Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
File: Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft (raw, json)
Hash identifier: kR7mjI3MZc8ze2U+cStptvtqI33vMTfVvhtDhyR1bEo=
Subject key identifier: DE:87:0F:1B:9F:BE:31:89:B0:1E:0C:40:B1:39:5C:C6:77:AA:D1:B8
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 019D3789392CAC1D5D7E3A4E30B846221FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
Manifest number: 0D1B
Signing time: Sun 29 Mar 2026 03:00:33 +0000
Manifest this update: Sun 29 Mar 2026 03:00:33 +0000
Manifest next update: Mon 30 Mar 2026 03:00:33 +0000
Files and hashes: 1: JMsELryrC71hTAcMzLYAc7CKRKk.roa (hash: rdsIPfGSMD6EsO8NTErhSi4I9C7O//GGQnV/svCoWHA=)
2: Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl (hash: A53H9CKaW4p6tbTKACa609n1nWJgdt0WCMo7KKpiBQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:39:2c:ac:1d:5d:7e:3a:4e:30:b8:46:22:1f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: Mar 29 03:00:33 2026 GMT
Not After : Mar 30 03:00:33 2026 GMT
Subject: CN=de870f1b9fbe3189b01e0c40b1395cc677aad1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:7f:64:52:2f:36:2d:48:ad:e7:19:54:5d:
43:9d:3d:ee:a1:1f:4d:0f:1f:37:fc:7b:c0:e5:4c:
62:00:c2:b1:7e:46:57:db:62:f8:6e:d3:b7:8d:cc:
be:96:00:d8:c1:5d:70:5a:30:9c:6f:e1:a5:f5:70:
df:ef:b3:24:c4:80:fa:6c:27:57:a8:58:7a:77:f2:
89:b1:e6:2a:6a:89:d2:90:57:f5:18:3f:bf:9f:fe:
5c:f7:3a:e0:c5:a8:ff:11:5a:b8:a4:73:af:d7:f6:
44:05:06:cd:63:e6:51:e2:e1:94:ad:e5:39:e3:3f:
70:47:b0:56:8e:9d:6d:8a:26:92:81:68:13:4d:98:
03:74:ca:d9:b3:a4:2b:33:fb:c1:4a:2c:29:3d:b1:
cf:ad:8c:15:ab:35:5b:99:fb:43:d2:a5:ec:b0:91:
86:b5:a9:ad:7d:68:89:61:80:22:39:96:d7:93:9a:
34:fb:a9:60:2f:bc:2c:a5:7f:23:bf:36:3e:4c:91:
2b:2f:66:8e:2e:f7:2c:c4:dd:4a:c0:46:a8:8a:87:
45:57:d4:80:ce:8a:c8:b0:3e:6f:dd:e5:77:1f:32:
bf:b4:a1:74:3b:93:72:e5:f8:e5:aa:f2:f2:48:60:
d2:96:47:2b:20:7d:5c:cf:d8:a3:f0:61:ff:d6:2a:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:0F:1B:9F:BE:31:89:B0:1E:0C:40:B1:39:5C:C6:77:AA:D1:B8
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f9:ca:f7:c8:a6:aa:ea:81:c0:2d:00:42:cd:84:47:b3:49:
3e:da:ef:b6:fb:2e:e1:86:d3:b0:94:25:92:ca:4b:f7:dd:2f:
5f:0d:f3:c7:4c:9f:72:8c:d3:d7:26:e0:29:67:8a:33:de:28:
69:12:dd:2b:7e:ad:5c:38:c9:27:86:ad:e4:05:de:54:8a:2d:
75:8d:5b:1e:de:68:bf:2a:28:7f:a2:80:c8:be:f8:82:61:3e:
0f:d0:ab:7f:a2:cf:39:4b:d3:ef:2e:15:29:f5:e7:8e:e8:a2:
19:78:26:86:34:2c:df:4e:72:0f:43:b2:50:b7:7b:49:27:a3:
72:0f:d2:40:60:fb:88:bf:91:29:46:7d:63:4f:52:8e:9e:c8:
28:97:62:ca:8b:7a:05:c3:19:f8:4e:11:f1:bd:24:ba:ed:49:
2f:50:5f:8e:1a:d7:44:c5:98:bb:b6:11:93:d5:33:a2:47:b9:
30:c6:00:2d:f0:f6:68:ff:b2:5b:03:d8:c3:0a:94:ac:27:85:
0d:05:18:5f:d5:5d:05:7a:98:c8:ab:79:50:07:e9:14:52:91:
a1:f7:dd:b4:94:55:6c:1f:60:d1:13:17:ff:69:e7:6a:49:4b:
56:8a:7a:33:ec:05:62:04:66:e5:6b:dd:b0:64:11:e5:cf:63:
8d:bd:d4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:58 2026 by rpki-client