Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: vCITqgC6ZT/2wgD1NHplf83MkVwwc+zvHF1IcksVsHA=
Subject key identifier: F8:19:8F:DE:1F:65:58:34:4C:CF:C4:89:39:64:2A:1A:ED:AF:C5:5C
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 019D28163E44078A9AAAC345E1865E844AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 039B
Signing time: Thu 26 Mar 2026 03:00:39 +0000
Manifest this update: Thu 26 Mar 2026 03:00:39 +0000
Manifest next update: Fri 27 Mar 2026 03:00:39 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: 6i4S3YMOCAr+Q7aO1fXdAuGJRKNfzaGXT2I9MyWuZEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:3e:44:07:8a:9a:aa:c3:45:e1:86:5e:84:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Mar 26 03:00:39 2026 GMT
Not After : Mar 27 03:00:39 2026 GMT
Subject: CN=f8198fde1f6558344ccfc48939642a1aedafc55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:5d:c8:cf:29:d0:3e:5f:cc:d6:29:31:fc:
32:19:91:85:dc:fc:ef:de:45:21:51:1d:64:a4:d6:
8f:5e:1f:60:29:41:ce:70:3b:20:bb:f5:30:b9:a4:
50:fa:13:51:86:6b:0d:22:3b:7a:cf:65:3a:5a:35:
7b:0e:cc:c2:e4:43:f3:ac:ae:3b:08:dd:73:59:05:
b6:58:42:bf:13:8d:71:60:26:bd:7f:eb:b4:ca:b9:
8c:28:e8:59:7b:3c:45:b1:25:a5:a6:61:43:a8:d6:
59:9a:c9:ce:2c:a1:d6:36:c6:69:aa:ff:00:00:9c:
8f:bb:59:52:ff:65:f5:d1:a8:ec:d1:50:af:a0:85:
92:6d:49:16:f8:a7:34:47:4b:9c:c2:9a:ae:e1:c8:
ba:90:2f:7e:64:79:11:11:2c:20:04:1b:0a:c0:99:
ad:f1:2d:86:d8:70:35:91:44:c1:7a:ce:ef:d1:fb:
5a:bc:99:27:78:27:99:6f:fd:17:46:21:2a:01:b0:
e1:27:68:ce:83:71:e2:ee:5d:44:48:1e:aa:d0:26:
76:6c:69:86:4d:f8:da:af:2a:c8:6d:67:b6:f4:de:
78:83:b5:d7:a1:51:4e:3b:32:6d:25:54:6c:85:af:
82:07:9c:35:65:41:00:ef:80:a8:a7:ce:23:5e:75:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:8F:DE:1F:65:58:34:4C:CF:C4:89:39:64:2A:1A:ED:AF:C5:5C
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6e:55:dc:69:9b:8b:09:24:9d:7d:9e:9c:f3:93:c1:b1:0e:
8a:64:80:f3:8c:3b:f6:1d:33:fe:e3:c5:77:5d:ba:f9:75:39:
41:e7:5b:b9:94:28:7a:82:f4:62:ce:c4:fb:b9:e0:f7:7f:cb:
5e:71:9f:8b:19:82:fb:12:64:11:94:54:98:be:6b:71:c2:c9:
c5:98:0e:b5:eb:5a:d3:4a:d7:41:51:ca:70:7a:14:56:99:f5:
92:ef:2e:3f:f5:0d:cf:6c:59:cf:5f:a5:7e:45:c7:52:5e:a1:
11:4b:45:3f:68:ff:7b:8f:92:03:7a:7d:75:a2:e2:d3:a9:63:
87:ce:f3:aa:4f:42:1b:b3:34:97:de:69:b2:b2:b8:c8:2f:12:
61:44:bc:09:82:eb:02:da:d0:1e:25:45:d4:74:60:a7:44:c5:
30:25:c5:00:98:f8:22:ed:b6:fa:59:3f:c0:09:4d:99:db:cc:
ba:fb:5f:85:3a:ac:33:0b:0a:5e:f4:e1:3c:fd:6c:70:a3:63:
a3:aa:62:ea:e0:dd:61:1c:94:0e:d1:b8:3b:ca:1a:bc:5a:31:
2f:a7:ca:03:47:f1:5c:cf:ef:c0:2f:b0:f2:64:96:3f:2f:eb:
a6:d7:b5:5a:1c:1c:cb:8e:f9:e4:5a:91:19:52:57:d1:62:49:
a2:f3:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:27 2026 by rpki-client