Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/37ee5a-37c3-4870-80a8-37d89bfff533/1/q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.mft
File: q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.mft (raw, json)
Hash identifier: iOLfeKHSwdkEMTGckJp5N6+R/szRiWkvh0x2wLS/DFY=
Subject key identifier: 43:81:E0:42:26:DE:5A:24:41:E6:68:A3:C0:6C:E5:46:8D:43:CE:86
Authority key identifier: AB:C4:E7:3B:C3:61:A2:40:FF:6C:91:B6:15:DE:18:F4:E4:19:EE:1A
Certificate issuer: /CN=abc4e73bc361a240ff6c91b615de18f4e419ee1a
Certificate serial: 019D3789B55EB5D791E46E699A24886F37DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/37ee5a-37c3-4870-80a8-37d89bfff533/1/q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.mft
Manifest number: 2B
Signing time: Sun 29 Mar 2026 03:01:04 +0000
Manifest this update: Sun 29 Mar 2026 03:01:04 +0000
Manifest next update: Mon 30 Mar 2026 03:01:04 +0000
Files and hashes: 1: N_GZFv3dxb5gkAlEGd7wrBYoZOk.roa (hash: MoEaLpF3jwIKQnodn4bvPZXH0ettOU1ZnvcKhF0aAaQ=)
2: q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.crl (hash: AveJKfD6aN8LgynmwgFMpZYe1xcL7f95kwTGYc6AzvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/37ee5a-37c3-4870-80a8-37d89bfff533/1/q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/37ee5a-37c3-4870-80a8-37d89bfff533/1/q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b5:5e:b5:d7:91:e4:6e:69:9a:24:88:6f:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc4e73bc361a240ff6c91b615de18f4e419ee1a
Validity
Not Before: Mar 29 03:01:04 2026 GMT
Not After : Mar 30 03:01:04 2026 GMT
Subject: CN=4381e04226de5a2441e668a3c06ce5468d43ce86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:50:c1:a6:45:3a:2b:ed:9d:46:c7:43:5f:
14:59:07:9d:98:7e:c3:11:4a:b7:1d:28:5b:ab:44:
fb:c0:58:af:69:56:c9:26:b4:3e:f1:05:d8:dc:8d:
b1:6a:66:d4:c5:96:7c:a9:94:cc:76:0d:24:53:4c:
cf:86:d8:5a:05:b2:e8:75:8c:a8:36:f2:f5:8c:9c:
aa:0c:9a:aa:8f:a1:1d:4e:72:d2:15:19:a2:07:2f:
de:a1:ae:72:26:51:c1:fc:fb:33:c0:ed:e0:7c:0c:
95:67:06:b1:78:b3:15:ab:c7:72:84:7b:51:78:3a:
81:ce:d0:07:c5:b0:e5:11:61:fe:0c:11:18:a1:43:
da:3b:cc:02:b1:81:58:43:a2:65:e0:ef:aa:b6:c2:
8a:b1:89:27:1d:b1:ba:48:79:6d:88:1c:1f:ec:48:
98:ec:18:fd:0a:e5:22:5a:70:5d:f5:2e:b9:f5:ae:
70:98:7a:5c:2e:de:c2:86:0f:a9:62:49:0c:80:90:
06:a9:9e:b8:e6:26:eb:a2:48:47:1d:91:e2:1b:27:
d8:be:e0:37:7b:3a:1c:f0:92:e0:d0:2f:67:5b:28:
58:85:26:d6:3e:00:ca:d1:dc:2f:17:08:66:99:e7:
2e:a3:ef:ac:3f:4c:d4:86:7c:5e:9a:c8:f7:cc:69:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:E0:42:26:DE:5A:24:41:E6:68:A3:C0:6C:E5:46:8D:43:CE:86
X509v3 Authority Key Identifier:
