Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: IDLJKs4EnkrSApAUyxq9AF1Q+qF8J1oBWcxwoNmkEdY=
Subject key identifier: 2F:9B:3C:24:64:9D:05:A2:73:E2:59:08:A8:2B:CF:02:8A:63:33:FF
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019D273AB4E7A5E9F417E87CED711101DA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 0135
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: 32zKbQ+9wD8n3RF1yIBROf5hwaNEgZpFBhY2iYa8Gno=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b4:e7:a5:e9:f4:17:e8:7c:ed:71:11:01:da:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=2f9b3c24649d05a273e25908a82bcf028a6333ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:a3:6b:11:18:2a:76:67:b8:f5:9a:ef:27:
f7:2b:70:0a:2c:5f:58:8e:e9:a0:38:9f:4d:ec:04:
5e:8a:e4:f1:13:a3:f3:70:44:60:ad:1f:f2:f9:8e:
b2:92:d7:54:3f:74:a3:85:ff:d4:c7:03:fa:5e:55:
08:71:3d:3f:38:01:7e:7f:da:3e:08:0e:64:1e:ee:
45:09:68:dc:7e:b3:73:fc:72:f2:18:2d:4d:4a:09:
d2:dd:58:17:93:1c:bd:83:de:35:d6:79:ad:9b:2a:
a2:60:ef:91:fe:24:84:f1:27:c2:96:85:9e:c0:d6:
65:8e:09:f3:f7:6d:a6:9b:b9:07:43:10:9f:9a:bf:
c2:66:3c:30:5d:ea:41:c9:b4:93:b4:01:ca:bc:5f:
e1:49:dd:00:2b:21:75:1a:34:10:21:c1:3f:d8:15:
11:43:7d:b4:0c:ea:66:cc:5e:1a:dc:b7:68:da:fa:
9e:cb:c1:d0:14:a1:5d:57:b9:53:ef:97:68:67:e1:
95:d8:f4:4a:ba:f4:97:0a:7b:95:c4:ab:68:8d:02:
ca:52:87:bc:9a:32:38:a3:ac:8b:1a:72:38:c4:91:
b0:59:38:e4:a8:3b:50:11:c0:a0:42:8b:d9:88:28:
78:43:7d:f7:4c:05:50:9c:e8:9a:71:43:89:01:ac:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:3C:24:64:9D:05:A2:73:E2:59:08:A8:2B:CF:02:8A:63:33:FF
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f3:f9:74:ce:95:04:4c:c8:cb:42:b4:6a:d6:d8:8f:d2:8d:
e4:8b:ce:98:c6:96:c5:42:90:f3:c5:00:df:dc:84:69:8a:7d:
12:c4:90:80:01:51:4c:6b:e5:5b:1a:be:75:bb:01:e8:e5:60:
7d:fd:a5:be:32:a8:ea:77:de:05:ee:b9:d5:f8:5f:fc:0b:11:
70:7e:70:36:37:bc:da:b7:b1:49:ab:b3:53:a9:76:0f:ff:a7:
7b:10:79:11:81:cc:34:c8:7f:7b:f3:1e:97:11:80:81:9f:86:
48:0d:c7:1a:e5:3f:d2:d4:9c:b7:19:fe:24:9c:f8:7f:4c:54:
82:69:99:36:85:9d:c2:b7:1c:7d:38:3d:a9:dc:f8:d8:34:1e:
9e:7d:34:bf:2f:a1:59:0b:0b:e5:66:3d:c6:38:d6:8a:83:25:
9e:77:90:6b:69:85:9a:d7:16:a6:f7:43:8c:05:e9:3c:ac:2b:
3b:43:84:67:35:d6:d6:61:c2:5b:88:4c:c8:78:eb:8f:09:f1:
29:25:e3:cc:82:18:00:52:f5:61:7e:2e:bb:08:59:6f:05:61:
7e:51:90:b1:40:67:62:57:f9:bc:33:f3:d9:d7:d0:64:3d:dd:
2b:98:dc:de:6a:a9:fc:f6:49:a5:37:40:f7:07:a5:0c:7e:af:
0a:0e:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:51 2026 by rpki-client