Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: CCtT9vINkKt8tRhGRHvaIXYt+k2mrS87KGaO5z4wgTo=
Subject key identifier: 46:6D:05:55:AA:5A:67:52:76:F0:35:C8:55:A9:EC:8A:DF:53:35:BD
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019CE44784CA10C8182401CEBBBDDB50765E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 1559
Signing time: Thu 12 Mar 2026 23:00:18 +0000
Manifest this update: Thu 12 Mar 2026 23:00:18 +0000
Manifest next update: Fri 13 Mar 2026 23:00:18 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: jkiNcXSgUlB6/unbBVteP2Jv+kWhKyESostq1WC7zQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:84:ca:10:c8:18:24:01:ce:bb:bd:db:50:76:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Mar 12 23:00:18 2026 GMT
Not After : Mar 13 23:00:18 2026 GMT
Subject: CN=466d0555aa5a675276f035c855a9ec8adf5335bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:15:8f:09:a7:58:d7:93:61:e9:d4:57:f3:
36:f2:e4:99:b7:b6:07:08:fd:28:7a:fd:d3:02:25:
f7:c0:7c:29:f3:a9:35:49:b5:54:8f:a0:72:81:76:
58:f7:d7:b9:bb:07:3c:99:14:7b:92:42:36:96:22:
ee:eb:a9:9f:86:f6:42:e3:ae:34:55:6d:40:b1:5c:
2f:8f:6d:a0:37:6f:03:b0:c3:b8:5b:d4:d1:f6:bb:
8c:b1:0d:60:b4:08:ac:8e:1f:92:4d:97:ec:76:cc:
a0:b7:2a:72:52:bb:e4:95:b0:e9:fe:f5:cf:d1:77:
f4:db:17:b2:5c:11:ae:8b:42:87:a9:8e:b5:92:6b:
52:32:8b:7f:25:22:d1:26:28:1c:19:a6:91:d2:00:
fc:f7:b5:ed:0a:d7:b6:6f:e1:ec:8b:f8:ae:ff:4c:
d5:de:0f:04:0d:fa:45:f2:19:e2:a3:5a:44:01:e9:
a3:57:84:d2:61:ee:ef:7a:e2:b1:0a:fe:72:50:20:
59:29:76:bb:8c:9a:75:3a:fd:c6:2c:6a:35:e0:38:
e4:9d:5a:d2:9f:0a:51:51:98:3f:33:ca:2c:db:61:
37:2f:f5:0d:0f:b9:62:70:e1:96:50:7c:2e:29:d0:
2a:1c:f6:7c:42:b4:48:6f:71:d6:f3:8d:46:55:83:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6D:05:55:AA:5A:67:52:76:F0:35:C8:55:A9:EC:8A:DF:53:35:BD
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:67:4b:8a:39:f7:c1:6b:f6:c7:27:10:93:83:17:ca:d1:
d0:63:08:ae:06:86:d7:5a:51:6e:59:f6:a4:a2:2c:cf:82:44:
66:53:94:27:79:69:83:5f:41:d3:c3:ff:44:22:15:e4:33:48:
8e:b1:83:ee:11:10:fb:b4:7e:c5:f1:c2:0f:2a:fa:7b:15:26:
e5:65:e3:ca:76:35:d0:7f:5c:3b:2c:fa:17:11:ec:55:38:28:
a9:68:83:c2:5e:05:61:ba:c3:65:21:62:6a:d7:f0:f8:ca:4d:
81:e0:e7:6b:17:3b:cd:06:6e:87:4b:ad:f9:85:e8:6b:61:7c:
f8:e5:8d:c6:64:03:16:9f:96:2d:92:8b:ec:aa:3a:30:73:02:
f2:58:8e:01:31:df:2f:8b:ab:87:a2:99:1b:d4:da:82:09:37:
c7:f5:a6:b1:fb:ab:8f:e9:1d:76:62:ae:6b:36:a3:9d:d1:70:
6e:2c:cd:f8:a3:be:b8:0d:3e:40:5e:0c:0b:c3:21:c4:ea:d8:
b4:ed:cb:32:c1:ac:69:08:1f:e6:c6:f0:db:e0:90:30:24:6f:
2c:58:43:95:83:4a:4e:c4:1a:c6:e4:e0:8b:77:1f:0f:9f:94:
67:79:ef:22:0e:d6:bf:23:28:98:6d:cd:24:47:66:98:e8:d5:
b5:59:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:46:48 2026 by rpki-client