keyid:AB:C4:E7:3B:C3:61:A2:40:FF:6C:91:B6:15:DE:18:F4:E4:19:EE:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/37ee5a-37c3-4870-80a8-37d89bfff533/1/q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/37ee5a-37c3-4870-80a8-37d89bfff533/1/q8TnO8NhokD_bJG2Fd4Y9OQZ7ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2a:03:1f:7d:ca:9c:c8:7f:c6:54:dc:62:fd:70:26:f1:a9:
fe:7d:93:ff:a6:b2:91:e9:a6:42:1b:02:bc:b1:90:1c:a0:31:
84:a4:3c:99:df:d9:de:c8:88:11:71:53:61:48:5d:8f:ca:91:
29:bc:32:ed:31:35:bd:aa:b5:7a:f5:32:73:91:63:f5:e9:69:
54:ec:e4:84:82:ef:75:91:90:90:f0:5a:0d:97:b2:67:70:03:
3d:8e:b6:d8:6a:08:a7:a6:5c:da:47:3a:01:3f:80:0b:ee:96:
19:bf:8e:d3:8b:da:58:dd:9f:51:34:46:44:4d:0b:50:c0:b5:
75:a3:49:cd:ef:1f:a6:36:28:9d:6c:42:8e:d1:9a:8e:e7:7f:
1c:78:6e:6a:b6:01:bc:18:eb:b3:6f:a3:de:2a:f7:9b:56:80:
4d:6c:b7:3d:46:c1:e4:67:3d:cc:3f:de:d7:be:b5:ef:43:f0:
0c:8c:d7:7e:4b:40:62:4f:a8:62:6c:b2:9f:86:14:b0:82:34:
00:a6:70:b2:af:fe:f0:21:c4:05:1b:d2:db:c2:69:0c:e5:4c:
9c:5d:91:10:98:e1:de:9d:a1:f3:e9:57:83:46:92:df:04:12:
84:f6:64:1c:7a:de:a3:93:19:5a:5e:6d:e7:41:f7:15:cb:e1:
a8:0e:ab:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03ibVetdeR5G5pmiSIbzfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzRlNzNiYzM2MWEyNDBmZjZjOTFiNjE1ZGUxOGY0ZTQx
OWVlMWEwHhcNMjYwMzI5MDMwMTA0WhcNMjYwMzMwMDMwMTA0WjAzMTEwLwYDVQQD
Eyg0MzgxZTA0MjI2ZGU1YTI0NDFlNjY4YTNjMDZjZTU0NjhkNDNjZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ5QwaZFOivtnUbHQ18UWQedmH7D
EUq3HShbq0T7wFivaVbJJrQ+8QXY3I2xambUxZZ8qZTMdg0kU0zPhthaBbLodYyo
NvL1jJyqDJqqj6EdTnLSFRmiBy/eoa5yJlHB/PszwO3gfAyVZwaxeLMVq8dyhHtR
eDqBztAHxbDlEWH+DBEYoUPaO8wCsYFYQ6Jl4O+qtsKKsYknHbG6SHltiBwf7EiY
7Bj9CuUiWnBd9S659a5wmHpcLt7Chg+pYkkMgJAGqZ645ibrokhHHZHiGyfYvuA3
ezoc8JLg0C9nWyhYhSbWPgDK0dwvFwhmmecuo++sP0zUhnxemsj3zGmOqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOB4EIm3lokQeZoo8Bs5UaNQ86GMB8GA1UdIwQY
MBaAFKvE5zvDYaJA/2yRthXeGPTkGe4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThUbk84Tmhva0RfYkpHMkZkNFk5T1FaN2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zN2VlNWEtMzdjMy00ODcwLTgwYTgt
MzdkODliZmZmNTMzLzEvcThUbk84Tmhva0RfYkpHMkZkNFk5T1FaN2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zN2VlNWEtMzdjMy00ODcwLTgwYTgtMzdkODliZmZmNTMz
LzEvcThUbk84Tmhva0RfYkpHMkZkNFk5T1FaN2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSoDH33K
nMh/xlTcYv1wJvGp/n2T/6aykemmQhsCvLGQHKAxhKQ8md/Z3siIEXFTYUhdj8qR
Kbwy7TE1vaq1evUyc5Fj9elpVOzkhILvdZGQkPBaDZeyZ3ADPY622GoIp6Zc2kc6
AT+AC+6WGb+O04vaWN2fUTRGRE0LUMC1daNJze8fpjYonWxCjtGajud/HHhuarYB
vBjrs2+j3ir3m1aATWy3PUbB5Gc9zD/e176170PwDIzXfktAYk+oYmyyn4YUsII0
AKZwsq/+8CHEBRvS28JpDOVMnF2REJjh3p2h8+lXg0aS3wQShPZkHHreo5MZWl5t
50H3FcvhqA6rqQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:47 2026 by rpki-client