Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: elOLiOo7fS4lXOKe6mVo6tWykl8fyfUv8XsoprNF03Q=
Subject key identifier: 03:F4:97:59:C8:10:4C:16:9E:C8:F9:36:ED:8B:D9:D4:28:91:39:2F
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 019D2583FC75579CA1A0DCB7EDC1C54B0C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0F3C
Signing time: Wed 25 Mar 2026 15:01:39 +0000
Manifest this update: Wed 25 Mar 2026 15:01:39 +0000
Manifest next update: Thu 26 Mar 2026 15:01:39 +0000
Files and hashes: 1: eRjL7bmUuZoWQUIbq4eEp3CN-0M.roa (hash: y5sRxVzTyv3q+thLaOje2bsBoe1cBCrXQcLT//6Uj0k=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: mWXNdvgpiFSDTzRJx+yveDL2R6cWJwtGNhsEr68ozww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:fc:75:57:9c:a1:a0:dc:b7:ed:c1:c5:4b:0c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Mar 25 15:01:39 2026 GMT
Not After : Mar 26 15:01:39 2026 GMT
Subject: CN=03f49759c8104c169ec8f936ed8bd9d42891392f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:3c:47:29:5e:60:ae:62:67:dd:f7:4f:99:
24:a0:5a:28:82:37:70:76:90:d4:da:d1:57:bd:73:
63:2a:84:a0:3f:80:ff:ed:ea:8e:f8:4f:b7:43:e5:
77:2b:fe:7e:80:31:eb:23:78:3d:7c:f5:0f:0d:f8:
dd:b2:69:80:19:36:6c:44:fe:14:c6:60:a4:e8:3a:
44:0a:56:f1:32:f9:1e:d2:b0:fd:d4:1e:36:35:ae:
72:d2:c0:3b:54:e8:92:7b:fc:7b:e4:a1:16:63:cf:
d8:f4:83:5d:fb:22:f3:79:3d:da:29:64:b1:8d:7c:
8d:0c:d9:f5:d6:7c:d3:b3:d9:18:19:53:bd:3a:dc:
28:6a:e2:92:0d:43:ee:fc:87:66:9a:20:d7:ea:24:
32:07:7c:b0:e3:e9:bf:fd:90:64:3d:76:2b:15:92:
26:60:8b:29:9e:3b:29:01:37:1c:13:20:7a:c0:73:
04:98:47:d2:2e:e4:2d:62:8f:d2:09:e2:7a:67:12:
ab:37:7f:e3:3a:d7:ad:24:ff:66:66:d2:4d:f6:49:
11:de:24:7f:b2:16:bc:85:eb:1c:f1:a0:63:51:e4:
07:e3:be:b8:05:3f:a4:c9:f5:b9:58:95:d9:10:c0:
67:6d:98:42:df:ce:ac:6f:c4:97:a3:0a:25:ed:9f:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F4:97:59:C8:10:4C:16:9E:C8:F9:36:ED:8B:D9:D4:28:91:39:2F
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bc:06:d0:89:c4:e2:c5:e2:9a:e4:8e:8c:73:15:e1:bf:8c:
c8:6d:75:32:a2:ca:68:23:14:0a:d2:7f:55:74:a2:97:56:4a:
77:c6:71:da:d4:1b:20:8a:35:16:fc:61:1e:e6:5c:ee:64:9d:
60:08:77:bb:a6:e9:9d:87:8a:95:5a:7e:e9:33:01:ce:04:99:
b3:d4:b0:f0:0d:7a:93:d3:2a:d1:e3:95:f4:5f:4b:59:24:dd:
fc:9c:9f:ee:19:e1:94:b1:01:47:1c:b5:52:2a:f9:2f:b2:bb:
a5:96:fa:36:f6:e8:74:5b:92:7e:3b:1c:2b:9f:17:83:68:d3:
12:c1:db:ef:86:3f:f2:c1:71:46:38:ff:80:24:b2:83:10:32:
4c:56:87:c2:21:31:3c:b7:7f:10:d9:43:a8:f3:f9:7c:47:c2:
b0:09:fb:48:99:56:a1:97:0d:2c:60:bb:44:a0:94:33:90:d9:
93:fa:95:c8:04:6f:e0:43:b4:95:d0:bc:ca:2e:49:df:8d:c9:
ff:96:5f:27:c2:0a:52:62:7f:fe:65:ec:5d:91:81:7e:d5:84:
ac:1d:45:3d:bd:75:97:b3:68:c8:a5:3e:98:e9:7d:9f:d6:7d:
27:5f:d0:ff:e3:0a:36:75:bf:07:2f:78:4c:0e:27:d3:54:17:
eb:d0:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:49:10 2026 by rpki-client