Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: PHojqAzahuzeHsGZxG3drbEeVCi6r6UVwKSdKZlJTwQ=
Subject key identifier: 74:5C:CE:AD:B3:C1:A3:A6:EA:83:55:6B:D1:A9:7D:C2:95:36:1E:53
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019D389C47B3869DA3C1C9EFF3BBAA072ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 1244
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: dZd/7keiQFYpVXMtaSvtENIdFfhF59ywcjNdb5b+3CE=)
2: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
3: G8ok4WnRssMF_kSU0fMKahJetsU.roa (hash: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=)
4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
8: nU05wjCCjQdvD0N5GwShQguLcMg.roa (hash: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=)
9: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:47:b3:86:9d:a3:c1:c9:ef:f3:bb:aa:07:2a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=745cceadb3c1a3a6ea83556bd1a97dc295361e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:19:43:b8:ae:02:16:56:cf:09:27:74:1c:
57:cd:62:d6:5f:11:7d:68:8e:e4:64:e2:95:4e:0d:
d7:42:3a:8e:8f:7f:89:10:ac:a5:fc:ad:36:94:8a:
f0:30:96:a7:b8:e9:b6:9b:d9:dc:9f:97:47:21:ee:
51:f0:2a:df:b5:e8:00:b9:1d:72:69:b9:c3:39:50:
94:52:53:b6:01:bb:5e:05:c5:53:08:5e:95:b1:42:
1d:4b:dd:38:01:d4:be:37:61:dc:9e:0c:35:fe:a0:
99:be:89:e4:fb:2c:9e:f5:2a:cd:4b:2d:6f:41:94:
22:9d:ba:61:1f:19:c2:0b:a3:91:d6:b2:c5:3d:59:
c4:5f:c0:fb:32:f8:11:90:65:20:17:a1:2f:f2:86:
7b:ea:02:9f:79:e1:32:2e:0a:9f:a3:2d:ff:13:4d:
ae:44:d8:07:60:39:1c:ef:a2:e4:5d:b8:1c:51:1b:
3a:15:ee:f3:65:91:6f:41:77:ca:eb:c7:92:73:94:
3d:ae:f6:a0:26:10:c1:5f:08:bf:1c:c5:aa:ea:f1:
38:9c:39:54:38:76:7a:8c:86:05:de:75:88:3b:5c:
ce:8a:f9:4a:2a:11:c2:e8:8c:c7:f5:72:a3:3b:45:
38:70:f0:54:94:b1:b4:0d:b3:69:79:cf:ff:3e:9f:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5C:CE:AD:B3:C1:A3:A6:EA:83:55:6B:D1:A9:7D:C2:95:36:1E:53
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:03:b0:27:49:42:e2:91:dd:d9:5d:76:60:5e:b9:24:8a:a6:
c2:4e:f7:96:52:a7:a4:23:20:c3:2d:e3:c6:4b:e8:41:72:5d:
ce:8c:4f:5f:7f:7e:f6:0b:dd:70:23:c6:7a:37:44:3f:18:f3:
c5:9c:1e:65:cc:b5:54:0d:b0:0b:1e:a9:e0:ec:ad:4a:68:6b:
6d:99:f9:86:4b:9e:61:ba:4a:47:f1:73:77:de:60:17:b1:06:
1c:4f:79:a0:b1:fb:e1:53:1b:91:08:25:d9:ca:9d:60:3f:13:
72:17:35:ab:8c:3d:5e:51:ce:91:9d:67:13:69:10:22:40:01:
6e:f6:32:2a:b7:6c:fc:fb:18:3c:5e:aa:b8:a1:cb:77:fd:b1:
45:51:96:42:c4:d7:93:c1:bd:ef:fe:76:7d:02:e5:6a:8e:9d:
20:bf:d4:6c:a5:41:e4:4e:d7:e8:9f:17:b0:1b:76:ed:1e:70:
ff:58:6c:b5:35:9e:32:01:07:aa:2d:2c:1b:d3:b3:8a:41:40:
ea:e0:55:41:ab:51:7b:f1:2c:12:29:e4:38:78:a3:5b:33:cb:
43:3c:7f:63:aa:39:0a:36:51:5a:a3:93:59:0c:e6:e7:2f:7a:
b4:d6:c3:65:40:8f:20:16:3e:17:63:8a:77:43:bd:da:1c:63:
b4:5e:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:44 2026 by rpki-client