Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: Fs1Q7EPD9nWqjjAJ4bXOjNXolw4g94uc2UfcYBYE9XU=
Subject key identifier: 7B:14:FB:1D:22:77:7D:26:88:F0:AF:3B:DC:EE:D2:7A:C6:96:A4:CF
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 019D39418A97CF7A5CE85AC708259C77FC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 15DB
Signing time: Sun 29 Mar 2026 11:01:29 +0000
Manifest this update: Sun 29 Mar 2026 11:01:29 +0000
Manifest next update: Mon 30 Mar 2026 11:01:29 +0000
Files and hashes: 1: YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa (hash: qv62jghVn/xc1zYuKekCyiDZQVZ2Kui3yZ/JmsGwwSk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: pwoEeBdVNZ+UUPrZesBkuCp02bbjbpH3KhEMtbZzx9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8a:97:cf:7a:5c:e8:5a:c7:08:25:9c:77:fc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Mar 29 11:01:29 2026 GMT
Not After : Mar 30 11:01:29 2026 GMT
Subject: CN=7b14fb1d22777d2688f0af3bdceed27ac696a4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:a0:56:06:6e:46:72:54:d1:d8:a1:fb:87:
2f:aa:61:0a:f4:61:4e:97:d2:16:04:40:52:85:ca:
b3:1a:e9:74:45:9e:d8:f2:8d:2d:18:e9:37:22:a0:
56:f4:4f:6e:05:16:af:3e:76:a8:b8:9c:19:1d:37:
92:fd:1e:c2:67:35:3b:11:60:d1:cb:f4:61:a6:0e:
53:22:72:8a:d1:e8:60:4a:ad:59:e2:26:37:f4:83:
6a:eb:2d:67:6b:5d:22:4d:80:f7:bb:38:6b:a3:79:
d5:f5:a1:fa:88:fa:3c:5f:e3:c9:4b:f3:2c:87:2a:
84:72:cb:15:36:47:7f:e8:56:25:eb:2a:b6:05:a2:
5c:ee:91:aa:27:dc:c2:b5:d4:bb:11:fb:ca:e1:bd:
71:58:8a:c9:da:f2:a3:e1:12:19:4e:51:51:29:e2:
b2:da:fb:70:3b:52:63:ea:d8:eb:1f:88:52:21:89:
28:72:39:2f:80:0d:ea:26:c1:06:49:be:6b:e5:70:
a5:f9:ec:69:cd:73:f1:d2:ea:78:60:36:5f:4f:a8:
4a:25:44:07:18:b1:87:09:41:b6:85:93:51:89:4a:
73:46:a4:75:4f:bc:4d:c4:84:50:b5:b0:48:98:ec:
de:07:4f:e8:a8:bd:40:da:3b:22:92:39:22:5d:ba:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:14:FB:1D:22:77:7D:26:88:F0:AF:3B:DC:EE:D2:7A:C6:96:A4:CF
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2f:bd:f4:ab:a1:68:d9:da:72:54:09:76:19:1a:02:a4:88:
f5:87:6e:69:61:22:98:8a:01:a1:f0:bf:44:d3:fa:6f:72:8b:
e3:01:bc:cc:06:cc:77:75:e3:18:c5:fb:15:10:b7:42:72:11:
a0:1f:d8:2b:82:fe:41:96:ab:fb:eb:f8:ca:4b:30:71:99:9e:
05:49:aa:e8:e5:2e:15:16:7a:66:07:0e:e6:7c:08:85:7b:b1:
13:88:d9:ba:7c:fb:91:8e:0d:dc:31:7a:ad:21:00:97:78:3e:
65:47:a2:88:47:6e:fe:0d:6a:2e:9a:34:f0:b5:4b:d8:e3:33:
c9:a1:f7:a9:96:a3:02:62:ff:dc:5f:c7:2d:25:3c:f9:13:de:
ec:f1:ff:44:98:b6:f2:a6:d2:07:6b:20:c1:dc:6e:ea:b7:38:
2b:e6:ce:ff:81:77:09:6d:bc:e3:1c:47:2e:0d:7e:1a:3e:82:
25:f5:fe:d2:53:52:a8:d8:c0:7d:0c:30:16:d3:ba:df:7f:16:
3c:00:5a:98:cb:30:73:de:c9:d5:1d:67:be:d7:b3:a5:a1:ee:
58:92:e8:a2:09:51:9b:12:7f:e0:6d:3c:08:66:70:12:13:55:
69:57:c5:96:74:2a:65:7c:83:28:7c:38:91:6d:7b:8d:db:fc:
e3:a1:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:51:32 2026 by rpki-client