Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: csmBlGyEQjY69/3eQlus0IQuEvXYadZFJzLAGj2vpVM=
Subject key identifier: 21:00:B6:5C:7A:44:CB:F1:1C:20:AB:68:88:E5:4E:9C:CC:40:D5:99
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 019D29CE7B5BCD876B193F30577527C1D9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 0BFC
Signing time: Thu 26 Mar 2026 11:01:30 +0000
Manifest this update: Thu 26 Mar 2026 11:01:30 +0000
Manifest next update: Fri 27 Mar 2026 11:01:30 +0000
Files and hashes: 1: 21R_t7vKnYEIDQebm-7zjxxy-lo.roa (hash: uGSGk5iT+FrqnBLQlW6LsLr35tMh1jia+p+sY2P//70=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: BgE7YyFA6scNsn6/evLoDpDQIp2UWTT38W5bmv3PLrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:7b:5b:cd:87:6b:19:3f:30:57:75:27:c1:d9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Mar 26 11:01:30 2026 GMT
Not After : Mar 27 11:01:30 2026 GMT
Subject: CN=2100b65c7a44cbf11c20ab6888e54e9ccc40d599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:ea:a9:bb:d8:56:88:bb:e7:bd:ec:b1:bc:
2c:7a:6f:bb:51:ae:a5:a3:d9:2f:45:d2:60:5b:1a:
8b:92:16:e7:33:22:3a:78:8f:9c:b8:e7:c1:c5:4b:
da:0a:1a:30:d0:c1:6d:b0:9e:00:35:90:f1:1d:83:
3c:75:78:c4:b2:f7:b0:46:a2:cb:86:ab:dd:32:05:
fa:d5:96:94:9a:1c:d6:87:a3:bb:d2:b5:36:e7:1e:
5b:82:36:ba:97:13:96:1a:51:f6:5f:07:84:39:de:
6d:f8:02:db:ef:29:b1:2d:93:cf:9a:5a:dc:46:23:
25:0c:37:93:57:e4:5a:05:13:72:42:cc:ed:5d:f9:
ad:d3:28:dc:75:ee:e4:d3:b4:15:19:7c:88:27:30:
cb:ea:ca:08:bf:e8:94:48:ab:16:2c:1f:25:9c:3c:
10:bb:87:72:c2:07:7c:3b:54:5b:88:28:d9:3d:c9:
ca:fb:53:64:69:13:f0:68:bb:10:32:a3:95:11:58:
32:9b:b8:61:d8:3e:ce:17:84:8c:12:89:02:47:b0:
6f:a9:c8:ec:bc:0e:0f:ce:d7:9b:b0:2e:02:b2:1f:
f3:5d:6a:00:04:56:6e:12:9f:32:1d:d4:73:8c:75:
f4:0f:68:7a:7a:21:46:8c:7d:cf:5c:b4:03:75:8e:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:00:B6:5C:7A:44:CB:F1:1C:20:AB:68:88:E5:4E:9C:CC:40:D5:99
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2e:14:0a:75:d7:c6:f6:08:7a:03:1e:b6:ce:99:58:2f:37:
b8:44:cc:b1:51:dc:8c:1e:e6:1c:e4:b1:78:82:42:29:00:7a:
e9:8f:fe:37:9d:74:77:83:6c:52:21:a1:d3:bc:84:c7:0c:b8:
13:62:3b:56:cc:0d:da:69:52:76:3e:70:fb:2b:f3:39:ec:ca:
75:1c:31:78:1b:11:5f:3a:9f:60:57:0a:a5:5c:c7:89:b6:41:
48:44:fa:d5:30:d1:1d:e1:de:c7:40:45:d4:91:94:3a:eb:42:
9b:5f:da:0b:e4:e8:12:df:e5:57:24:83:88:93:3f:ef:54:58:
4f:63:ef:96:d3:e8:4b:fb:a0:2e:cd:ba:d8:0b:d4:6f:a2:2e:
97:17:a0:3b:f9:0c:8a:3f:e8:08:38:04:97:aa:6e:ff:32:45:
01:8a:6c:62:e0:f5:c3:76:7e:fb:e3:eb:9f:a6:fc:46:d4:1c:
e8:7d:09:01:0b:19:12:17:df:d7:99:20:b8:56:1b:58:00:50:
c0:97:16:fc:95:05:b9:8a:6b:87:f6:00:06:74:b6:3d:cf:ce:
37:12:d2:d7:29:d7:d6:a8:c0:89:14:7e:30:50:7d:62:11:8d:
a1:2f:cc:95:d1:6f:a2:c8:0b:fd:ae:80:a5:52:dc:b8:78:38:
9e:8f:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:49 2026 by rpki-client