Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: 2n6X3oP05UJLVFTS5PVKnnyMOkB/6egU7ene3RNQioY=
Subject key identifier: 3C:C2:68:73:EC:BC:6A:A3:8D:07:E1:8B:19:7B:87:0D:A6:36:06:87
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 019D2884B295A6514F78A53B678A77874EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 03DE
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa (hash: CndX469kMgFnIGnFVgAv1uwBMzZ+jqdPFxwbzTu/wnQ=)
2: Trft0mfWMMwOx--8rqClEKwipxA.roa (hash: 3nok9je6KT8Wv4gKkH7HIrIIK5LI+Nl8LWES2R/jXQc=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: SI+MeKX4855f7+xtMlbj4DLChbendfIL9I8wE1UggzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b2:95:a6:51:4f:78:a5:3b:67:8a:77:87:4e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=3cc26873ecbc6aa38d07e18b197b870da6360687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:e9:52:ff:34:ac:dc:b8:b8:78:94:9f:7d:
39:f8:1f:c8:8f:48:ad:b3:a1:62:48:46:13:d0:98:
4c:ad:71:f0:9e:02:30:3a:7a:1e:7a:ad:de:43:77:
13:6f:7d:f7:17:62:43:aa:ca:6d:ac:ef:8b:b4:4e:
ab:dd:b7:ce:84:31:72:c9:86:ab:2b:4f:13:b5:9c:
6e:07:3d:1c:91:99:66:0e:02:1e:34:8d:21:d4:ec:
c5:98:41:f5:2f:62:67:ae:a8:80:c7:d2:4f:08:dd:
9f:bb:e2:50:0e:6e:9b:29:c2:5d:00:d5:a6:33:68:
6f:3e:4d:15:bd:88:5b:e3:b8:61:f0:80:79:c0:d5:
43:ec:b0:54:74:5a:3d:ca:2f:5d:3b:e3:9b:18:26:
97:ed:18:6a:28:af:26:2f:61:ae:97:2a:8c:c9:04:
a1:cf:e7:4d:7a:a2:c2:f5:38:97:36:bf:7a:d6:bc:
38:62:a9:6e:d0:34:ef:f8:5c:26:e3:08:92:21:36:
fb:e9:72:58:12:f5:57:93:ef:25:9b:5e:ce:21:9e:
ca:52:ff:4d:23:56:22:8d:bb:58:81:e5:f1:7c:c6:
6a:fc:92:95:1d:15:fd:7e:5f:12:cb:14:bf:51:00:
a4:44:1c:89:11:eb:fe:ba:e8:1a:f8:d5:a8:f1:e7:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C2:68:73:EC:BC:6A:A3:8D:07:E1:8B:19:7B:87:0D:A6:36:06:87
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:85:75:aa:91:2f:46:8d:b7:af:bb:ec:a1:85:44:08:a5:39:
35:c2:9c:34:a6:fa:13:42:43:57:09:e3:fe:94:e3:3a:d1:28:
19:f5:3e:b7:22:0c:9c:4c:54:cd:f1:f6:02:58:49:55:8d:7a:
e1:1e:7b:cb:d7:51:64:8c:29:2c:89:4b:96:eb:57:06:ff:bd:
ec:6d:cd:0b:22:a7:67:e3:f9:47:0c:e0:d1:48:b6:e9:f4:12:
10:91:ea:a1:89:f2:d0:3e:51:de:88:a9:ec:3c:69:ed:59:37:
4d:6f:61:bd:2d:93:d0:72:95:d3:1d:9a:93:79:25:2d:ee:1c:
cd:66:84:36:65:d5:93:5d:e4:e2:c8:41:73:95:d7:a1:b2:89:
d0:4d:9b:20:31:2a:e7:3e:58:ff:8c:39:87:09:1b:69:c3:f1:
7e:6d:aa:92:c5:fa:58:62:31:1a:95:63:d0:7f:00:da:94:4f:
fc:2b:54:80:0f:42:22:a3:53:cd:36:fa:77:25:8b:04:d4:01:
23:00:4e:99:91:e7:26:c0:d2:c5:70:8a:18:df:5c:01:72:73:
5b:5c:fe:42:91:14:e8:7e:7f:e4:cc:e5:ce:97:a7:59:ec:80:
65:97:42:fa:9f:0d:8b:54:fb:a8:15:3d:e6:c8:ff:0e:22:aa:
42:ac:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:31 2026 by rpki-client