Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: t+b2jEXUN7wOowjhEByLe0CXeZ4udXhiD+XVmbtoQi0=
Subject key identifier: 2B:98:CD:5C:7F:4A:F7:D1:AC:15:3F:37:EE:68:A3:2E:F6:08:BC:ED
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 019D390A45043A9BD515809AD76C9D6EEE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 06C8
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: OEKZs0V1OvPJXM--EEoOQzvnjxU.roa (hash: IA4xXF3SM3MMssScw4atGZl6MKvdjLCpQTou+Su+nF0=)
2: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: 5MLehF1zZpVRgierTxUC5I2cYIlSiPV4VI+1GACvVQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:45:04:3a:9b:d5:15:80:9a:d7:6c:9d:6e:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=2b98cd5c7f4af7d1ac153f37ee68a32ef608bced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:96:d6:9d:50:f6:57:91:41:d0:39:e7:ff:
6e:d2:ee:8d:4b:bf:49:58:7f:fc:61:a7:30:59:93:
d4:31:62:6a:ab:8b:65:25:ea:90:61:b6:0a:39:60:
f5:5b:3b:47:0b:ef:51:86:4a:7b:dd:7d:73:27:24:
8d:5e:8b:40:98:91:65:ca:53:2c:e5:1f:38:b8:d3:
a7:46:38:ab:7e:31:36:d5:92:17:3d:ed:84:14:e0:
83:ed:5e:8b:9e:42:03:1c:1d:32:60:b2:0e:4c:19:
aa:b4:e9:7c:10:68:90:ee:a6:c9:11:85:64:70:18:
b2:25:04:cc:34:6a:e1:0b:f0:fd:dc:94:7b:f6:31:
e5:4d:b9:23:79:48:52:d2:56:3d:a3:1f:3e:8d:76:
a3:4e:3e:1b:7a:1f:28:e3:09:b5:49:0b:da:0a:09:
d2:15:93:2e:ef:ea:60:1f:da:cd:9d:45:1c:9d:0a:
c0:cc:c4:90:4a:1e:c3:89:82:d2:5a:4d:72:d8:61:
5c:98:0d:3d:e0:e9:dd:76:23:49:dc:2f:bd:f8:5c:
e1:22:2c:88:d5:0a:60:9f:0d:03:fd:d0:c7:6b:45:
52:ae:e2:6a:08:1a:d2:cb:50:eb:ed:d0:46:09:90:
9e:e7:a3:61:ce:72:b5:1a:a4:af:96:09:ca:ee:4a:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:CD:5C:7F:4A:F7:D1:AC:15:3F:37:EE:68:A3:2E:F6:08:BC:ED
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:be:3c:ed:28:83:5b:86:25:20:0f:f8:34:e1:fa:bc:c8:1e:
93:ee:b4:15:62:50:59:d4:7d:77:9f:ea:fd:6a:fb:5c:7f:91:
4f:93:10:2e:5c:ea:32:19:83:4c:e0:56:e4:55:a1:21:a1:b0:
b8:7a:70:4c:e6:16:f8:87:66:5d:a0:ee:8a:8e:e7:cf:2c:bd:
d6:68:77:f6:8f:07:a1:27:3f:2f:c9:78:84:59:23:fe:57:c9:
3a:77:65:cd:c5:3e:f5:8c:0f:1c:3f:90:31:ce:52:c5:c1:36:
87:33:09:76:a9:65:bf:c1:fb:62:9b:ee:ef:78:19:58:a8:c1:
d0:9c:d6:e1:53:61:0b:5d:5c:cb:52:cc:2f:28:13:d4:44:1e:
e0:bb:2e:b4:e0:fb:90:9a:db:b2:27:36:62:0c:25:31:e3:6b:
fd:9a:61:17:04:8b:6f:2b:54:45:19:d0:8d:65:5a:d1:86:7f:
c4:63:2f:91:67:27:d8:ad:ce:1e:9a:2b:6d:2f:d3:fa:c1:ec:
7c:67:fd:53:f7:d8:e2:7b:ba:57:93:3d:b3:16:78:20:87:56:
a3:e6:6a:af:ee:ed:85:98:b8:ad:8f:3c:1a:11:6f:c3:bf:ef:
e8:6b:70:fc:4d:c9:ee:40:f7:06:39:85:8b:35:df:95:e2:60:
7a:2a:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:54 2026 by rpki-client