:FF:41:7C:F3:24:32:8A:04:27:E4
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 019D27045393B61F628CE89F2705FFB989E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number: 0C2D
Signing time: Wed 25 Mar 2026 22:01:28 +0000
Manifest this update: Wed 25 Mar 2026 22:01:28 +0000
Manifest next update: Thu 26 Mar 2026 22:01:28 +0000
Files and hashes: 1: 1yNxCmePPnXYmANALvF6crPNDSc.roa (hash: NnbT8iaws5JgljNe+UvSj+hAMr2jidNTvDwKfdnsRJM=)
2: IjH8Bw6khS3HfsHRDOq7KVhCvtE.roa (hash: xqV8sj84jv/de5gXJFmozbmUfKDQmxucnoddgaBj3m4=)
3: cMufgoQU0L0jv10NNeCceGj__mo.roa (hash: nQdacmV+KrpQrHaTQNA9qp4TW/zHU/aMagi4CQEt/fQ=)
4: o4XRIYaubJYsaKle7Mq2zp2yQPU.roa (hash: /2hj0m+hPdpMrzwdZKFg60yCkkhQ3QugnRJdjSqOsJc=)
5: osiPIqZHFwJFJVDnL4CHHio8HdM.roa (hash: vGPA8SjpFPALGX8zEZpTARWGQMkoh1k17+6L+YmNaLY=)
6: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: p9s1ZuWCPKWsRDbjA5HolGhE/hze/z0HvkVrhrKSHcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:53:93:b6:1f:62:8c:e8:9f:27:05:ff:b9:89:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: Mar 25 22:01:28 2026 GMT
Not After : Mar 26 22:01:28 2026 GMT
Subject: CN=b3f966164a6f8d1f3cf8ff417cf324328a0427e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:95:5f:54:ef:cd:76:3b:a1:57:03:aa:78:
5e:8a:a6:72:3f:ed:10:ee:c9:e1:e7:5f:6b:8d:cc:
39:89:c0:16:aa:d8:56:49:56:5b:1b:ff:6d:b3:87:
3f:84:bb:f0:24:9d:53:a4:d4:f2:e3:3f:8a:44:d2:
6e:6a:69:a2:70:26:e4:d9:f8:1d:24:b6:5a:3e:76:
88:1c:d8:f3:09:a2:af:0d:e1:ce:e1:32:da:c4:db:
60:51:ac:14:44:85:f2:14:ff:b6:3f:5d:d0:22:f1:
78:87:42:67:b4:87:80:44:ad:70:4b:0e:58:76:bc:
cf:95:79:d4:28:28:bb:6c:b5:f6:69:30:e6:e0:88:
2e:a7:d2:f5:f8:46:63:b1:db:17:80:b5:ee:77:f2:
50:da:38:5f:e8:74:8c:86:68:e1:fe:cf:68:1f:95:
79:53:37:1d:56:1c:f0:a3:91:7b:b0:89:d9:b0:fd:
9b:23:a1:40:29:e4:bd:1b:af:d8:b5:5f:c5:05:a5:
74:d7:a1:8a:a7:37:32:fb:11:9c:42:e4:35:21:2e:
f2:f3:32:3b:4a:a8:e2:1f:e6:39:a2:f9:60:dd:6f:
c6:41:3d:dc:c3:1b:99:d1:51:30:d6:91:be:1a:31:
6d:28:49:3b:61:7b:ac:18:2b:46:d6:6c:29:cd:f6:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F9:66:16:4A:6F:8D:1F:3C:F8:FF:41:7C:F3:24:32:8A:04:27:E4
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f3:00:18:04:b7:42:5f:48:22:52:ea:4b:01:19:76:14:0a:
6f:21:e4:a1:50:a7:9a:1e:2e:5d:90:99:d6:f1:69:fe:eb:5b:
68:f8:24:56:e5:95:e1:fa:5c:23:07:25:c9:df:6a:3c:6c:6d:
ed:46:5c:3a:a0:e1:fd:54:04:cc:ef:93:f0:ef:91:3d:69:d7:
76:64:bf:b2:6d:44:45:70:ea:36:43:4a:11:f2:b5:10:48:58:
6a:ea:5c:53:59:89:6a:62:d7:6e:19:22:d1:57:ba:47:b2:ae:
b2:0f:e2:99:5f:d7:fa:35:8a:8e:88:af:87:18:47:25:07:81:
b8:30:e9:2b:60:08:3b:83:e0:18:f4:19:ab:6f:35:28:fe:aa:
6b:a0:f7:66:f1:eb:9c:b4:a4:6f:e4:77:7f:22:a8:eb:64:1c:
a8:b7:16:21:9c:69:af:68:e5:de:fe:65:f0:b5:cf:d4:da:89:
62:be:39:47:61:d9:74:3c:e7:ab:bf:a8:b3:3b:9f:22:3c:58:
9a:ef:91:39:6b:2e:e0:92:65:fd:35:aa:8b:d0:8b:55:cd:e9:
bf:93:e3:26:b2:d1:0f:7f:c6:70:42:91:ea:f4:7a:e3:c6:e0:
68:9c:98:8a:35:0c:a0:70:10:d6:4f:4e:35:2b:17:a3:78:83:
f8:71:85:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:19 2026 by rpki-client