Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: 6ZgtyO4zz8r0RPxlzsI7rwedn2v+t61n/Ctmp6/8Jt4=
Subject key identifier: 3D:5C:70:8D:48:03:8E:D8:47:88:F1:9E:42:60:9E:55:FD:E7:19:4C
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 019D390A46C2D8834BB2DE96BBDC36EE167D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: 89B9QRpsAYslipobPKLMe4rYzLU.roa (hash: sMU4kNtcmn2Zuj4Vpvbkloa2tK9j6EDzNo9Vzz7bFFo=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: fG8nm4Cm76qtfPn1XvpfEpWp6vOlCZhW2MuQTWZEZG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:46:c2:d8:83:4b:b2:de:96:bb:dc:36:ee:16:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=3d5c708d48038ed84788f19e42609e55fde7194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:fe:9c:fc:80:96:5a:9e:61:69:7b:6d:16:
04:66:8f:e4:e5:16:dc:e7:f5:ae:fa:fc:af:ee:76:
81:68:25:40:5a:3b:70:a7:46:01:d5:5d:53:0e:57:
8a:59:c6:30:be:b1:07:1c:47:9e:27:07:80:43:4a:
22:db:bb:a5:8b:7e:d3:f8:f3:2d:f3:0d:03:29:9a:
8f:41:5d:b3:17:c5:60:a8:36:65:6e:f3:e6:be:f9:
43:29:2d:df:00:19:67:dd:43:d2:3c:d6:da:0b:f4:
05:6d:7e:23:ff:a5:6c:a3:94:34:ea:86:f7:8f:08:
f8:b7:e3:49:8d:2c:21:93:e7:1f:9f:29:4b:d6:37:
96:2d:77:cb:6a:97:b2:4f:14:ad:62:08:fd:2a:20:
c3:7b:a1:59:d6:95:12:df:64:9a:86:b6:73:ed:41:
69:30:cb:ef:10:f3:4a:1d:46:c4:e4:19:c9:5b:ad:
78:d3:e0:a8:60:65:bf:48:88:8a:fa:53:4c:33:4e:
c5:b9:34:23:12:49:6f:57:f3:23:b1:2c:19:6c:a8:
8c:cf:23:ba:3d:e9:05:29:82:88:b5:90:39:cc:dd:
94:5f:e3:fe:ad:92:93:ea:05:ac:97:be:69:54:38:
2d:4b:5e:cc:1d:98:e1:12:e5:86:c3:a8:5b:e8:38:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:70:8D:48:03:8E:D8:47:88:F1:9E:42:60:9E:55:FD:E7:19:4C
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:72:12:66:f5:f6:9e:1e:a5:46:6f:4c:ba:4a:9d:d1:0d:6e:
e2:14:18:c9:50:27:0e:57:8e:99:c6:8c:7f:c2:3f:b7:03:55:
34:c3:9d:05:d9:09:2a:f6:23:c4:fa:74:54:4c:53:32:01:27:
46:10:b5:1d:a4:93:e3:09:cc:54:6a:74:08:7f:57:f9:23:20:
a3:a7:73:fc:25:18:b8:c7:31:4d:ef:bd:5c:c7:a4:76:1d:ba:
2f:82:84:12:31:73:06:7c:fc:a3:fa:6e:38:13:6f:47:7b:f9:
c2:db:78:fe:a6:c5:69:9b:f9:6f:7d:be:52:24:6f:84:07:c1:
af:60:25:fa:92:9e:58:3f:d7:18:e5:f0:e9:75:3b:a2:fb:db:
f8:af:b7:e9:5e:97:38:2a:b1:da:95:90:9a:05:8d:6b:d1:3b:
3c:ff:e1:c3:fa:4b:c5:87:b1:9d:36:a5:d6:58:e2:b2:ef:bc:
dd:b2:2b:1e:e5:00:2a:92:b8:6b:50:0b:89:51:d8:88:2f:b9:
bd:77:60:d0:ab:be:e7:ed:01:0e:89:05:e4:5c:95:1e:7f:ee:
f4:81:5b:52:d2:72:e9:02:38:9e:1c:45:d6:75:ef:2f:15:93:
80:bb:3a:00:74:d9:3a:e4:ab:76:fc:ac:6a:2e:a0:aa:b6:cc:
9d:60:68:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:06 2026 by rpki-client