Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: kOWtg+7r/Hy6RJo+umzpLheBTVHa0VCLKRJsJqZ7iRo=
Subject key identifier: B1:BA:F9:69:27:4D:DF:20:65:15:AD:BC:F6:F9:03:40:66:60:52:EB
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019D11C5754A57FDF57336C4C3D030A52886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0D5F
Signing time: Sat 21 Mar 2026 19:00:46 +0000
Manifest this update: Sat 21 Mar 2026 19:00:46 +0000
Manifest next update: Sun 22 Mar 2026 19:00:46 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: 8uJNabeHMJ+aSJrsYunpR0QbnXC/dx2FAYrp9TyNuds=)
2: rhstuAH1RjeoFX9aBL9o13FXeo8.roa (hash: V/dFIE6DEQQYxzvLKa9DV5po5slChYjT93vla6o5qEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:c5:75:4a:57:fd:f5:73:36:c4:c3:d0:30:a5:28:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Mar 21 19:00:46 2026 GMT
Not After : Mar 22 19:00:46 2026 GMT
Subject: CN=b1baf969274ddf206515adbcf6f90340666052eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:6a:d0:62:77:3e:6c:d1:a2:90:dd:b0:cf:
67:a5:20:e2:60:6d:08:2f:1b:df:49:6e:94:d4:aa:
73:0e:ed:47:e8:31:82:81:70:f4:ec:47:4f:9a:ee:
8a:3c:5a:53:f3:18:37:a6:46:e7:c8:ad:24:dc:0d:
7e:15:1e:5a:c9:fb:b0:a0:7e:90:ee:ae:29:0e:66:
a9:c8:dd:72:0e:89:3d:79:32:d6:68:d5:9f:56:64:
71:40:ed:e4:9d:1c:0b:e9:88:64:05:ce:12:67:95:
b7:aa:50:00:06:ec:5d:b4:1b:bb:e7:67:cc:4f:02:
1f:3c:ce:f5:78:52:2e:12:f3:6f:5e:76:30:f9:88:
e7:a2:75:f3:f5:a7:f3:a9:b4:82:f3:05:bf:5d:fe:
58:c4:e5:63:8c:77:2c:06:1b:a5:f3:54:d1:e9:3d:
2b:36:a8:d1:fc:57:ce:06:1f:d2:58:1e:76:aa:53:
3d:ad:4f:b8:08:3a:5e:01:1b:b2:dd:26:86:15:3d:
d5:5a:0c:f9:ad:04:d4:11:e3:2f:7f:14:dd:c4:fe:
74:46:e4:f4:c7:bc:33:e4:9b:05:f5:43:f7:a1:d0:
ba:f6:6f:29:af:50:f4:52:a6:cf:07:9f:ad:43:1b:
07:06:80:84:46:3c:63:93:9e:1f:ba:0a:12:10:c9:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BA:F9:69:27:4D:DF:20:65:15:AD:BC:F6:F9:03:40:66:60:52:EB
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:04:cd:12:89:26:73:90:3f:c7:e7:64:b0:f0:40:3b:88:63:
be:71:f4:94:d8:20:61:72:fc:9f:af:85:90:2e:50:04:b9:c2:
58:bc:8d:04:1c:f7:9e:76:46:73:a3:87:91:e3:74:93:78:be:
7e:15:17:21:48:c1:53:88:c2:33:a8:8d:12:05:a7:3e:06:c8:
40:72:31:56:1d:09:ec:79:59:77:fc:0a:cf:68:28:de:9a:b3:
5a:21:ab:93:ee:7b:eb:70:0e:ab:62:b1:61:30:4c:c8:82:7d:
1e:04:e9:c1:9b:d6:06:64:ef:36:09:e2:d3:da:11:ab:28:6e:
64:75:6a:41:e2:09:f7:2f:16:c0:57:2a:7d:7e:84:92:0f:1c:
84:02:e3:fc:27:16:de:fd:64:9c:ba:0b:de:55:55:ab:46:12:
50:b6:86:f5:dd:48:ab:39:07:4f:e1:3d:e8:01:e9:ea:b2:59:
0b:a2:4d:62:c6:bb:bd:d3:49:e4:ae:ad:11:4f:99:50:b6:d3:
06:95:bb:00:4b:72:60:35:49:0a:aa:55:1b:68:48:4d:3f:e5:
7c:81:0c:07:2d:08:e1:3c:eb:70:a8:78:ad:ed:89:09:f4:1f:
e1:06:91:2d:ef:ab:43:31:97:f4:88:36:19:ec:d3:88:ce:a9:
51:68:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:08:31 2026 by rpki-client