Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
File: qhWXLPu3b6dqmjPaeXxnM8NItP4.mft (raw, json)
Hash identifier: DAIlVwJa9U0pQXmjym1r8nGjpb+vuO57xLIpXg8W49c=
Subject key identifier: B7:E5:F2:6B:5F:15:85:60:93:AF:F1:7B:66:2A:B5:C6:13:8E:3D:25
Authority key identifier: AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
Certificate issuer: /CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Certificate serial: 019D269633F303CFCCB038B73C7FDA88243E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
Manifest number: 18
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: jrpa6ffgl6ZLg25PBip0s0JQIn4.roa (hash: V9w3w4fEjx0PYusw02oT6lMuGBaV9qjr55iLXhK3FqQ=)
2: n33TF7CHRYuKt_cM3pOrRGh_au4.asa (hash: b1MR2hUsjJe9qzx0Hps/De/mPnNIVGi+NurVTZ29rrY=)
3: qhWXLPu3b6dqmjPaeXxnM8NItP4.crl (hash: yPRj+ONSw0MCXn/xOqa8MvuJgYVVH5j5cGLsexaXQms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:33:f3:03:cf:cc:b0:38:b7:3c:7f:da:88:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=b7e5f26b5f15856093aff17b662ab5c6138e3d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:bb:77:15:5e:cf:ef:eb:00:af:0d:d0:b9:
2d:b4:4d:09:a7:7a:f9:c7:22:4e:e2:f8:30:c5:62:
e2:89:b5:7f:b3:ac:19:7c:0d:01:8c:0e:f8:83:29:
39:59:53:2d:f6:a5:86:07:ee:06:13:4c:25:c2:b6:
34:43:39:46:76:24:8f:21:9a:96:9a:aa:ab:b4:d5:
28:f8:13:18:68:c9:9c:8b:7f:f0:df:ae:82:32:36:
dd:bb:39:13:fa:03:f8:40:5f:09:4f:64:60:87:c7:
2c:92:4d:e7:a5:5d:ab:f5:37:ff:53:7f:cc:8b:36:
77:1d:17:d8:63:a0:a8:2a:4b:0f:0a:ac:b3:c9:44:
df:31:56:03:08:72:47:4e:76:d3:b3:60:87:43:e3:
52:47:c7:bd:3e:17:b0:2a:03:5d:cf:9b:09:97:48:
66:b2:3a:c0:21:0f:be:bc:ba:da:9f:6a:64:83:f9:
3a:c2:09:9a:83:41:cf:e3:2c:db:52:55:7f:d0:54:
38:50:86:12:1a:43:56:28:b4:08:ec:f1:04:b3:d5:
c1:68:1e:0c:fa:72:86:5e:da:50:f0:a4:7d:69:f8:
c7:2f:43:b5:43:0f:4e:0f:32:c3:ae:9e:b0:ed:47:
af:f4:99:72:8f:39:fb:26:c7:ca:85:da:35:5d:72:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:F2:6B:5F:15:85:60:93:AF:F1:7B:66:2A:B5:C6:13:8E:3D:25
X509v3 Authority Key Identifier:
keyid:AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ec:ea:07:2c:8e:c3:2b:5c:eb:58:c7:36:fc:a3:10:63:8b:
35:b5:90:27:7e:d5:68:54:c1:9e:19:d2:95:60:2d:45:9e:5d:
b5:37:43:84:c3:8f:d7:1c:fd:0d:0d:7b:07:65:cc:3d:63:f4:
bc:7a:29:44:57:0e:42:f2:f1:ef:6c:f4:6c:d5:a0:4d:4a:9f:
75:01:3f:b6:d3:b6:a6:ec:71:97:ea:89:05:34:6f:a4:67:dc:
85:6a:ee:6a:87:09:3e:fd:e9:d5:d8:19:06:d6:c5:6c:f2:66:
c1:6e:8c:14:ec:18:71:b4:04:4d:b2:5b:41:67:6e:7c:c5:21:
7d:c4:f9:fd:0f:9c:a3:6a:05:e2:a7:e5:f3:f8:9a:0a:5a:7d:
e2:a9:51:2d:ee:fe:1e:e8:68:f2:5c:6b:0a:21:c7:db:b1:74:
66:89:72:81:8b:7c:82:04:12:ff:5f:dc:ed:c6:10:a0:ca:6d:
7b:ea:76:f7:b7:d3:bd:21:8e:d9:aa:70:4c:56:95:3a:59:76:
83:bf:f8:76:05:6f:02:ae:e9:ee:04:92:bd:6b:52:bf:3b:a7:
49:ca:ee:26:42:98:7d:7b:9d:4a:26:19:a5:5f:d5:70:d8:2d:
32:1b:d5:fa:01:e8:a9:70:bc:b9:db:1e:a8:72:62:e4:b3:ae:
c6:62:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:28:33 2026 by rpki-client