Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: RoJ1ViAW8o5COGDkPeJoZYsVGsmMRiT9rLPsn3+cu3A=
Subject key identifier: DC:FA:F3:F2:9E:C3:3D:2A:8A:99:63:7F:21:5B:0F:9C:C4:11:89:58
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 019D27DFC9DD919404C4BA0E3AF61F2E49BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: fksKXRKS55Q1EzjRDTMK_vqizsE.roa (hash: ofAdtnCLELO0txtL3rvBXK9EQmnTv0xBnbEG6eay9CA=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: 1lNEkXOT+VJPhzqvFHYP3gta/JzRMUVJzlqGG2tx1V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c9:dd:91:94:04:c4:ba:0e:3a:f6:1f:2e:49:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=dcfaf3f29ec33d2a8a99637f215b0f9cc4118958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:59:e2:85:14:fe:46:5c:11:1a:02:1c:d4:
5d:15:5f:41:97:cc:9c:32:1e:2e:e9:66:23:f6:ca:
a6:9c:fc:40:51:d8:fd:4b:e9:cb:8a:81:2a:4e:43:
36:dd:99:56:bd:06:1e:02:29:7e:b9:05:bc:c8:6d:
64:c1:6f:fc:3f:93:83:ed:11:0a:d4:3e:ed:e6:e7:
e0:c4:4b:cf:1a:f9:34:80:d2:4d:d1:f8:7c:c1:8c:
3c:38:78:9d:49:1a:98:21:a6:c9:39:69:6c:fb:b3:
88:29:e7:65:58:41:d0:e1:7f:cb:b5:62:5c:26:5b:
ae:bc:6c:31:8e:21:af:cd:39:b8:6b:32:ed:6a:27:
6b:b2:d4:ea:c7:f3:da:1c:3d:ba:94:ea:0c:56:58:
29:cc:ca:0f:55:36:05:56:61:36:3c:80:81:ef:42:
9f:9d:1d:a8:45:e8:74:0c:46:5d:ea:9b:9d:9c:ca:
b6:f1:a2:ba:b7:c8:17:f8:d5:eb:47:61:e6:60:7e:
4b:f7:09:2b:7e:d7:0d:84:c8:5b:a7:a5:b8:cc:bb:
86:12:36:f1:44:86:60:c6:10:d3:e7:9c:e2:b8:cb:
ba:b7:41:14:ba:d5:a6:4e:f4:7d:6c:e4:0d:be:c3:
63:c2:72:ef:1d:de:e9:26:ef:be:a4:98:82:87:e7:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:F3:F2:9E:C3:3D:2A:8A:99:63:7F:21:5B:0F:9C:C4:11:89:58
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8d:07:74:42:51:de:8d:8f:a9:e6:f3:21:41:d1:67:95:22:
67:2d:ba:a2:5f:c7:02:a7:58:23:7e:54:b6:1f:43:08:8b:af:
1b:c0:be:31:c4:7d:7a:9e:60:7c:52:d7:15:b3:ca:9e:3e:0f:
65:34:ee:82:dd:e3:e2:9a:4c:9f:d6:7d:30:70:63:60:aa:c7:
b6:8f:7e:03:b3:33:ad:f3:4c:bb:8e:55:81:0d:26:44:9e:98:
57:59:4a:f0:9d:b2:f9:26:34:ae:8e:9a:0c:58:ba:a7:8e:78:
c0:43:64:53:04:7a:92:f0:1a:6f:99:7c:c4:fa:95:2f:27:fa:
ba:38:ea:83:66:c3:ce:57:fb:da:ea:4b:71:f6:a8:48:be:35:
48:9e:4e:01:fa:92:ae:10:6f:9d:7e:aa:2f:15:46:28:34:c9:
f9:f5:6d:46:43:42:96:f3:7c:38:ec:72:2e:4b:a2:b3:ef:4a:
8c:be:c6:9a:59:83:9d:f4:7c:80:82:62:ca:21:3e:90:71:5c:
5d:1c:89:f7:4a:76:06:3e:0f:22:93:8f:fb:cc:f0:25:62:13:
16:ed:60:5c:00:e5:bb:b0:22:2a:36:c3:c6:b9:86:8b:ff:6c:
bd:9e:5a:1e:cb:cf:be:db:e2:8f:66:55:39:e0:9c:ac:11:35:
d7:f5:fe:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n38ndkZQExLoOOvYfLkm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlMmU4MTJmMDlhYzRmZTJiNDdlNDI2OWNlMWEwMjAy
MWNhMGUwHhcNMjYwMzI2MDIwMTEwWhcNMjYwMzI3MDIwMTEwWjAzMTEwLwYDVQQD
EyhkY2ZhZjNmMjllYzMzZDJhOGE5OTYzN2YyMTViMGY5Y2M0MTE4OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKdZ4oUU/kZcERoCHNRdFV9Bl8yc
Mh4u6WYj9sqmnPxAUdj9S+nLioEqTkM23ZlWvQYeAil+uQW8yG1kwW/8P5OD7REK
1D7t5ufgxEvPGvk0gNJN0fh8wYw8OHidSRqYIabJOWls+7OIKedlWEHQ4X/LtWJc
JluuvGwxjiGvzTm4azLtaidrstTqx/PaHD26lOoMVlgpzMoPVTYFVmE2PICB70Kf
nR2oReh0DEZd6pudnMq28aK6t8gX+NXrR2HmYH5L9wkrftcNhMhbp6W4zLuGEjbx
RIZgxhDT55ziuMu6t0EUutWmTvR9bOQNvsNjwnLvHd7pJu++pJiCh+dd5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz68/Kewz0qipljfyFbD5zEEYlYMB8GA1UdIwQY
MBaAFKpE4ugS8JrE/itH5Cac4aAgIcoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYt
ODY2NDBmY2EzM2JmLzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYtODY2NDBmY2EzM2Jm
LzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhI0HdEJR
3o2PqebzIUHRZ5UiZy26ol/HAqdYI35Uth9DCIuvG8C+McR9ep5gfFLXFbPKnj4P
ZTTugt3j4ppMn9Z9MHBjYKrHto9+A7MzrfNMu45VgQ0mRJ6YV1lK8J2y+SY0ro6a
DFi6p454wENkUwR6kvAab5l8xPqVLyf6ujjqg2bDzlf72upLcfaoSL41SJ5OAfqS
rhBvnX6qLxVGKDTJ+fVtRkNClvN8OOxyLkuis+9KjL7GmlmDnfR8gIJiyiE+kHFc
XRyJ90p2Bj4PIpOP+8zwJWITFu1gXADlu7AiKjbDxrmGi/9svZ5aHsvPvtvij2ZV
OeCcrBE11/X+uw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:05 2026 by rpki-client